tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fa:57:28:7d:e1:02:0d:29:c2:e5:29:51:08:8d:de:c9:6c was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fa:57:28:7d:e1:02:0d:29:c2:e5:29:51:08:8d:de:c9:6c
Serial Number (int): 346523302606151156785198906398469137549676
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0d:44:10:42:28:bc:5b:e1:a4:7d:db:81:80:d1:c9:1d:1c:fc:bc:32
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c7:31:52:1b:69:2f:5e:36:f3:5b:46:29:c4:6b:69:7d:3e:f9:84:82
Fingerprint (sha256): b2:8b:46:c0:fc:d4:7d:92:22:f7:6f:b2:08:d2:8b:84:7e:ec:31:02:5b:10:25:d7:8a:23:c1:67:ac:8e:88:43

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.ifunfactory.com
ifthesoofitz.com
ifthespoonfits.com
iftimestoodstill.net
iftraffichadafaceiwouldpunchit.com
iftyahmed.com
iftyfinn.com
ifuckedupandlearnedfromit.com
ifutility.me
ifwallscouldtalkmtl.com
ifwehavetoeat.com
ifwewerevillains.com
ifwgaustralia.com
ifwgpublishing.com
ifwishesweredishes.com
ifwomenruled.com
ifyokoye.com
ifyouaskme.me
ifyouaskmewhat.com
ifyoublinked.com
ifyoublog.com
ifyoucanreadyoucancookblog.com
ifyoucanstandtheheat.com
ifyougiveagirlablog.com
ifyougiveateacheranidea.org
tls.automattic.com
www.iftheshoefits72.com
www.ifthesoofitz.com
www.ifthespoonfits.com
www.iftimestoodstill.net
www.iftraffichadafaceiwouldpunchit.com
www.iftyahmed.com
www.iftyfinn.com
www.ifuckedupandlearnedfromit.com
www.ifutility.me
www.ifwallscouldtalkmtl.com
www.ifwehavetoeat.com
www.ifwewerevillains.com
www.ifwgaustralia.com
www.ifwgpublishing.com
www.ifwishesweredishes.com
www.ifwomenruled.com
www.ifyokoye.com
www.ifyouaskme.me
www.ifyouaskmewhat.com
www.ifyoublinked.com
www.ifyoublog.com
www.ifyoucanreadyoucancookblog.com
www.ifyoucanstandtheheat.com
www.ifyougiveagirlablog.com
www.ifyougiveateacheranidea.org

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdeLXHiyZy1PDujoC+sF
crXLe0GAqd7ON0sMo6NRDPUZ/q4Yv+QlUwT1C9GgNyMtUYI7Ju7SWyZ/P/DqZcbS
4vDaHnUqVywYdUYh6bN6vfoSRrN9L0o15JtUSq7XGJDj6J3ZkVKR1iLtMF7Sm3Hu
wyZMZXH/WLZlrJjf39v+hU/m6ChYGNAecziPdROohqS9rDgwVhl0WI7xG1tcWvoB
XMPCfLRKgoClFctuENfzdKibZD0BZP/Q+FNmPKLrs4QVxhfp+9tFJzGk7x2bu2Ah
sCFqDAsN+5ElkRYNCZVDOi8dwByPMrPLhx55nxrBRqZVhkFuA6yDQHAhS9lqt7Ti
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346523302606151156785198906398469137549676
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-13 09:17:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 09:17:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24470281753546735512575914178655053394397680631130355023891565914224680852339658105465446729851212083142542732946403097201451306018487428920728730913530921292737592148139821628803329608650648193664330222359320815340754818906981629516881330117548813326169745388241448317640088618265254721877981443743378076444240442577612874384038859421869887079153589997073575873489779752415844543913793400332991126271469042548351046225849079921075205142482177943235878712121398410973180159426654441842395683501726714835818167611813286181498636761002200797633049954071716819515363429934379253095515566035674941358532913995116059091491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d44104228bc5be1a47ddb8180d1c91d1cfcbc32
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1189 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.ifunfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifthesoofitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifthespoonfits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iftimestoodstill.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iftraffichadafaceiwouldpunchit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iftyahmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iftyfinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifuckedupandlearnedfromit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifutility.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifwallscouldtalkmtl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifwehavetoeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifwewerevillains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifwgaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifwgpublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifwishesweredishes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifwomenruled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifyokoye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifyouaskme.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifyouaskmewhat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifyoublinked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifyoublog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifyoucanreadyoucancookblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifyoucanstandtheheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifyougiveagirlablog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifyougiveateacheranidea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iftheshoefits72.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifthesoofitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifthespoonfits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iftimestoodstill.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iftraffichadafaceiwouldpunchit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iftyahmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iftyfinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifuckedupandlearnedfromit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifutility.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifwallscouldtalkmtl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifwehavetoeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifwewerevillains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifwgaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifwgpublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifwishesweredishes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifwomenruled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifyokoye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifyouaskme.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifyouaskmewhat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifyoublinked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifyoublog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifyoucanreadyoucancookblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifyoucanstandtheheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifyougiveagirlablog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifyougiveateacheranidea.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d2a20ddc2000004030046304402201690f754304d874d144b64a4e725252668ac117e94e7b4e9fb92f12dc3ac825d02204da0e55b7211c3fd75c697f6f7d82abe4afb68902d0f566ee7b1e46630fd8fda007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d2a20df8d0000040300463044022065c07aa6ce352c3d028d034a898f74eaeaee9ec32ea4c71c09b4822844f5857a022031b2f9841ce12d43952bb0d5649f592e0007b3047ff6dbaa003cf4f080d08b9a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0004147342efdad93c95c91584e1a8b41ed29e017415777127caf6c6cf80679e95d237c909378ed0fe0d6c6c034328d277e2cb29769f7ff80b470d566230b524abb1bf29b48e7d4335b0604ed686f3c450fafcdd40d65b3dd10310768c358d76ad777edda5618f554ee117a471e480c227bebf2fdcf72c2f425a519bc7ccd6725e53be63f5f03078ae349c261bf5a092ef79cfc2a1552a73b8ef423482ae1f49016f392e10c5669f406c9555254976d5e5ff5f850a84be9bd7077861c696f871f8de46cb9887b95c3b1cb323530b7c852d690cc67f06f2224c921f93acb49dbba6e1152b33f94d0635ae0b5e4aecbdcb795e880891dd1808fdd6c97d86aaa8bef0