tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5a:d6:da:75:94:00:1f:9e:dc:bd:1c:f5:cc:50:93:0e:45 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5a:d6:da:75:94:00:1f:9e:dc:bd:1c:f5:cc:50:93:0e:45
Serial Number (int): 292247859914746064147062632181184645500485
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 94:7e:7a:55:c7:75:6c:65:84:5a:f9:93:05:1a:c8:ed:fd:15:9d:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f4:64:2d:e8:ef:eb:dc:e1:d9:58:5a:a6:d3:14:39:88:56:41:a5:07
Fingerprint (sha256): 5f:53:13:6a:91:7a:e4:48:a7:a5:e9:43:32:b1:c1:fc:08:ec:d3:d3:3a:78:fc:21:f4:3b:94:99:39:e8:31:91

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mypediatricpsychward.com
mypeko.com
mypenandsoul.com
mypenbleeds.com
mypenelope.blog
mypennsylvania.org
mypenpalsanta.com
mypensandlens.com
mypercentilblog.com
myperceptions2017.com
myperfectbreakdown.com
myperfecthamper.com
myperfectlittlemoneypit.com
myperfectlyimperfectlifeblog.com
myperfectstartup.com
myperformancepilates.com
myperilingquest.com
myperiphery.com
mypersonalarchives.com
mypersonalceo.com
mypersonalfinance.blog
mypersonalmatchmaker.com
mypersonalrenaissance.com
mypersonaltrainerjournal.com
mypersondriving.com
tls.automattic.com
www.mypedagogikk.blog
www.mypediatricpsychward.com
www.mypeko.com
www.mypenandsoul.com
www.mypenbleeds.com
www.mypenelope.blog
www.mypennsylvania.org
www.mypenpalsanta.com
www.mypensandlens.com
www.mypercentilblog.com
www.myperceptions2017.com
www.myperfectbreakdown.com
www.myperfecthamper.com
www.myperfectlittlemoneypit.com
www.myperfectlyimperfectlifeblog.com
www.myperfectstartup.com
www.myperformancepilates.com
www.myperilingquest.com
www.myperiphery.com
www.mypersonalarchives.com
www.mypersonalceo.com
www.mypersonalfinance.blog
www.mypersonalmatchmaker.com
www.mypersonalrenaissance.com
www.mypersonaltrainerjournal.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZpsBm1xG+ltxDh4nukH
tr/HUex2r/UBWNRsUYqhaz+BqmoPozZTXtcursgZwT9Wvmuv6h1PveWLcGx1A4KE
EvXpVrNpHDV2eLPONw0pPL9sZ2jWTP6VBUbbwHVfVkCs3esEjFaOfQmpIEtkAfMJ
NGbpAr98JhIlhsDpEXmm2SZMDjORXF6sfYd8JnsM59gNymgHFkuzh8Vqj2MvI66A
5zRQPIzajM0vwbUcqxzkGtlTu9irilAh0QDjBioV+hDHU+2EiKRtJ0Q/fJpwzGKg
YaDv/G4KVKV2oCalRzhz7J/caN23P1vO7YnL45r1ejCtlTXQOqukDA3glq2uvf3a
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292247859914746064147062632181184645500485
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-13 06:28:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 06:28:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27974813710509211536213210340822267297578206687896503958619017828449292258384042398984051794316570226779677674011117532706715673116887394004210273020268040800633949813048405499953646404150843337088561742618646797233662459288856624360596908246580315331979864376235039505614308213816749606359971631352332418535263750755750647045606980348915515198669259779760994340152451812782622853034056284361819442082475481934462530524132280283273094831450067802384884170223351606401554810116273114729847963663670374612500873732791762123178836484107635414683296440456043944678172938650013806062125005716855786855326965283097434511891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							947e7a55c7756c65845af993051ac8edfd159d06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1236 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypediatricpsychward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypeko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypenandsoul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypenbleeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypenelope.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypennsylvania.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypenpalsanta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypensandlens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypercentilblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myperceptions2017.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myperfectbreakdown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myperfecthamper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myperfectlittlemoneypit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myperfectlyimperfectlifeblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myperfectstartup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myperformancepilates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myperilingquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myperiphery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypersonalarchives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypersonalceo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypersonalfinance.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypersonalmatchmaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypersonalrenaissance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypersonaltrainerjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypersondriving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypedagogikk.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypediatricpsychward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypeko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypenandsoul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypenbleeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypenelope.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypennsylvania.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypenpalsanta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypensandlens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypercentilblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myperceptions2017.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myperfectbreakdown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myperfecthamper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myperfectlittlemoneypit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myperfectlyimperfectlifeblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myperfectstartup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myperformancepilates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myperilingquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myperiphery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypersonalarchives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypersonalceo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypersonalfinance.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypersonalmatchmaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypersonalrenaissance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypersonaltrainerjournal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001670bf8d86b00000403004630440220555dc6eedac837a4c338e0e3233f5df02b0729a313015e2b973d0b529b00f642022004eeb5c541e1efc73ce8ec0580dfed0cb012864374a4a488a64a87e6a3c21499007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001670bf8d83e0000040300483046022100e9fedb72b78fe549acbb0a095aefde7512e94af95b428eb7a59e6ad8e44ab4dc022100fa4082feca16bddb25249a691259f7974bc19133bd32575d4dd233cf97a7d3a9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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