tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:68:49:3c:9c:82:27:08:2a:09:b9:be:c5:0f:af:4a:86:94 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:49:3c:9c:82:27:08:2a:09:b9:be:c5:0f:af:4a:86:94
Serial Number (int): 296823572310929790170265684152329909733012
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 93:7b:c6:6a:97:5d:b9:1a:26:18:80:c9:c9:22:45:2a:fc:ec:19:8f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e6:7b:0d:4e:cd:8f:c7:48:36:c0:ee:00:5f:38:5f:ab:2a:05:b3:18
Fingerprint (sha256): 4e:c9:34:d2:64:d9:72:d9:21:50:f8:c8:d5:6c:f7:fb:36:8d:68:76:39:e3:06:d2:da:06:0e:96:e7:b6:b8:82

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mendicute.net
mendilloart.com
mending-fences.com
mendingbabyloss.com
mendingbabyloss.org
mendingdrybones.com
mendingfencesblog.com
mendingfencesin.com
mendingmindz.com
mendingmybrokenheart.com
mendingstones.com
mendingwithgoldacupuncture.com
mendiventures.com
mendlendez.com
mendmermaidland.com
mendmydress.com
mendocinocannabispolicycouncil.com
mendocinoheritageinitiative.com
mendocinoinsight.com
mendocinomeditationcenter.com
mendocinosprouts.com
mendocinovets.com
mendocoastanimals.com
mendoglo.com
mendolakefoodhub.com
tls.automattic.com
www.mendicute.net
www.mendilloart.com
www.mending-fences.com
www.mendingbabyloss.com
www.mendingbabyloss.org
www.mendingdrybones.com
www.mendingfencesblog.com
www.mendingfencesin.com
www.mendingmindz.com
www.mendingmybrokenheart.com
www.mendingstones.com
www.mendingwithgoldacupuncture.com
www.mendiventures.com
www.mendlendez.com
www.mendmermaidland.com
www.mendmydress.com
www.mendocinocannabispolicycouncil.com
www.mendocinoheritageinitiative.com
www.mendocinoinsight.com
www.mendocinomeditationcenter.com
www.mendocinosprouts.com
www.mendocinovets.com
www.mendocoastanimals.com
www.mendoglo.com
www.mendolakefoodhub.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEPWGFCo1lVtHXlgeXik
82xYivMWa/6z8streqRSsP/Mi5B3sNKtY0D5bmDQjns2mlBnwbDh8PWpDEyE/YYW
Pm3KSdj3LoiuRKcSbnKEjDlqtojCfj41y25wu3kOwVjDIsQmQ1v2QcvQbAr2mGbQ
6gFvbwVb/PdVJF3t1pTglkTUuL6VOuHETOiqzQXMsG6rSgO3MvKJwnNpCcvwI1bi
pok/77drYDCUMrbWKm7x1Oc6U0eJoJCvDnvY0gHKvA5kM01UsP1FpOUGm8jzrtkd
9r2PAhnRFWpRRpbn64g8dxKR9zQQ6dUaBmb69qzJBdvGJrkGVfEjry8n8VqgRJAb
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296823572310929790170265684152329909733012
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-23 23:10:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-21 23:10:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22756346224369243950192177624243816333740619143888688456723207234288395631068116561091626684621401627369077982003783561863598984582659173202077644449746812399359955624708604974165867214350416537682936033392081437550601833338431854940271160469119494239608665692679944582113507420479959828920492506696606001183884667945986301603125574736981876507753665182817950235024968636338629502278467435792566983466239838297877362109223306943696591884719962301827865705578589990185302357425465644044671372817687979356245134380307510684676484309696468687392466475760782901662601626609105107509455895045975544215603418684433095465827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							937bc66a975db91a261880c9c922452afcec198f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1222 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendicute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendilloart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mending-fences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendingbabyloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendingbabyloss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendingdrybones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendingfencesblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendingfencesin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendingmindz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendingmybrokenheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendingstones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendingwithgoldacupuncture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendiventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendlendez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendmermaidland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendmydress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendocinocannabispolicycouncil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendocinoheritageinitiative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendocinoinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendocinomeditationcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendocinosprouts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendocinovets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendocoastanimals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendoglo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendolakefoodhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendicute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendilloart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mending-fences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendingbabyloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendingbabyloss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendingdrybones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendingfencesblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendingfencesin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendingmindz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendingmybrokenheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendingstones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendingwithgoldacupuncture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendiventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendlendez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendmermaidland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendmydress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendocinocannabispolicycouncil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendocinoheritageinitiative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendocinoinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendocinomeditationcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendocinosprouts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendocinovets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendocoastanimals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendoglo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendolakefoodhub.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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