tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ba:3a:23:b6:ee:c8:22:f6:37:ef:a1:06:b9:7d:e8:80:56 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:3a:23:b6:ee:c8:22:f6:37:ef:a1:06:b9:7d:e8:80:56
Serial Number (int): 324706658707037657794829853083401561079894
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 68:fc:8f:d1:d3:15:e0:e3:81:49:d5:58:ff:2c:ab:ce:96:ef:50:75
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 65:66:0c:e0:57:03:99:56:da:e4:aa:40:79:b6:7b:61:f6:24:ad:db
Fingerprint (sha256): 79:0e:f0:42:cb:d8:53:94:12:29:5f:dc:eb:c7:54:09:4f:27:8a:e2:d5:bb:42:b3:5d:ac:b8:8c:db:64:67:61

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rakkaudenammattilainen.fi
rakkaudensoturi.com
rakmediumduty.com
rakoniewice.net
rakontoblog.com
rakpallet.net
raksasaprint.com
rakshakarthik.com
raksharathnam.com
raksis.com
raksriranchresort.com
raksxincanada.com
raksxincanada.org
ralconcept.com
raleigh-sb4059.com
raleighbirthinstructor.com
raleighjones.com
raleighnaturalhair.com
raleighnature.com
raleighncdoula.com
raleighonlinemedia.com
raleightillman.com
ralepopic.com
ralfgroothuizen.com
ralfkuehne.com
tls.automattic.com
www.rakkateam.com
www.rakkaudenammattilainen.fi
www.rakkaudensoturi.com
www.rakmediumduty.com
www.rakoniewice.net
www.rakontoblog.com
www.rakpallet.net
www.raksasaprint.com
www.rakshakarthik.com
www.raksharathnam.com
www.raksis.com
www.raksriranchresort.com
www.raksxincanada.com
www.raksxincanada.org
www.ralconcept.com
www.raleigh-sb4059.com
www.raleighbirthinstructor.com
www.raleighjones.com
www.raleighnaturalhair.com
www.raleighnature.com
www.raleighncdoula.com
www.raleighonlinemedia.com
www.raleightillman.com
www.ralepopic.com
www.ralfgroothuizen.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8jyovvxlIYK8ZMRaO6b
bAFIVDKa0V5FW2WpS/jQ+WlJedjFej4Ue57luWyFhiLUWAMZ8JTt2ZtC10D07CQu
0teRueBFZQpUF4u0R0KC2FxWExQ+iXeFGNPKAYj44/X9qYhsx769qdkGKQVWnyIN
h6O4WDaR+3aGA82DAG0FClAFAJ0002awyMfbkgaxV0uGH3Eth1bDxESK2EZwAUke
I/Ob4Bwtlo/3kTSJjOXSSQZ7Tt/gGoUbLXja24kkQysb5kUKqlNHB/o8TXeupBr0
lArMXMxrp1vtwoR/aL8niuo1FpuL8Gp9f+P967rD6fwA98dLe9sUqmTkfK3xZRS1
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324706658707037657794829853083401561079894
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 00:20:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 00:20:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22695747642002896899743037927495170508394025792409633490285600447330158819891557898524424064452432232394055775182483145607121596006015033161318345725979671895400583200713507578607360307093649498839231016214067890779651766420234322274243854209396814944415252681767162429619790623612644152660564667766712508119976209104251641936411037895132458574682348290395056844043845380432083483172898187568259842906133267532160126219946925567936244823478912331944800864051005649297572951849578923905169493764338660687440991808670666497862295146886996006510240403465373811855495643718502332983360278486372397567206477618553864631569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68fc8fd1d315e0e38149d558ff2cabce96ef5075
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1095 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rakkaudenammattilainen.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rakkaudensoturi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rakmediumduty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rakoniewice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rakontoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rakpallet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raksasaprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rakshakarthik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raksharathnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raksis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raksriranchresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raksxincanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raksxincanada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ralconcept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raleigh-sb4059.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raleighbirthinstructor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raleighjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raleighnaturalhair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raleighnature.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raleighncdoula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raleighonlinemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raleightillman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ralepopic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ralfgroothuizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ralfkuehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rakkateam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rakkaudenammattilainen.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rakkaudensoturi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rakmediumduty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rakoniewice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rakontoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rakpallet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raksasaprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rakshakarthik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raksharathnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raksis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raksriranchresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raksxincanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raksxincanada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ralconcept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raleigh-sb4059.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raleighbirthinstructor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raleighjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raleighnaturalhair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raleighnature.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raleighncdoula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raleighonlinemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raleightillman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ralepopic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ralfgroothuizen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016af6df97e3000004030046304402203f9873f42ffb82abec621025fc534ff0644fb5c550473f59df21810c47fa94b202207a7436fc37063d836ece5dc8a6b6b2bfb85b25d7bc8fb9c622e25eb648379d6f00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016af6df97e50000040300473045022100fc9c88f3e991c0b9f00182aaeb40b34af6b96d1e4dc1360f180863fc44b90ddb022077229d5fb053be99005dd40acbd91838d9a73dccdcb27316d340fd2ededf02e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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