tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5f:67:a3:a5:32:5b:ae:ed:c8:53:cb:52:e6:ab:51:57:1c was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5f:67:a3:a5:32:5b:ae:ed:c8:53:cb:52:e6:ab:51:57:1c
Serial Number (int): 293801442831311048820826264255154434955036
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:b7:17:b8:e6:25:70:e5:e2:83:46:9a:4d:cd:86:1a:08:7a:a9:b4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8b:fe:6b:89:8a:39:7c:76:d9:7b:31:5d:39:d1:1d:49:8e:1a:7e:7a
Fingerprint (sha256): b4:b5:e4:0a:83:cc:34:45:93:01:2e:07:a4:c2:36:1a:7b:cb:98:08:66:7a:c1:99:97:f6:cf:44:51:5e:11:1e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gosselin.recourscollectifs.ca
pellan.recourscollectifs.ca
recoverabetterfuture.com
recoveredfashions.com
recoveringangel.com
recoveringcontrolfreak.org
recoveringcorporate.com
recoveringfed.com
recoveringfromamedicalerror.org
recoveringfromrape.com
recoveringgirl.com
recoveringhoarder.com
recoveringinsuburbia.com
recoveringmartha.com
recoveringminnesotan.com
recoveringmotherhood.org
recoveringparalegal.com
recoveringpartygirl.com
recoveringrace.com
recoveringracistdocumentary.com
recoveringserenity.com
recoveringstagemanager.com
recoveringtechnologist.com
recoveringthefoundations.com
recoveringthegifts.com
recoveringtheplot.com
tls.automattic.com
www.pellan.recourscollectifs.ca
www.recoverabetterfuture.com
www.recoveredfashions.com
www.recoveringangel.com
www.recoveringcontrolfreak.org
www.recoveringcorporate.com
www.recoveringfed.com
www.recoveringfromamedicalerror.org
www.recoveringfromrape.com
www.recoveringgirl.com
www.recoveringhoarder.com
www.recoveringinsuburbia.com
www.recoveringmartha.com
www.recoveringminnesotan.com
www.recoveringmotherhood.org
www.recoveringparalegal.com
www.recoveringpartygirl.com
www.recoveringrace.com
www.recoveringracistdocumentary.com
www.recoveringserenity.com
www.recoveringstagemanager.com
www.recoveringtechnologist.com
www.recoveringthefoundations.com
www.recoveringthegifts.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWz0y6D6t8sqUF13E+9V
6RXThlVPMbqN5rdBvC7LcaefjotaWCpvEK816eRi94XnvMQinPyIqRUrOQfPQDfn
yecbKxFrUaWILfGINyF/MtT+Flz5jJTA+IeZIhrcUmQTsDXCWFGMsNybB4J6rrfJ
N9X/KYwXiVPcMGpCS/bbRA+5MHSkEegqWtVs/MT3+3CjYOegssWf9Li8+g0MEn6N
917D1wDp77qnBKwdvziLyGrgZl7TZg8LEaZzPDiKH9Nryksm0t3XfuFxCqZjU9+V
fupOgrwMr5YfxfB3jsS9KQUYXUKYZtDfUQaHmh4L/xOl6AiIXZolp+JNC5BgG+Xz
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293801442831311048820826264255154434955036
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-05 21:56:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-03 21:56:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22397908299537262681732053577669583599021237325204210964283749180356066847250909579790361773793307067857165143637068851311286783228994070282010211415305480511822107044397239830492412575872882822722004018605399680602177053908166314576336772931538485064229747449973289611536822288186255000800667192266510754781494238867004320030981094353002624682659335963060161748482537451337760456628812189797111698917225679756182301192283366599786457155279426535740416762571633226222147596254989082369956144513612614720264808523834210155694180509521285220096870654835048726259179282328211776529509911715092054856170639625807521510209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4db717b8e62570e5e283469a4dcd861a087aa9b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1390 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gosselin.recourscollectifs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pellan.recourscollectifs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverabetterfuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveredfashions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringangel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringcontrolfreak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringcorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringfed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringfromamedicalerror.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringfromrape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringhoarder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringinsuburbia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringmartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringminnesotan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringmotherhood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringparalegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringpartygirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringracistdocumentary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringserenity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringstagemanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringtechnologist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringthefoundations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringthegifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringtheplot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pellan.recourscollectifs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoverabetterfuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveredfashions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringangel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringcontrolfreak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringcorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringfed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringfromamedicalerror.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringfromrape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringhoarder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringinsuburbia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringmartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringminnesotan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringmotherhood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringparalegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringpartygirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringracistdocumentary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringserenity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringstagemanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringtechnologist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringthefoundations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringthegifts.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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