tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:86:80:a9:68:a8:f7:9f:a8:1e:e8:39:26:4f:f3:f5:14:97 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:86:80:a9:68:a8:f7:9f:a8:1e:e8:39:26:4f:f3:f5:14:97
Serial Number (int): 394218001698833868200917733020153419207831
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 53:d7:ac:05:79:73:81:03:21:b8:84:50:2b:b4:64:f0:e4:04:cf:4d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 23:7a:67:05:c8:86:b2:7f:f1:dc:dc:c7:21:29:5e:40:44:66:ee:4f
Fingerprint (sha256): c9:45:17:72:3f:1f:45:af:de:d3:4c:91:12:5e:cc:5f:5c:62:ff:4a:21:ae:e8:88:b3:d8:87:b2:57:db:07:b6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

duotelluur.com
elbunker.blog
elisabettacarnevale.org
elotroblogdeveronicadelcarpio.com
euskadisuena.com
fernandojeda.com
fightersbelt.com
fixingimperfectlyperfect.com
flowersconstructionllc.com
followtheitin.com
frankfrisson.com
futuresliteracy.nl
gaiaprotection.com
georgie-bradley.com
ghelite.com
gillesjean-marie.com
gin-mag.com
ginazurlo.com
glenhavenpta.org
global-knots.net
graziamaria.blog
hannahswain.eu
happy-en-healthy.com
healtheepop.com
hegyvidekifidesz.com
tls.automattic.com
www.duotelluur.com
www.elbunker.blog
www.elisabettacarnevale.org
www.elotroblogdeveronicadelcarpio.com
www.euskadisuena.com
www.fernandojeda.com
www.fightersbelt.com
www.fixingimperfectlyperfect.com
www.flowersconstructionllc.com
www.followtheitin.com
www.frankfrisson.com
www.futuresliteracy.nl
www.gaiaprotection.com
www.georgie-bradley.com
www.ghelite.com
www.gillesjean-marie.com
www.gin-mag.com
www.ginazurlo.com
www.glenhavenpta.org
www.global-knots.net
www.graziamaria.blog
www.hannahswain.eu
www.happy-en-healthy.com
www.healtheepop.com
www.hegyvidekifidesz.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+EwTHbIoIA55gx5VsE5A
V0j9uEVvHQXF3zZNe2Zlj30vmppx0eK82RbQoFQzKsa4kQV3iCRmzUO2YAqRGX5G
8Y0NUx6bzfD5rnIYXPUal25VUZNeN+W3XY0bDEmXofybDs11mA1KJXFobUO1M0WE
h2YpEbFEyeaHQdPffqmaN5+gCZYUSqCq8nVjDkIvlAJby7zKqxWL9e7P1xqAceBb
FZ5Bja1HW5kWvuLHFvxps7cKo151g8b/p3sdthql0oxxLYBsR1HKRXF1YYZa3BWE
hdrJW5xaOAx0qf7HRWl7oK2NFXNCL0ZNONx202vqbN+S4bMJDHk3ChpFva0ubPKX
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394218001698833868200917733020153419207831
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-11 05:19:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-09 05:19:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31344613450442710848043581358525564935838456113725386975201542890761602164448619078693932555670536452386249911090840650625997634681363884351145611493562978975487566726181687927941137521917309486736570277208550021570469679579588225976344302995934098935018261212996920844595055638395983757892582876062991014318331303348607606459179342398989079673227909867985221377501890942366297940092453211398759242061651284359960927317792601829149844552075758991466373455672521141998344653785067028030590991624776915882482189220342089988702238400400934269742508037450617868106298783369857587491935504907737426076714210792909946656711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53d7ac057973810321b884502bb464f0e404cf4d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duotelluur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elbunker.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elisabettacarnevale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elotroblogdeveronicadelcarpio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euskadisuena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fernandojeda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightersbelt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixingimperfectlyperfect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowersconstructionllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'followtheitin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankfrisson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futuresliteracy.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaiaprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgie-bradley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghelite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gillesjean-marie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gin-mag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ginazurlo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenhavenpta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global-knots.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graziamaria.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hannahswain.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happy-en-healthy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healtheepop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hegyvidekifidesz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duotelluur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elbunker.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elisabettacarnevale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elotroblogdeveronicadelcarpio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.euskadisuena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fernandojeda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightersbelt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fixingimperfectlyperfect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flowersconstructionllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.followtheitin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frankfrisson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futuresliteracy.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaiaprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.georgie-bradley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghelite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gillesjean-marie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gin-mag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ginazurlo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenhavenpta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.global-knots.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graziamaria.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hannahswain.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happy-en-healthy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healtheepop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hegyvidekifidesz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001634dda575b0000040300463044022074b7a927ec1e0336693447c43b2586b8bc346dec7862749fc5397eda0a6d4f060220365fcf37ad22219bbd21cfbf7066f4bc4784c29289dc1b0648506d494e5419f9007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001634dda577e0000040300473045022100ceebcfbf71361a8480d3c501e4ec5738d57d7e7b20302e521cb245b0338982e30220113b3ebd1a3a5878e7590cc0438c365805f5a12563c7ae1c129e373de8c5d10f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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