tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f9:17:54:6a:94:87:66:11:9e:cd:11:9a:9b:7c:37:fa:2f was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f9:17:54:6a:94:87:66:11:9e:cd:11:9a:9b:7c:37:fa:2f
Serial Number (int): 346098177717136677242006821595168231651887
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8a:02:9b:a2:e2:24:1e:f9:6f:97:d4:a4:2f:f0:48:92:c5:26:a5:23
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 34:10:7c:e7:7f:4e:89:3e:ac:0c:63:aa:8f:3f:1c:a5:8b:95:89:a6
Fingerprint (sha256): 54:25:41:87:03:f0:39:05:69:3a:86:81:b9:f3:81:fa:53:84:12:cc:dc:a7:37:64:3f:29:5d:7b:ae:ff:6c:f2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.clubsinthecity.org
blogg.clue.no
clubsilencio.net
clubsustentable.org
clubtaurindeparis.com
clubtfs.com
clubtracts.com
clubtriatlonalmendralejo.com
clubtriatlontritondelpardo.com
clubtrotters.me
clubuac.com
clubukelelevalencia.com
clubulcititoarelormoderne.com
clubulvirtutilor.ro
clubunescoancona.org
clubvbdrakkar.com
clubvi.com
clubvilladealgetefs.com
clubvino1.com
clubwitsend.com
clubwitsend.net
cluck-cluck-coops.com
cluckinhens.com
cluckyhenfarm.com
clue-x.com
cluecompany.no
tls.automattic.com
www.clubsiambrettabsas.org
www.clubsilencio.net
www.clubsustentable.org
www.clubtaurindeparis.com
www.clubtfs.com
www.clubtracts.com
www.clubtriatlonalmendralejo.com
www.clubtriatlontritondelpardo.com
www.clubtrotters.me
www.clubuac.com
www.clubukelelevalencia.com
www.clubulcititoarelormoderne.com
www.clubulvirtutilor.ro
www.clubunescoancona.org
www.clubvbdrakkar.com
www.clubvi.com
www.clubvilladealgetefs.com
www.clubvino1.com
www.clubwitsend.com
www.clubwitsend.net
www.cluck-cluck-coops.com
www.cluckinhens.com
www.cluckyhenfarm.com
www.clue-x.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tChZdJ+xOe24KyFLsPl
bsqSXuyHb6Gc4FRaEmQcv5FFDJumsH7ARViZKiSKWQb928O4OT0XQ/g61AgzqlT6
e+ZUlEhWhi3eer3WGTLMILfLiAp0Z41Jn/7R5OipkbwURwsa9xMyFU55RL/q3dQU
kVOY4IQnHZIKPRjSNqiTjnDOTJVSNz9fwO2fL5UWn+2D+GHSHFXyBl7mUwfc0cdu
8IkuNjc+TM8OqlVkLVyhy3xVO0oVlLUWuYmJkt/j4KC9zZV/GSDlgSXsCbn1MuUA
JBMUY03tlPF5on4L38zwRSNhVNM2xqPhUcy3XKV6fOaW77FF38gL72IsQPhzqG5n
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346098177717136677242006821595168231651887
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-30 11:31:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-28 11:31:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28127783216630564554113133330176903362098321332943848417059489495726299751249390472802275544017059114529032451836087069557027244079225350493526144232417965991319682029382698516479747241300333119047715744838810858213559739113100216167726252225545453033266657015704800048696624512874793726328815214326736550493500519370145965008698024905248754392168935379545654721539203915573560135539448645608649554723733624548523952374820113572035668242866932647789379931259803928470193629226668031532752726314514466670556654823735718098001875943988148245121468268272184259390420719855086140902450698367872274628356157443701816059863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a029ba2e2241ef96f97d4a42ff04892c526a523
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.clubsinthecity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogg.clue.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubsilencio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubsustentable.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubtaurindeparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubtfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubtracts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubtriatlonalmendralejo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubtriatlontritondelpardo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubtrotters.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubuac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubukelelevalencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubulcititoarelormoderne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubulvirtutilor.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubunescoancona.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubvbdrakkar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubvilladealgetefs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubvino1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubwitsend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubwitsend.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluck-cluck-coops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluckinhens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluckyhenfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clue-x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluecompany.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubsiambrettabsas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubsilencio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubsustentable.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubtaurindeparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubtfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubtracts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubtriatlonalmendralejo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubtriatlontritondelpardo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubtrotters.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubuac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubukelelevalencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubulcititoarelormoderne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubulvirtutilor.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubunescoancona.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubvbdrakkar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubvilladealgetefs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubvino1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubwitsend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubwitsend.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluck-cluck-coops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluckinhens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluckyhenfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clue-x.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016450acd224000004030047304502202d1f2222b00f763a1e3feecf56b9831ebbec036bd17be30726ec4c4eb01ab542022100cc653ab142b34da5ab55dd97045e2716ccbb1fa7277fa33c196c491ed9441d19007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016450acd235000004030047304502205ba1e1781a3a51826c703fdde695d36dd9510b655d46eac63c30a0f435b217d202210098040a34a316fd87e2e86e3c79bbd8da11dce8c1043208774bbe12f1019401c3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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