tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5f:c2:4f:78:b3:57:f3:99:a9:4b:c9:79:6c:37:51:fc:b9 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5f:c2:4f:78:b3:57:f3:99:a9:4b:c9:79:6c:37:51:fc:b9
Serial Number (int): 293921965523502205118345702028344879611065
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 65:2b:37:11:9c:04:86:f5:f3:01:9e:8c:74:df:3f:5e:ea:0c:f0:ac
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0e:c1:35:fb:5b:0f:4d:04:67:e6:c6:66:35:d0:32:ad:23:a8:25:f6
Fingerprint (sha256): aa:ed:ed:35:2b:bf:ba:4a:0d:be:8d:a1:d9:5b:d8:d4:08:a8:a3:42:5a:77:08:e2:75:fc:74:36:12:7e:ed:46

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

livingwithadoctor.org
livingwithadyingheart.com
livingwithalabrador.com
livingwithapositiveattitude.com
livingwithautoimmunehepatitis.com
livingwithchd.com
livingwithclarity.com
livingwithcle.com
livingwithcompassion.com
livingwithconfidence.net
livingwithconflict.com
livingwithcpci.net
livingwithdandcd.com
livingwithgladysfulltime.com
livingwithgod.net
livingwithgrace.me
livingwithgraceblog.com
livingwithhearingloss.com
livingwithherbert.com
livingwithintentionblog.com
livingwithiris.com
livingwithjimjenkins.com
livingwithjules.com
livingwithlauren.com
livingwithlinguaphilia.com
tls.automattic.com
www.livingwhereverweare.com
www.livingwithadoctor.org
www.livingwithadyingheart.com
www.livingwithalabrador.com
www.livingwithapositiveattitude.com
www.livingwithautoimmunehepatitis.com
www.livingwithchd.com
www.livingwithclarity.com
www.livingwithcle.com
www.livingwithcompassion.com
www.livingwithconfidence.net
www.livingwithconflict.com
www.livingwithcpci.net
www.livingwithdandcd.com
www.livingwithgladysfulltime.com
www.livingwithgod.net
www.livingwithgrace.me
www.livingwithgraceblog.com
www.livingwithhearingloss.com
www.livingwithherbert.com
www.livingwithintentionblog.com
www.livingwithiris.com
www.livingwithjimjenkins.com
www.livingwithjules.com
www.livingwithlauren.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqdWP3ncwVKKS24NHW0V
/qGLBEbb2WDfpfMBS+JwxzuK1zj0lLLhC5emkMTJ+QkTNLV2ePuAt25oc6F7lp53
zKM90oYtyuHtx2Qste5YNyN0e/I7GmMpM+aRdruR0VTHogxtKsP//66c0kZPqvsy
M9OVPP0fHT9Cv6wSqJE8igTguTqMUDTqpjPWwwAioVWh3ylkSj8hmHBpVyvZhpT6
K3NdwtyrM+3dqqH2K9q4z+AUhNwALYSr0nLL8z+iV4jX7JNRYRJZ83E7NHc6JxIu
lgOBo+93SPratcTOV0v+RSPo3GDaGSE5/IkMHZTANClEgdx09pDgYRVAxBhOl5wI
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293921965523502205118345702028344879611065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-31 22:55:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-29 22:55:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25582654506972735947658804103981972225723268935375935639216372275508248421156574754886288263641652252618370999277266996136629077073459322910388553143704344165639285336028467634269370112702556291002346285856670688355278725816242579244674336325062028611851495551468058007280685649293575114522030218936244561583969746088399482264053626815144970897694520263095687056797421325497905785599534909389146270403757466671919661340370675403212658451946563197161082119904244051453023363677249960213478242288894725485100829299011052267202778377359537896196438876878299919558876026787619164038717739105844178196198843244138861430831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							652b37119c0486f5f3019e8c74df3f5eea0cf0ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1345 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithadoctor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithadyingheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithalabrador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithapositiveattitude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithautoimmunehepatitis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithchd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithclarity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithcle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithcompassion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithconfidence.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithconflict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithcpci.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithdandcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithgladysfulltime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithgod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithgrace.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithgraceblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithhearingloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithherbert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithintentionblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithiris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithjimjenkins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithjules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithlauren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithlinguaphilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwhereverweare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithadoctor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithadyingheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithalabrador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithapositiveattitude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithautoimmunehepatitis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithchd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithclarity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithcle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithcompassion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithconfidence.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithconflict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithcpci.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithdandcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithgladysfulltime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithgod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithgrace.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithgraceblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithhearingloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithherbert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithintentionblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithiris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithjimjenkins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithjules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithlauren.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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