tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:57:64:77:03:b3:4f:02:d5:68:56:13:f7:89:e1:da:9d:e4 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:57:64:77:03:b3:4f:02:d5:68:56:13:f7:89:e1:da:9d:e4
Serial Number (int): 291074964475360566135388043188210375499236
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d7:3c:69:d0:0e:d6:e6:2d:b0:24:49:36:2a:a3:b1:1d:17:a7:c7:7b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bd:bd:15:e8:2d:08:27:7b:fb:8d:de:d5:db:ed:9f:79:a1:ce:35:5e
Fingerprint (sha256): 5e:11:9e:96:97:a9:12:98:6c:57:f5:ae:8c:56:32:0a:ff:8e:af:94:70:cd:d5:d7:51:d4:28:9a:6a:1b:d4:1d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tls.automattic.com
wave-mining.com
waveandmark.com
wavebistrorestaurant.com
wavebuzz.ch
waved2d.com
wavefromnamaste.com
waveguide.me
waveinitiative.org
wavelength.live
wavelengthaudiovisual.com
wavelengthnola.com
waveletlab.com
wavelink.blog
wavemob.net
wavemotioncannon.com
waveneyslsc.org
waveneyvalleysculpturetrail.com
waveofmodulation.com
wavepizzacafe.com
wavepressblog.com
waveriderhouse.com
waverleycommunicators.org
waverleyensemble.com
waverleyfloralart.org
waverleylearningcommons.com
www.wave-mining.com
www.waveandmark.com
www.wavebistrorestaurant.com
www.wavebuzz.ch
www.waved2d.com
www.wavefromnamaste.com
www.waveguide.me
www.waveinitiative.org
www.wavelength.live
www.wavelengthaudiovisual.com
www.wavelengthnola.com
www.waveletlab.com
www.wavelink.blog
www.wavemob.net
www.wavemotioncannon.com
www.waveneyslsc.org
www.waveneyvalleysculpturetrail.com
www.waveofmodulation.com
www.wavepizzacafe.com
www.wavepressblog.com
www.waveriderhouse.com
www.waverleycommunicators.org
www.waverleyensemble.com
www.waverleyfloralart.org
www.waverleylearningcommons.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4C9xAumFvDn3M9ZxdSof
pRO6ELnzqJp4Fx8xm8nPmTXwgnLwakW4fyhFruVZmWKFvgjOEoaGo/VODxlmQqrm
4qgtyz6EPsw854eSudog/yFp7FJiKYf5gSrFIF6ptrugozZH7hoGwRWpTdC/Cyv0
1b2LycFjiAwIUdHQAaCwfVHM8n1DslnTNF1S0GC37covlCciCMPa23v6eC67JUhR
o3PfC965Oqmgs24sXFPGS3YOKxqqG0N+wJQpJFUY2nDK+QWhF2H/oT0S6CFc4/Pu
PPQh7R2X7MMZBQyYOvgQarsxdQmCGrjRYJpPib7WABpsRNsPvnR4CpX4usdP20wK
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291074964475360566135388043188210375499236
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-27 07:54:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-26 07:54:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28300774563646377452949286353435398646619227720015500553997957349676002287792026864121297820231409790845682322290290770318476505521121225960693969255971490304557138420834579893566057984000422733210285801612190455177994119148287957664579908491544683907219349946801885894565282041438424887770427260881357459136250807746748689946985613406651650132299452870674238369668744204487028059715902870727307800356404087567634734470075095903175873074901224787730113162953547283118066500236737730234106161392372872399102871001128021818046561702125378990536949001064996864979710373748119562750770303172673384011927964011507355486943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d73c69d00ed6e62db02449362aa3b11d17a7c77b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wave-mining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waveandmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavebistrorestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavebuzz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waved2d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavefromnamaste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waveguide.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waveinitiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavelength.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavelengthaudiovisual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavelengthnola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waveletlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavelink.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavemob.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavemotioncannon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waveneyslsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waveneyvalleysculpturetrail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waveofmodulation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavepizzacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavepressblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waveriderhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waverleycommunicators.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waverleyensemble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waverleyfloralart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waverleylearningcommons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wave-mining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waveandmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wavebistrorestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wavebuzz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waved2d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wavefromnamaste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waveguide.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waveinitiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wavelength.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wavelengthaudiovisual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wavelengthnola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waveletlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wavelink.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wavemob.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wavemotioncannon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waveneyslsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waveneyvalleysculpturetrail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waveofmodulation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wavepizzacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wavepressblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waveriderhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waverleycommunicators.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waverleyensemble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waverleyfloralart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waverleylearningcommons.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f63360000001661a3ca32f000004030046304402200ed8825b3c7527d9369f0c9cf7bc19c161ebe46cd85849b5452ff9296c280ebe0220581191ea3377cd7e8bc440e7cd91ca5e3f277e3478fdc6919318540aec36489f007500a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a25000001661a3ca32f0000040300463044022030adb38c3804bd625efa69986fce005b7d0175a5347ba5f889d1d1b2b4a5772802207e04e316ece42c73becbaa8ecf51e0ef15c26fb192a5f806f1ae5703289e45df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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