tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cd:b4:4b:38:00:16:97:ae:6d:db:2e:39:60:56:c1:4a:1a was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:b4:4b:38:00:16:97:ae:6d:db:2e:39:60:56:c1:4a:1a
Serial Number (int): 331334394611400729765284949978130799479322
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f0:d6:01:22:ad:f5:ff:b3:69:b0:45:58:04:d7:2e:77:04:d5:c9:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 72:10:37:29:d7:46:46:55:06:17:33:58:fc:0d:35:7e:d5:ae:e0:ec
Fingerprint (sha256): c5:13:86:eb:e5:c9:b5:fc:6c:a5:c4:fb:4e:3a:fe:eb:a0:5f:0d:58:4d:59:fb:a7:de:bf:c8:6a:06:cd:af:6b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.shopperarmy.com
shelbyalmliphotography.com
shelleatswell.com
shesbusysewing.com
shhhmassagetime.com
shiatsu-nascholing.nl
shibfarina.com
shifting-perspective.com
shilpro.com
shinehospitalityperth.com
shinichi.blog
shinsotsu-taisyoku.com
shippers.direct
shirleystuff.com
shirotiger.com
shizenremedies.com
shonnathelifestylist.com
shopamazon.blog
shoppingassociate.com
shorecybersecurityblog.blog
shosakuin.net
showlaser.fi
showmescifi.xyz
showofhandsblog.com
shunyam.org
shush90s.com
tls.automattic.com
www.shelbyalmliphotography.com
www.shelleatswell.com
www.shesbusysewing.com
www.shhhmassagetime.com
www.shiatsu-nascholing.nl
www.shibfarina.com
www.shifting-perspective.com
www.shilpro.com
www.shinehospitalityperth.com
www.shinichi.blog
www.shinsotsu-taisyoku.com
www.shippers.direct
www.shirleystuff.com
www.shirotiger.com
www.shizenremedies.com
www.shonnathelifestylist.com
www.shopamazon.blog
www.shoppingassociate.com
www.shorecybersecurityblog.blog
www.shosakuin.net
www.showlaser.fi
www.showmescifi.xyz
www.showofhandsblog.com
www.shunyam.org

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/cOscJidJAnrIeWJ92B
lVHmnveGV/Ruo+W5oFxda8A0kOz5otBeaXeMNK92THXbPmc4EW0eajfLOPKp7x+e
pSXIry5hby9+4yfzQdWnvQWW6ZVVo0RyZamMccwtxbMDbW1RF3Go0Q2cFmsEUxKT
odcRDnV26u03PcV7Lry1LuEcdc+hr8qjI6RGWEVaYengLRh2woRywkyQv0pyw5Pu
Npofzp+kNKYZscGbSgOgzsgydzNuIJsFOhM24NeJx3s+jY+TA7NKzYQ854jVZU88
MG7iak3/ZRx6WYzCMtwkrac2dC6MTJLiQs+sPevDfrqAg3X0y3YkWpYIZ9kiI283
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331334394611400729765284949978130799479322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 15:53:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 15:53:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26253157672472860306555990064119433663245546163237297257667060608571289542929581793112466518469816091140375585626907373848924069487873422528723098188949087962635208304516665800142251417084333379911089692080112379988647870024829941602006016833809620498865662488934580811483717982506025870085556683425827929212048006853958575771937069366242101384239828297619969297461043577596941528389396165033006720387603616963846855014546445239088847462933264492227912268651982540059696051548279416302269101477096997913066192765226884162787930251892145197136010250632364321440154275618116079291096781700595112761451662755238647904149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0d60122adf5ffb369b0455804d72e7704d5c980
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.shopperarmy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shelbyalmliphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shelleatswell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shesbusysewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shhhmassagetime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiatsu-nascholing.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shibfarina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shifting-perspective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shilpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shinehospitalityperth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shinichi.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shinsotsu-taisyoku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shippers.direct'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirleystuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirotiger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shizenremedies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shonnathelifestylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopamazon.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppingassociate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shorecybersecurityblog.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shosakuin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showlaser.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showmescifi.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showofhandsblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shunyam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shush90s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shelbyalmliphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shelleatswell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shesbusysewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shhhmassagetime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shiatsu-nascholing.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shibfarina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shifting-perspective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shilpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shinehospitalityperth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shinichi.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shinsotsu-taisyoku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shippers.direct'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shirleystuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shirotiger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shizenremedies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shonnathelifestylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopamazon.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoppingassociate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shorecybersecurityblog.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shosakuin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.showlaser.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.showmescifi.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.showofhandsblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shunyam.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017059385df50000040300473045022031a2700f58c6b616744cb2857a1dc4c5ad5872f67f9d19fdbbb6285fd33401b5022100f6db450463585ed4d9995582d6305570cc832bf73bbbd930c0b11f86bc3fc0b400750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017059385e1f00000403004630440220116c57c7f65d31817556f37e5a61c32fc8a0fe877207002cc9bf304c431f06d40220338d837d63fba3d238b1beab1e145a489bd34167cd2d833316e6b7d850ea4fd2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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