tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:06:90:4f:d8:b5:d1:ce:14:3f:da:12:32:a3:71:7f:56:21 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:06:90:4f:d8:b5:d1:ce:14:3f:da:12:32:a3:71:7f:56:21
Serial Number (int): 263570375415056926162972094899854195512865
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 00:1a:87:34:1c:d9:7d:23:44:d7:3f:86:64:42:64:d0:3a:20:e3:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f7:31:28:b3:bf:68:95:a3:ce:63:7a:fa:96:18:cf:44:48:5b:56:b4
Fingerprint (sha256): c9:82:80:0b:a9:03:d2:41:61:c8:50:0d:dd:3f:41:b8:4b:99:53:98:fe:9d:50:1b:00:4f:ee:f0:4f:a7:df:62

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.historichotels.org
historicalness.com
historicalpullmanpark.com
historicalresearchservices.com
historicalsocietyhopkinscoky.org
historicalsocietyofeastonct.org
historicalsocietyofelba.com
historicaltheology.org
historicalthinkingmissionscanada.net
historicaltruthproject.com
historicalwilliamsburg.com
historicathenaeum.com
historicbarnssanjuanislands.com
historiccitiesrules.com
historicclubcastrovillari.com
historicdc.com
historicdc.org
historicdumfries.org
historichighway101.com
historichollystreetnothighway.org
historiclittleswitzerland.com
historicmarcosregister.com
historicmichiganroad.org
historicnewyorktours.com
historicobarakaldocf.com
historicoccasions.com
tls.automattic.com
www.historicalness.com
www.historicalpullmanpark.com
www.historicalresearchservices.com
www.historicalsocietyhopkinscoky.org
www.historicalsocietyofeastonct.org
www.historicalsocietyofelba.com
www.historicaltheology.org
www.historicalthinkingmissionscanada.net
www.historicaltruthproject.com
www.historicalwilliamsburg.com
www.historicathenaeum.com
www.historicbarnssanjuanislands.com
www.historiccitiesrules.com
www.historicclubcastrovillari.com
www.historicdc.com
www.historicdc.org
www.historicdumfries.org
www.historichighway101.com
www.historichollystreetnothighway.org
www.historiclittleswitzerland.com
www.historicmarcosregister.com
www.historicmichiganroad.org
www.historicnewyorktours.com
www.historicobarakaldocf.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXRRxNueFUV74SgzbG1F
3zTFCXq6hO6NzfTcmcNy+WY7/QAVSzG4eN45l+QcoJ4CXi8jOOTuYFzAZSk92nNR
anB4YQ67kryC9r2QO41xTfX/9jT1gRgtOSorEC2MmrEVIq9Jk0SJt5ZT6c+7/bWe
JTC00tB+BbmyqzgPUyyos6Bu733JUIkhAu4SZ/nQ/jj/YdCdG24tDaFmqRjjH4Ha
E/3eq44O5dud9At6T9v8QCJluJ5+qEQoiwRT4AZ1h7qGLc6eJl8k3VP5V8pOauDg
lHFfYhcFPsCK/8XkMOPh8SQtui6UbOrJsEZZQ/EhhoCvIs3iKJiQDYVN2VNnlPsz
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263570375415056926162972094899854195512865
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-05 05:01:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-03 05:01:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24421352097359430813067259192282950803346705903326857555832784383815770070737763269982814291726579762845193548726317477465981860102209143145753605665417370076066089398686407484942134552949732720123690014410226455622755232274403505649725467107545587411536158104829967559669294643959286902017204129862187364901240225981185350696284608902675933831043427858506939792575369762294311545576199738063463890842387421389831031705185253683745121127122339023189378300001796202830481768480056269453326130184249807830391876308884585765308756311074725500352444347485234497712022593878006419737930075008614046148406331526326720869261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							001a87341cd97d2344d73f86644264d03a20e3f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1478 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.historichotels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalpullmanpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalresearchservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalsocietyhopkinscoky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalsocietyofeastonct.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalsocietyofelba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicaltheology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalthinkingmissionscanada.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicaltruthproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalwilliamsburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicathenaeum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicbarnssanjuanislands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historiccitiesrules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicclubcastrovillari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicdumfries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historichighway101.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historichollystreetnothighway.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historiclittleswitzerland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicmarcosregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicmichiganroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicnewyorktours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicobarakaldocf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicoccasions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalpullmanpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalresearchservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalsocietyhopkinscoky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalsocietyofeastonct.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalsocietyofelba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicaltheology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalthinkingmissionscanada.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicaltruthproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalwilliamsburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicathenaeum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicbarnssanjuanislands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historiccitiesrules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicclubcastrovillari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicdumfries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historichighway101.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historichollystreetnothighway.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historiclittleswitzerland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicmarcosregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicmichiganroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicnewyorktours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicobarakaldocf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001632ee3ff97000004030047304502201f235d37a43241ebb033b26a0c6ea755bf83f0ba8cb8ad32addbcc35d6f6f446022100f3a179cf070e5946d08bd0381a87c43f40dd3256e7dd415906d20d3d72aa12b7007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001632ee3ffae00000403004830460221008c2e57b09507d99c91c2d180d78fc90cbf4d3e38372ece12ec70bd8834e88b90022100d50ae6c3cbd66b5ce4c0f8154def36cc2b1c502cba7e6f469562359e3be18ea7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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