tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d7:9f:5a:42:53:35:dd:fa:d7:b5:ea:33:22:b8:8a:4b:cd was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:9f:5a:42:53:35:dd:fa:d7:b5:ea:33:22:b8:8a:4b:cd
Serial Number (int): 334709382586561221735167145334303602920397
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 22:6d:0a:50:d7:36:56:b4:ed:ab:10:58:b4:8e:4f:33:54:fe:b3:81
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 46:f8:a6:dc:c3:d0:09:b4:e4:92:40:07:8b:7e:84:30:fb:be:f3:41
Fingerprint (sha256): 52:68:04:9b:b8:ce:9b:bb:58:6f:42:89:26:8a:7f:a0:12:50:81:b0:f7:24:d5:5b:37:41:62:30:09:43:2f:8a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.historichotels.org
historicalsocietyofeastonct.org
historicalsocietyofelba.com
historicaltheology.org
historicalthinkingmissionscanada.net
historicaltruthproject.com
historicalwilliamsburg.com
historicathenaeum.com
historicbarnssanjuanislands.com
historiccitiesrules.com
historicclubcastrovillari.com
historicdc.com
historicdc.org
historichighway101.com
historiclittleswitzerland.com
historicmarcosregister.com
historicmichiganroad.org
historicnewyorktours.com
historicobarakaldocf.com
historicoccasions.com
historicophiles.com
historicparanormal.net
historicparkavenue.org
historicparkview.org
historicplaceswellington.org
historicsantabarbara.com
tls.automattic.com
www.historicalsocietyofeastonct.org
www.historicalsocietyofelba.com
www.historicaltheology.org
www.historicalthinkingmissionscanada.net
www.historicaltruthproject.com
www.historicalwilliamsburg.com
www.historicathenaeum.com
www.historicbarnssanjuanislands.com
www.historiccitiesrules.com
www.historicclubcastrovillari.com
www.historicdc.com
www.historicdc.org
www.historichighway101.com
www.historiclittleswitzerland.com
www.historicmarcosregister.com
www.historicmichiganroad.org
www.historicnewyorktours.com
www.historicobarakaldocf.com
www.historicoccasions.com
www.historicophiles.com
www.historicparanormal.net
www.historicparkavenue.org
www.historicparkview.org
www.historicplaceswellington.org

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWDTmsnpagtm4KG1KvGt
iBCfzGkBgFfUfCzQqqbXCAsxPJT61fnn0+0yp69J1hbqL4ZSNheA50bL3v6OZJve
I7HctlPhGpqgXcTmAr1ZHMJ5dumVqR3xIDE+ICbcTdOnaVM649jq7Ag1AImUjqDH
RBEukAprl+oEL2H1mGr1TVY8kP2+QogQwMVo5vglrWhCaQuJcEjGNsYWeSE1Ao5e
r1+h4wUVjquTOvOK7iDDKGUIjsgIdHhpuGROkNdfISHu/XZAKJfeqyamHcOXTLhO
Txvr+C0h50aBUnli8VXcsKVxBrgKs0Y2v8xJAKnY0dFPNKyD47j7luOXPI8cKpUW
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334709382586561221735167145334303602920397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-08 01:51:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-08 01:51:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25421646264644386208397847399553156901723487423112761242060134528310484502781700585910382216531131683178898769640624579443895576447370737951644383080768674198261322352187861607421183154664858588604674201805445081463177866820381500757742368653391186803198861503966770713707974207561589512813782855139732378895743824870217163414898865970343348626523338349034384260946555515761342594670743300014880951477376524571029835945308816399316935239565920641898121259159250657860088805448642689211433928117242796588248228737206548665759561470917817022809190091978731541934736310329078509258814238660854810287894826264015993640641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							226d0a50d73656b4edab1058b48e4f3354feb381
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1429 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.historichotels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalsocietyofeastonct.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalsocietyofelba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicaltheology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalthinkingmissionscanada.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicaltruthproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalwilliamsburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicathenaeum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicbarnssanjuanislands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historiccitiesrules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicclubcastrovillari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historichighway101.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historiclittleswitzerland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicmarcosregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicmichiganroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicnewyorktours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicobarakaldocf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicoccasions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicophiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicparanormal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicparkavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicparkview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicplaceswellington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicsantabarbara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalsocietyofeastonct.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalsocietyofelba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicaltheology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalthinkingmissionscanada.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicaltruthproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalwilliamsburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicathenaeum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicbarnssanjuanislands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historiccitiesrules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicclubcastrovillari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historichighway101.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historiclittleswitzerland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicmarcosregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicmichiganroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicnewyorktours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicobarakaldocf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicoccasions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicophiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicparanormal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicparkavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicparkview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicplaceswellington.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001682b5f92d1000004030046304402206421a09bc5cb8e37d835594be4ccbd41d98e29b352d33c8f893c7d1414c310150220549a6dbef9d2a57b52e25fed0b3b52af75de4d36de11b3ae0fe62d7e8c4c53e700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001682b5f94cc0000040300473045022100d2f214cba213851dca51700401048973292eaadb8a517dab53e1cd29e06c40af02206829cc7a15181cc16a022199cdc60b94abb9be29768d75bb47562f3c2eb394a5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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