tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d2:f8:f0:28:04:27:28:e4:9c:82:a6:39:d7:b4:25:f4:75 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:f8:f0:28:04:27:28:e4:9c:82:a6:39:d7:b4:25:f4:75
Serial Number (int): 333127050354503940910417713334896797545589
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:5f:21:36:80:c3:95:ab:c8:bb:61:1a:e5:52:30:d5:ae:c7:b8:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 33:e9:12:6d:38:1c:df:5d:5e:ac:57:ea:fa:45:73:5c:9a:8e:4a:a5
Fingerprint (sha256): 6a:16:e2:68:a2:25:d6:3b:2c:3d:cb:ea:cf:ff:bf:86:08:dd:77:c4:96:d6:d1:e2:14:77:1d:d3:19:44:34:ad

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mintmacaron.org
mintmediaboston.com
mintnfd.com
mintnthyme.com
mintofloridablog.com
mintofmontrose.com
mintoknow.com
mintoneducationconsulting.com
mintopsblog.com
mintprocleaning.com
mintprofessionalcleaning.com
mintrotundschwarz.com
mintsprinkles.com
mintteadrinkerssociety.com
minttuvaittinen.com
minturnhouse.com
mintvanillablog.com
mintxcondition.com
mintyblogcz.com
mintyfilms.org
mintynimbu.com
minumwelt.com
minuoma.net
minusarchitecture.com
minuscola.org
tls.automattic.com
www.mintmacaron.org
www.mintmediaboston.com
www.mintnfd.com
www.mintnthyme.com
www.mintofloridablog.com
www.mintofmontrose.com
www.mintoknow.com
www.mintoneducationconsulting.com
www.mintopsblog.com
www.mintprocleaning.com
www.mintprofessionalcleaning.com
www.mintrotundschwarz.com
www.mintsprinkles.com
www.mintteadrinkerssociety.com
www.minttuvaittinen.com
www.minturnhouse.com
www.mintvanillablog.com
www.mintxcondition.com
www.mintyblogcz.com
www.mintyfilms.org
www.mintynimbu.com
www.minumwelt.com
www.minuoma.net
www.minusarchitecture.com
www.minuscola.org

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB+8BpE5bCdj50ty+/g8
URmAXGTJfmrV1Brr0ZKfD6O4iSEy0u5/7VGHNWrynpN2dsQ+Hdm1OnAR19WikudW
05ybPOkOkaGiOD3+oE/heiiwDf/HIxFay8sS9AUkIX6wgMtbYFeZqud5Wm6vuwHr
LkSy5rEpl9E4K0cto3o+KGc3uYyOO7qFwq/3F/wx8msL3c11GzmReqgPN7nsaQmo
kFKLojmGTYdLv+mNsbBqek6MrdzAQ53ILjL/GLz1CHajCUfQ7R2F76sFpdxBiNdw
pROgG9sAnOxpsxJ681Uo89hfZ91nX0kZcpvDejSLBaL03luewflp4RREjkEsFR+F
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333127050354503940910417713334896797545589
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-12 21:12:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-10 21:12:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24253403406449440987046480288713896848138702182895812073690713191457840722054079644309040061190173322385858763903329738662589486411932637843643119058677050133036778979416740371324472811672942125356746672531894160073483095971865390534691699115980469443865571178188613119857700791400630827130241523602573815524363809024947785890830357791292361195178103044968321237701067216115867560284101870433988774093317326250600839991089333884671511622053901407329460463866591926312102389165170985282829644397897657453011826518656232232877003679538198737239873822926393982575429478532573175728584101441085121822531902770148144022851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af5f213680c395abc8bb611ae55230d5aec7b8c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintmacaron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintmediaboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintnfd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintnthyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintofloridablog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintofmontrose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintoknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintoneducationconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintopsblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintprocleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintprofessionalcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintrotundschwarz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintsprinkles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintteadrinkerssociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minttuvaittinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minturnhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintvanillablog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintxcondition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintyblogcz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintyfilms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintynimbu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minumwelt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minuoma.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minusarchitecture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minuscola.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintmacaron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintmediaboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintnfd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintnthyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintofloridablog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintofmontrose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintoknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintoneducationconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintopsblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintprocleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintprofessionalcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintrotundschwarz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintsprinkles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintteadrinkerssociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minttuvaittinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minturnhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintvanillablog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintxcondition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintyblogcz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintyfilms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mintynimbu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minumwelt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minuoma.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minusarchitecture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minuscola.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016709fb64860000040300483046022100893be1f6bca712e1be2eb5a837aa810cd919355cdcc6778db2efa7e3449830aa022100d95e86b89a34b26abf4f27b85cc8e561c5426d5eb2ea8b20ba7f0b4ce93bad1000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016709fb6227000004030046304402204bbcca9faa8081008b85dc045c7a78a860d93a481251b0c91b3ec13a89e6c383022062cf829b50aace90c0cb0ccda8787ca4a8aea1fe13db9ca924dd43d089ca8452
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0095db0cabeb785d01de152e511353ba9fea0d1657ea3423001a19612305cc64bffc469f4a421aa25fa90e23c34d273d950f4730018165bf5399a384375070cc5d8ff16145ec0cd28212acdc557c3a5e2a32ccc5923f37f2fcc2cd9f935695dcf54c45a5d14f87286fe1bcbbf0d411d0890a9876df10ce2717f1a474742575ea3c826dd8b5e963ba2cff3596a66bb53c2b9c33fa2e4278437eed3021186dac87614d87d069afdd2a46b8de3903333546a723e82f378ff073bf6f8546693d198e6acef509e01781d1a1469148943049fa65c4d6e4bf6ed96ee3f95a162da01b4b4d973a438af797f0e0558db7cf42decb15bc328931624ccc687772f35c8736eb01