tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2e:8e:34:14:ad:80:42:11:f2:79:70:84:9a:f1:da:9e:64 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2e:8e:34:14:ad:80:42:11:f2:79:70:84:9a:f1:da:9e:64
Serial Number (int): 277178867467876369267291413169277362675300
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c2:f0:11:a6:a8:17:77:f1:7b:f9:cd:83:37:12:cc:0d:75:9d:e6:0c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:3b:07:93:11:94:f9:b1:01:a3:75:78:37:94:3e:2f:13:37:5a:2f
Fingerprint (sha256): 58:68:26:df:38:e0:d6:18:aa:2f:9c:7a:bd:45:c8:f8:6e:82:54:6e:5a:95:db:5a:37:cd:4c:76:06:66:8d:45

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.mendialdea.info
mendicantmonks.org
mendicute.net
mendilloart.com
mending-fences.com
mendingabrokenheart.blog
mendingbabyloss.com
mendingbabyloss.org
mendingchurch.com
mendingfencesin.com
mendingjen.com
mendingstones.com
mendiventures.com
mendmermaidland.com
mendmydress.com
mendocino420.blog
mendocinoinsight.com
mendocinosprouts.com
mendolakefoodhub.com
mendonhistoricalsociety.org
mendontlieinitaly.com
mendozamina.com
mendozapaintingoc.com
mendtheworld.me
mendu.nl
tls.automattic.com
www.mendezmoments.com
www.mendicantmonks.org
www.mendicute.net
www.mendilloart.com
www.mending-fences.com
www.mendingabrokenheart.blog
www.mendingbabyloss.com
www.mendingbabyloss.org
www.mendingchurch.com
www.mendingfencesin.com
www.mendingjen.com
www.mendingstones.com
www.mendiventures.com
www.mendmermaidland.com
www.mendmydress.com
www.mendocino420.blog
www.mendocinoinsight.com
www.mendocinosprouts.com
www.mendolakefoodhub.com
www.mendonhistoricalsociety.org
www.mendontlieinitaly.com
www.mendozamina.com
www.mendozapaintingoc.com
www.mendtheworld.me
www.mendu.nl

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UAJSLCHWbp+sRpLn44c
nXnoi+GDpOWRdePUJ74mx6eK86KbjA+BN5W6+bCrb4vIRIZu1A9nxKplgUZj7NNi
RjZE4647V2EdRlLKcVhC01jSLVKzz1hTt12GikalmUug1EZCq1GzSZgbfHhLWcGa
2mPyQ9r2PJLjE/s5lGW1y1vIEwINRALNiavPWEKNt9eMeh2D33RTGIk7dlff010x
eLKQJJcQwmf6CJY0ThY9WPtnK9g6Q44EkpJesF90u1kpUrbCBU9FfZ9laQyiu+YC
YbY2v/rvz1Aui5gpjSSOLdlZLNny4gchI3YSk599Hcl+NFKt4uFW12/M2wFiTYLE
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277178867467876369267291413169277362675300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-13 17:22:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-13 17:22:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27930242856878062973370594661033515332875027396320070082861488508726823670785217429461402977522222941610424849539788016614473693498668837699395653584563948175559226692577018592939408394395909566085064610140202792292654382647424924318667906976272861356511282201873623451628773802911578094427790219593590744010814961443009843335312452918660945981065641068066295686720642156440644877271642149286057620996200715411157976488420391155019409659085403240971051912298170574268480057746412104757766861664063257092616717023962413198520786408565502665109907966971180897523844313528917650596884676297890481425853113936482874344549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2f011a6a81777f17bf9cd833712cc0d759de60c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.mendialdea.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendicantmonks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendicute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendilloart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mending-fences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendingabrokenheart.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendingbabyloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendingbabyloss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendingchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendingfencesin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendingjen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendingstones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendiventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendmermaidland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendmydress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendocino420.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendocinoinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendocinosprouts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendolakefoodhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendonhistoricalsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendontlieinitaly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendozamina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendozapaintingoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendtheworld.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendu.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendezmoments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendicantmonks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendicute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendilloart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mending-fences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendingabrokenheart.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendingbabyloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendingbabyloss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendingchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendingfencesin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendingjen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendingstones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendiventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendmermaidland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendmydress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendocino420.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendocinoinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendocinosprouts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendolakefoodhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendonhistoricalsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendontlieinitaly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendozamina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendozapaintingoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendtheworld.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendu.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001684873764f000004030047304502200434e86297121e8b942e49082fdda33b8dafe2b15b10ef15d1e042f95298616802210086b78afd8ac81640ca13d13c0abb4adbc47aaa5ee88b31676b617916cc93f028007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001684873762e0000040300473045022100c79598a87fcb1e767cceb7af43e0ccd4e725d6775f8e3797a63a1f73b40cb469022017a9eb6ff61bc8d51aff73581e021c5bd45e83ccce9c6746a4261645294d6277
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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