tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ca:c2:8a:a8:0b:20:54:72:ba:42:b7:f8:59:ed:da:ca:65 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ca:c2:8a:a8:0b:20:54:72:ba:42:b7:f8:59:ed:da:ca:65
Serial Number (int): 330332486089785389858035795623761950722661
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3d:20:e0:2f:78:5e:41:e3:7b:1f:be:cb:1d:21:66:01:88:97:af:09
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c9:37:e7:89:b7:d9:28:ce:d4:0b:84:99:7e:a1:e8:dd:a8:d9:41:45
Fingerprint (sha256): d1:6c:23:a1:b8:bc:0c:71:47:53:6b:73:05:17:8d:75:87:f6:7e:6b:ac:12:6f:2a:6b:87:cf:c4:62:fd:07:b2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

recoveringserenity.com
recoveringworkaholicblog.com
recovery-massage.com
recoverybookpress.com
recoveryelpaso.org
recoveryfaithcommunity.org
recoveryforall.org
recoveryinchristnow.com
recoverymeditation.org
recoverymodesto.com
recoveryriver.org
recoveryrocky.com
recoveryvoice.org
recoverywellness.org
recreactief.be
recreart.cat
recreate-urself.com
recreateretreat.com
recreatingherstory.com
recreatingjoy.com
recreation-law.com
recreational-blog.com
recreationalphysics.com
recreationcommunication.com
recroompdx.com
tls.automattic.com
www.recoveringtheplot.com
www.recoveringwizard.com
www.recovery4real.com
www.recoveryacounttdb.com
www.recoveryalongroute66.com
www.recoverybookpress.com
www.recoverydiva.com
www.recoveryelpaso.org
www.recoveryforall.org
www.recoveryinchristnow.com
www.recoverymeditation.org
www.recoverymodesto.com
www.recoveryrd.com
www.recoveryrocky.com
www.recoveryvoice.org
www.recoverywellness.org
www.recreacion.uy
www.recrearmagnify.org
www.recreart.cat
www.recreate-urself.com
www.recreatepsychiatry.com
www.recreatingjoy.com
www.recreationcommunication.com
www.recreogym.org
www.recroompdx.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoHUsBBrOD6TwHJB/G9g
TGc66FF8a6j6m77uHTszX8amiBBF+GF8/fiIitrdJTaaZ8ap2cf4IpZwrLNriOLm
SokFEbGZqDtCr8mjhy37iqxYI4tKnsMiN7Dbwy8atlFatyhZbtaoy9i9AkzrE1Os
OgHkaNwBxTOtsWViTLYeiT89Zu72Ds2fQDLW+KP/BBt2hPISpiA0lb5PcfrIeHgW
VqDnZHErYlULeXzBXGZ7p1Ltdi5oY3L39k84zNzFLK/tj6n6Bry+MA4g58sXinZy
izqSYzOMnvUdbBMoZrc06iJQTg+6mF/5Pf0EIKFtI1CD2y1ltamsh7vyhgheOweN
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330332486089785389858035795623761950722661
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 06:40:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 06:40:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26069112782302406784384714178602122915543307773888408482614242815400737891182149414663985487008926910300389598088135117150113729052065432671829496639629954796232706487725923549493571431095748171215330019521090239918892351629925480742065396403847301053329977706689335314315070873016244567254950841943112719062287719511556687704582500409054546897694465238144893080609762899117607692076276060765635765861547196200134845377219608936720963047203999836893825746166614264114226340067007190126936431899160253283156498207394696453856492130429957164720843359111252469010466184261121186316270863394609011814695466327356593376627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d20e02f785e41e37b1fbecb1d2166018897af09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringserenity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringworkaholicblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recovery-massage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverybookpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryelpaso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryfaithcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryforall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryinchristnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverymeditation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverymodesto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryriver.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryrocky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryvoice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverywellness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recreactief.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recreart.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recreate-urself.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recreateretreat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recreatingherstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recreatingjoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recreation-law.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recreational-blog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recreationalphysics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recreationcommunication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recroompdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringtheplot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringwizard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recovery4real.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveryacounttdb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveryalongroute66.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoverybookpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoverydiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveryelpaso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveryforall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveryinchristnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoverymeditation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoverymodesto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveryrd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveryrocky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveryvoice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoverywellness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recreacion.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recrearmagnify.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recreart.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recreate-urself.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recreatepsychiatry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recreatingjoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recreationcommunication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recreogym.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recroompdx.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016af83b8494000004030046304402203f46f5f0f85999d9ba69a9b61be14f969cfbb13d4743053fccfe1518dd5467e302203146311fa2a156d4ad79beb4d92370e6f175169c706a00992a804cba5a4578a6007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016af83b84b00000040300483046022100f64bf71516dd0e4f5f28428cf99fd5a185a2d7c5916b3b95f7041aee69c5361a02210097317d05872596fddfeb6dc4d1f101bcb9b837765246f5bae150c23ac67bf234
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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