tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9d:d2:ab:26:82:c2:ed:6d:e0:51:26:06:0c:2a:dd:53:aa was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9d:d2:ab:26:82:c2:ed:6d:e0:51:26:06:0c:2a:dd:53:aa
Serial Number (int): 315041215944837273684274084352637823439786
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:6f:e7:b8:50:47:0d:23:39:ec:06:6a:70:1e:a4:d8:f9:21:25:83
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 11:46:3e:a9:23:3a:5d:cd:5f:b9:e8:d7:a8:75:31:75:77:c4:61:a9
Fingerprint (sha256): ca:92:3e:24:d8:1a:9a:02:96:a0:70:a1:90:07:c1:fa:5b:f2:14:af:74:14:a9:6a:7c:8d:85:39:90:18:75:2b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.recon419.com
recommissionfornewtowns.org
recomposing.me
reconciliationnow.org
reconciliationpoetry.com
reconectandocoaching.com
reconectandocongema.com
reconectarbrasil.com
reconectiva.net
reconexaodoser.com
reconnascience.com
reconnectingstories.be
reconnectingtime.com
reconomycentre.org
reconsideringrussia.org
reconstructingeconomics.com
recopilacionlegal.com
record-spinning.com
recordforjack.com
recordgroove.net
recording-economics.org
recordingartmusic.com
recordingthelight.com
recordlivinglab.org
recordshopshots.com
tls.automattic.com
www.blog.recon419.com
www.recommendedresale.com
www.recommissionfornewtowns.org
www.reconcera.com
www.reconcileministries.com
www.reconciliationnow.org
www.recondent.ro
www.reconditionarepardoseli.com
www.reconditiontech.com
www.reconectacuritiba.com
www.reconectiva.net
www.reconentertainmentnews.com
www.reconevent.com
www.reconexaocuritiba.com
www.reconfiguredartjewelry.com
www.reconfiguremyhome.com
www.reconnectingstories.be
www.reconnectingtime.com
www.reconomycentre.org
www.reconquerirsonexcomment.com
www.reconsideringrussia.org
www.record-spinning.com
www.recordbreakerschi.com
www.recordingartmusic.com
www.recordshopshots.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTDoWg1p6Pt+x/W5wtOF
w1WqQ/uTsfMqhv6Wn7+y+hDC7ZGdVKquv5SViOPMz40gB4o4pQAwrEp7QTt2ETl+
u0v3qdW6M+jzgLo1DsN8f0A/EchRDufaLyirArrZD5OBex586yQr1c+hnawJErzU
QDsXgBMRSBqeZPoLOgd529oSki/XcojBltte5+wERd5/g/ZT/qI+pydJ5j3ryA0P
U62ROyO2XtVybuR/noC05F+JCLy0nkDei64cRxP3zluyD8mhmNiFiLYiksGVhMs2
iYLPJ8qjtqM4zLXuS4h1d779JZQOu0U8tmxcW/y7PhSrLcTIZaGxEWaJVtckQAMu
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315041215944837273684274084352637823439786
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-21 06:43:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-20 06:43:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24388110106750510691809833262694108518266376313350359923648256408883978314892524315639157077231245858824093667712562163386731920107926587392794934309541799236045803688001018492984033001729615434236285326696533197422828888433353182564975239570830193556937584973011479250189466842770781622820251463283763127980415670932194727010986798452065683629149816265416004292031613629287332358388350358890846430334562391947776060449767926771461327041532031350075962353179463003489644505538396236368613223766111054197263607221957692311563612701702423249442050146440858146844118885142187453972318308501865982817741927332481306144391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c56fe7b850470d2339ec066a701ea4d8f9212583
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.recon419.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recommissionfornewtowns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recomposing.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconciliationnow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconciliationpoetry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconectandocoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconectandocongema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconectarbrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconectiva.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconexaodoser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconnascience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconnectingstories.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconnectingtime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconomycentre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconsideringrussia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconstructingeconomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recopilacionlegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'record-spinning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recordforjack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recordgroove.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recording-economics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recordingartmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recordingthelight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recordlivinglab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recordshopshots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blog.recon419.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recommendedresale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recommissionfornewtowns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconcera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconcileministries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconciliationnow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recondent.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconditionarepardoseli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconditiontech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconectacuritiba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconectiva.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconentertainmentnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconevent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconexaocuritiba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconfiguredartjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconfiguremyhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconnectingstories.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconnectingtime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconomycentre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconquerirsonexcomment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconsideringrussia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.record-spinning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recordbreakerschi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recordingartmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recordshopshots.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165fb1589f00000040300473045022100ebc89836851290883fd8cc69e0e2daf9c94fecbda5ce4b2179e5ef1eed72563e02203cf5d3b9f2a29295f27329d0c03e98078471d7b49a198b1b36a58c3c4409110f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165fb158cc90000040300473045022100bcccdd3983de560c5d21fa36cd06c49a10efc3a1bf5ecdecaf28259f957312f202202b766cae1f446d2cc32019317758e4542cb1aabf0b29fadd7840b55031a9e3c4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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