tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:14:b8:0f:d4:6e:9c:eb:05:0f:55:f0:5c:e8:01:40:9e:b0 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:b8:0f:d4:6e:9c:eb:05:0f:55:f0:5c:e8:01:40:9e:b0
Serial Number (int): 268387165278011309385885591520547128254128
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:bd:14:3c:a9:5a:6a:4f:e1:75:8e:01:22:4b:71:b5:a2:64:e1:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 60:bd:c4:fa:a4:57:f9:35:b7:65:f7:12:4f:27:5a:07:0b:ec:71:e6
Fingerprint (sha256): bd:9e:35:ad:0d:e7:eb:5a:51:14:a1:2f:73:c0:49:da:4e:83:ab:a1:c4:f8:cc:d0:43:ff:5e:6f:a1:cf:09:5a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

livingwellexperiment.com
livingwellinchrist.com
livingwellinphoenix.com
livingwellisthebestrevenge.net
livingwellwithjoce.com
livingwellwithkate.com
livingwellwithmaryell.com
livingwellwithparkinsonsdisease.com
livingwellwithsmallfiberneuropathy.com
livingwellwithsmallfiberpolyneuropathy.com
livingwesley365.com
livingwheellife.com
livingwhereverweare.com
livingwith.me
livingwithabag.com
livingwithalabrador.com
livingwithalzheimers.me
livingwithamindfulheart.com
livingwithanaddict101.com
livingwithapositiveattitude.com
livingwithaquariums.com
livingwitharabs.com
livingwithart.today
livingwithasighthound.com
livingwithautoimmunehepatitis.com
livingwithchurros.com
livingwithcle.com
livingwithconfidence.net
livingwithconflict.com
livingwithcpci.net
livingwithdandcd.com
livingwithdani.com
livingwithdivorce.net
livingwithecologyandfire.com
livingwithfibro.net
livingwithgladysfulltime.com
livingwithgod.net
livingwithgraceandease.org
livingwithgraceandgratitude.com
livingwithgraceblog.com
livingwithgravity.com
livingwithhearingchallenges.com
livingwithhearingloss.com
livingwithherbert.com
livingwithhonour.com
livingwithintentionblog.com
livingwithiris.com
livingwithitch.com
livingwithjeffersondavis.org
livingwithjimjenkins.com
tls.automattic.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Xwlt9GolLgEeFqh7MDe
IEAIfnuUZlweK0RtLTm3c77Ty/50ErYMCHz0gyOK7emLKX5g3EHYm/fr+6KaSZbX
mv7cwra5oM5skJmt7oTUEdp2YDEepGZkrvYkswRIrDAOjw1xOjYJov77Vbm/qrAn
mN9iaK/5Ws5Mi0J1x1M0n3Ggw+a21MdS6Uj47vqFrfXK2wiQBG5iHO2L6IvUYRwA
QDqr1/jTu+e/RjTxlo16kHGHKvZ/Psx+czo6/IcOvEXD+/IwThyJIQmINM/l3hfp
Ikc1n1pYLZ0usi1ITQac5O0BxDE1bHFaLOmRjWJmavH8l1Y/PzW7DgTocOnZ4nI6
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268387165278011309385885591520547128254128
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-04 12:06:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-03 12:06:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30989604049793539391304301573122078906237850896720708208086758861064867390179057281164977573487048541880632454988619867289833912129666831183607114131315425430722990957705122876086954002564251459369859757684874616749946390273570495467752377781085489445410789766286164715289063086597960958602744306669247217223567094451093066557034536338399778834353980775037889250068220590468520911411806567418692972079136510477654783487835831374664097401749404401077231715028435042146988573752201004150771977131171862008884939519480857413888081720661023471468170880822113088727061537387348161965801774456274199229330698259485720459861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1bd143ca95a6a4fe1758e01224b71b5a264e106
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1313 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwellexperiment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwellinchrist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwellinphoenix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwellisthebestrevenge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwellwithjoce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwellwithkate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwellwithmaryell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwellwithparkinsonsdisease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwellwithsmallfiberneuropathy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwellwithsmallfiberpolyneuropathy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwesley365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwheellife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwhereverweare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwith.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithabag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithalabrador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithalzheimers.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithamindfulheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithanaddict101.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithapositiveattitude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithaquariums.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwitharabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithart.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithasighthound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithautoimmunehepatitis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithchurros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithcle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithconfidence.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithconflict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithcpci.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithdandcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithdani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithdivorce.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithecologyandfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithfibro.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithgladysfulltime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithgod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithgraceandease.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithgraceandgratitude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithgraceblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithgravity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithhearingchallenges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithhearingloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithherbert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithhonour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithintentionblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithiris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithjeffersondavis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithjimjenkins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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