tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:06:b6:35:0a:5c:61:36:50:9e:e5:23:55:4a:a7:a9:e4:2d was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:06:b6:35:0a:5c:61:36:50:9e:e5:23:55:4a:a7:a9:e4:2d
Serial Number (int): 263620746893915900451881119440841086723117
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:d7:e8:ba:8a:02:ce:d8:bb:af:fe:1b:2b:5b:2c:f6:fb:83:74:70
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:6f:aa:10:f3:25:fe:44:ae:4f:f4:fb:ac:12:f2:27:a2:a0:d1:c1
Fingerprint (sha256): 8b:2a:22:5d:51:40:2e:ef:48:c9:88:82:0e:d9:5c:1a:11:55:15:7f:85:63:8b:ff:dc:d8:ba:7c:8c:52:1c:7a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.splitwise.com
parishnotes.spnparish.org
splittingtheadamblog.com
sploshart.com
splspokane.org
splstaff.org
splteenmachine.com
splute.com
spm560.com
spmanson.com
spmarketinggroup.com
spmast.com
spmattei.com
spmhaulage.com
spnelsonphoto.com
spngconsultants.com
spnu.org
spockssister.com
spodalicious.com
spodworldwide.com
spoffordpondprincipalblog.com
spofljgiovanniloretta.com
spohntaneous.com
spoilchloefresh.com
spoilconcepts.com
spoiled-rawtn.com
tls.automattic.com
www.splittingtheadamblog.com
www.sploshart.com
www.splspokane.org
www.splstaff.org
www.splteenmachine.com
www.splute.com
www.spm560.com
www.spmanson.com
www.spmarketinggroup.com
www.spmast.com
www.spmattei.com
www.spmhaulage.com
www.spnelsonphoto.com
www.spngconsultants.com
www.spnu.org
www.spockssister.com
www.spodalicious.com
www.spodworldwide.com
www.spoffordpondprincipalblog.com
www.spofljgiovanniloretta.com
www.spohntaneous.com
www.spoilchloefresh.com
www.spoilconcepts.com
www.spoiled-rawtn.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcRZiDRxcsgBUS1NHuFP
+QRW0nqSgXW2T0ONGJ5uKu4VeXiajOEtzAHCbSIamgLagFq3IQ5kDy79TozUa6GF
mOpARUlIs+rGs7OED1F2BdkA+k/0WBmTrV5Hq8ivmh5ZrD0nIToXrFQXvTlgaaHc
Wl8oqZxXVPWi1kzRn+dieCpCYSBt21Cjm7+e1zHmTk2Fg2AO7A4e/9ajvvBd6GjA
Nso8Q09wxHfDDI3iY604Jwoi1kuV/qbOPK8xAcugSBk0vLH3erKOtkHQVoyoI6cN
tsvbrJW1yJLLXuxAv8mqZFy1avuIL/Ahdl9cVtlzMTdU8MmFHLgM3ZdW0DzEVmhb
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263620746893915900451881119440841086723117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-23 12:28:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-22 12:28:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24965769741097922827247902324772383993491987246881488853753929127015217175517768246125115719087979893109995215695870776236474313306913293117370075377744649466379662862919348104786481976583268794767187159156082540086672216531835422014186193403639272808631051588209319046780507007075845583549964546923555261764890708410150589060866277424645466155314220206721098026165879597747287540309857072881532572763306584438841165815954220931347339544234814328488180098665163125855239082620698417557993386493314682312051662544343197461289431973262568613657685746692091175683938082910217352174721358384544965347595943216499267230691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1d7e8ba8a02ced8bbaffe1b2b5b2cf6fb837470
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1033 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.splitwise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parishnotes.spnparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splittingtheadamblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sploshart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splstaff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splteenmachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spm560.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spmanson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spmarketinggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spmast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spmattei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spmhaulage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spnelsonphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spngconsultants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spnu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spockssister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spodalicious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spodworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spoffordpondprincipalblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spofljgiovanniloretta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spohntaneous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spoilchloefresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spoilconcepts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spoiled-rawtn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splittingtheadamblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sploshart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splstaff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splteenmachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spm560.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spmanson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spmarketinggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spmast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spmattei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spmhaulage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spnelsonphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spngconsultants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spnu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spockssister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spodalicious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spodworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spoffordpondprincipalblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spofljgiovanniloretta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spohntaneous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spoilchloefresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spoilconcepts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spoiled-rawtn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000166069e04d9000004030047304502207f167caec1cf553080e51bb21e5a187472f330029f78403fa54237d63318a083022100d326e33d32f01551f9cf9c5df7c96c543a26a0c20a6ecb5a9d8653a7e9761c3f007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166069e073c000004030046304402203941b4f66845533e1866b51214337f6b00f3ebef99fd9199b219693c9d0715fd02202aaa6e8cc18eaa42fcee4e6c1b02c33c16812ed4b80f175a968267115fce01ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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