tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:74:3a:60:39:6c:2e:04:10:45:55:c4:dc:8e:14:a1:f4:1a was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:74:3a:60:39:6c:2e:04:10:45:55:c4:dc:8e:14:a1:f4:1a
Serial Number (int): 300887207207031776348381605037692804002842
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 12:fe:dd:f4:b4:4a:d5:2b:df:f1:c9:23:09:4a:11:55:7e:02:06:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 02:95:05:3a:34:e8:e5:3e:09:ca:23:18:90:67:34:56:30:d6:af:21
Fingerprint (sha256): ac:91:ae:49:5e:95:e5:5d:84:07:f8:dc:e9:bf:04:20:39:57:7c:96:73:61:c7:a1:8d:17:51:6d:a7:71:ce:f0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

livingwellwithbrit.com
livingwellwithparkinsonsdisease.com
livingwellwithprostatecancer.com
livingwellwithsmallfiberneuropathy.com
livingwhendead.com
livingwhereverweare.com
livingwithadoctor.org
livingwithadyingheart.com
livingwithalabrador.com
livingwithapositiveattitude.com
livingwithautoimmunehepatitis.com
livingwithchd.com
livingwithclarity.com
livingwithcle.com
livingwithcompassion.com
livingwithconfidence.net
livingwithconflict.com
livingwithcpci.net
livingwithdandcd.com
livingwithgladysfulltime.com
livingwithgod.net
livingwithgrace.me
livingwithgraceblog.com
livingwithhearingloss.com
livingwithherbert.com
tls.automattic.com
www.livingwelltip.com
www.livingwellwithbrit.com
www.livingwellwithparkinsonsdisease.com
www.livingwellwithprostatecancer.com
www.livingwellwithsmallfiberneuropathy.com
www.livingwhendead.com
www.livingwhereverweare.com
www.livingwithadoctor.org
www.livingwithadyingheart.com
www.livingwithalabrador.com
www.livingwithapositiveattitude.com
www.livingwithautoimmunehepatitis.com
www.livingwithchd.com
www.livingwithclarity.com
www.livingwithcle.com
www.livingwithcompassion.com
www.livingwithconfidence.net
www.livingwithconflict.com
www.livingwithcpci.net
www.livingwithdandcd.com
www.livingwithgladysfulltime.com
www.livingwithgod.net
www.livingwithgrace.me
www.livingwithgraceblog.com
www.livingwithhearingloss.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lopLmjvY0N12UijGDci
+fkVANt4Cj2HEEx33hh30UTYZX8bIBb2ArtuADMIXLMNIWlXsYS1hEh4mxB4mZuv
/JzbEAVU1LEiJ4TTVdY96m9WGtmRem7ZFCxX3H3emilwmBvvjSlYQqitN0NUYhKr
UrYw3SAGiYIWcMkCBe/w/bu5KrY9XHw5LgxCNaFrV4qdHQ90n7gRtxzmjUtzZ9/b
Ld0XpHTvno1iPInqPMRXv0xBVFCDw2ijJGv5T5zXro5lJQuewe4OYdSbP/hJ1zzs
VcbdFzLlbBLRiXCry7Bnm3egPKPOOzFuPw8gvqyQMa04A6yq2OpNoKNxeEIHpRVK
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300887207207031776348381605037692804002842
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-30 23:47:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-28 23:47:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28574316901615406021614514625017828394189519450500118171167911533164623203164027865812190786224835704184248825493473273913985700470256048941294771558606776250333951406277257024855583762827371160229235299380860624014353375291098225990192388315783534132243985545524623317682880989336775907107650434218306696633009652168274872351224622989850215880377351875019906657382726307741177145255943822495753564942927146607944032402765883393654729713606176865955339604123067506052927636433605583602126310646184007055439899177418157165375232234106672463169226532486214402797884028756516416794481126061387026066318326282102760622717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12feddf4b44ad52bdff1c923094a11557e0206a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1412 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwellwithbrit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwellwithparkinsonsdisease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwellwithprostatecancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwellwithsmallfiberneuropathy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwhendead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwhereverweare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithadoctor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithadyingheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithalabrador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithapositiveattitude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithautoimmunehepatitis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithchd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithclarity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithcle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithcompassion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithconfidence.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithconflict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithcpci.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithdandcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithgladysfulltime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithgod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithgrace.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithgraceblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithhearingloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithherbert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwelltip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwellwithbrit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwellwithparkinsonsdisease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwellwithprostatecancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwellwithsmallfiberneuropathy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwhendead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwhereverweare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithadoctor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithadyingheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithalabrador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithapositiveattitude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithautoimmunehepatitis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithchd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithclarity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithcle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithcompassion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithconfidence.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithconflict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithcpci.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithdandcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithgladysfulltime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithgod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithgrace.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithgraceblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithhearingloss.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000338c0de8ca0206cf67187d3164ffd9703ca3f3e8f69764204fb6c8dc79b8862c54a1de12a0770610810d5f0022e7e8b42cb3e85c18127677ef7cdfbe0042f7784bc4fabc6fad3acbf58e272bce378a29a4b5447ff74b250322e8648801d6b096e0094b160e9cf518a311ad117759f57324956210a7f67bd10ca087c154840d320dd044e8b732781af029657f741a4dc07b34eba8b93db6ba09e992d4bc3c16070fe5f574f3136618c2e874963fffa52560786aafbc44316b208b4ba264a6b5c82b55324425420972be51e8612b151198666ebdaf14975045488d4a8a5a79ada02a98417b2ea8a3e7a85a018471dbd15a04f4477c1ae9333491bd1698435dfe2