tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bb:78:74:df:3c:8f:ea:eb:a1:2c:f6:bc:10:5c:3b:be:b9 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bb:78:74:df:3c:8f:ea:eb:a1:2c:f6:bc:10:5c:3b:be:b9
Serial Number (int): 325129774603201584275230012700044927155897
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:b1:07:00:f3:68:5d:07:4d:e8:57:80:ea:cf:8b:3a:80:51:27:16
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0d:db:22:f9:32:4b:35:de:ca:59:6c:37:ed:19:48:80:e9:58:68:33
Fingerprint (sha256): 71:d8:0e:f8:24:a3:e4:99:ad:16:00:57:a7:76:9d:3f:dc:f4:bd:8e:b9:68:7f:f5:f8:2a:93:da:48:bd:80:ac

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

architecture.uic.es
coursedesign.uidaho.edu
dualcredit.uidaho.edu
obalemba-lab.uidaho.edu
tls.automattic.com
uhoh.blog
uholneskladymatis.com
uhomely.com
uhoortnogvanons.org
uhort.net
uhparalegal.com
uhrbert.com
uhrginc.com
uhriginal.com
uhsswordandshield.com
uhurd.me
uianthropocene.org
uibk-hbi-hypoxia-research.org
uibytrevor.com
uicatoronto.com
uidahoalphagammarho.com
uidesignexplained.com
uidswansea.com
uiiiiii.com
uilfplperugiaumbria.net
uinmind.net
webauthoring.uidaho.edu
www.coursedesign.uidaho.edu
www.dualcredit.uidaho.edu
www.obalemba-lab.uidaho.edu
www.uhochdrei.de
www.uhoh.blog
www.uholneskladymatis.com
www.uhomely.com
www.uhoortnogvanons.org
www.uhort.net
www.uhparalegal.com
www.uhrbert.com
www.uhrginc.com
www.uhriginal.com
www.uhsswordandshield.com
www.uhurd.me
www.uianthropocene.org
www.uibk-hbi-hypoxia-research.org
www.uibytrevor.com
www.uicatoronto.com
www.uidahoalphagammarho.com
www.uidesignexplained.com
www.uidswansea.com
www.uiiiiii.com
www.uilfplperugiaumbria.net

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS0Sa8Oz/X+gpmSltieD
dN6NFxgI3zH7JpC7X0l+bNdT7l1nPgBaEPhTDh45ahM+1OPAa51G4zHNVI3cJXPs
bn2tNU+N/Zw5VuliDo+c7PAp0QEzeGaDcmYId2rOIWMr1aBNxxD37GfOF0GXed9j
P66AImglWF9pHX4eHiOogoaCMMtqxPwqPy0ldtO7rNeCJW2S4vYNEsHkljM7HXG/
P5p0BC1jKfNZ6m0HzggZTs5D/BvTBUbUzghjcFUgQree2Qm6O4m2wAcZ5Doniy1/
WFGLwsq5lCAugxOA//6LNB9vbq1Amj1Zoro6Jyhvlyn6B5H0FuuXs/xjDQK6oDTm
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325129774603201584275230012700044927155897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-25 14:29:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-23 14:29:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24891171888606162490730212452193153149713127089911030906953719193989100579294404764322282727382105930966109617229777727746660753590571138068160320626298981227188872669469084245010623009130536490729403653762788489095500069550448719348652538146441392785951867617728292541627963028782730177530874671268318582421137193767378453447440415982013825789818595973003794406201444342725450217755552295345579532546725237889266703561102041279032181873508548423086788318720158154965184971579471555594340479505397878664857314771469072986981517657068516176767979039584955295216081710845848068995728391291072072515297710210549141530243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ab10700f3685d074de85780eacf8b3a80512716
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1051 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architecture.uic.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coursedesign.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dualcredit.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obalemba-lab.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhoh.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uholneskladymatis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhomely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhoortnogvanons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhort.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhparalegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhrbert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhrginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhriginal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhsswordandshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhurd.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uianthropocene.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uibk-hbi-hypoxia-research.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uibytrevor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uicatoronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uidahoalphagammarho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uidesignexplained.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uidswansea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uiiiiii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uilfplperugiaumbria.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uinmind.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webauthoring.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coursedesign.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dualcredit.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obalemba-lab.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhochdrei.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhoh.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uholneskladymatis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhomely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhoortnogvanons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhort.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhparalegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhrbert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhrginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhriginal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhsswordandshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhurd.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uianthropocene.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uibk-hbi-hypoxia-research.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uibytrevor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uicatoronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uidahoalphagammarho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uidesignexplained.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uidswansea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uiiiiii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uilfplperugiaumbria.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016397eb7a720000040300483046022100c290b739fa5c1d11634132970c4a2c23413b0ee5ea2f8ad6d1fe6d831b92bce7022100bb4d330edf3095d7d970850db80842c539f4800e6c0196e6afc225c154fc8429007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016397eb7a8600000403004730450221009e62cec77da25bbd1ba309e7d89ecd75bd7b37cee6745a6410ddadbc16c3442702202eed49b27f5b02d56cd071a68c457caec98b93bc7ea594494d4f1c054b1277b3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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