tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:36:79:f7:68:0e:0d:b7:0a:12:2e:26:5f:a5:b3:3f:05:b1 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:79:f7:68:0e:0d:b7:0a:12:2e:26:5f:a5:b3:3f:05:b1
Serial Number (int): 279874226804309487531024658448220216559025
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7d:b0:cc:34:83:1f:34:de:39:3b:12:da:04:ef:66:89:b8:f0:39:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1e:c4:07:95:f1:5e:c7:94:68:97:c7:c7:4d:ce:1f:f4:92:22:ec:d1
Fingerprint (sha256): d1:89:78:27:67:e9:20:94:0c:b5:7c:ef:4b:5f:53:1e:13:97:a1:e1:2f:1f:b0:33:ea:b9:4f:01:2b:5a:3e:5b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.legacyislepublishing.net
leftovercooking.nl
leftoversplease.com
leftoveruniverse.com
leftrightalliance.com
leftrightandcenter.net
leftup.org
leftwin.org
leftwingwatch.blog
leftwithballs.com
leftwithlouie.com
leftwoods.com
leftyhooligan.com
leftylex.com
leftysmudges.com
lefuturdestartup.com
lefuturewave.com
lefuturistedailynews.com
legaciclismoprof.org
legacy-blog.com
legacybarn.com
legacycoachingnow.com
legacydefensesystems.com
legacyinitiative.org
legacyinternationalchristiancenter.com
tls.automattic.com
www.leftonwalnut.com
www.leftovercooking.nl
www.leftoversplease.com
www.leftoveruniverse.com
www.leftrightalliance.com
www.leftrightandcenter.net
www.leftup.org
www.leftwin.org
www.leftwingwatch.blog
www.leftwithballs.com
www.leftwithlouie.com
www.leftwoods.com
www.leftyhooligan.com
www.leftylex.com
www.leftysmudges.com
www.lefuturdestartup.com
www.lefuturewave.com
www.lefuturistedailynews.com
www.legaciclismoprof.org
www.legacy-blog.com
www.legacybarn.com
www.legacycoachingnow.com
www.legacydefensesystems.com
www.legacyinitiative.org
www.legacyinternationalchristiancenter.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wfULiHz4pYzUU5o37ID
6oeXUI7hyoKGJmiKXgYGsxc/9JfQw3krQ2cyimRa9XxGAVklGJSVoZ7D/3/8dBUc
JUvx/e9iEaKaZ9PoTRm5N1G0jQwpzZLUKL1zDx3wzYdYpLPrWfkGCmZDdJoVub1M
8Agw3htUkJkb3g920xcBGZmRoGRloebZVbhou8SR6vPp0bcTlOkUTuJ8rUBxDbkA
GpjR+1kCJpB9Tijwx7pxBokU1tOGpWWcv02otIej32pJDNvczSk9sP6/H2LceCfR
PQO+gVRLEiETMAO8Yb0C5jrkGFNcVA5GMyIVw62igdFHEWlHTqLgHiX+fGe9Sjs2
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279874226804309487531024658448220216559025
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-21 14:12:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-19 14:12:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27650049326995526822884342176879236220246575516973542567998603860169151352137016893967137241566393444171873454912149645326036509435464232746081315123967598226638552339286673578447933938720014919608799544815712614460644280669713731314001894726588358232126848403546509472732367922739838454648333866605465578826191580103407997964754423020370358186743984733930790377068873871272222290119013317461435872846357112087505900992200128687269353245949059168903358185819796899792426851309493683900819384716316888302516580248490993596987659030277205605402961352372174928340233475104789011436180079292179005153369808110009244661319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7db0cc34831f34de393b12da04ef6689b8f0390e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.legacyislepublishing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftovercooking.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftoversplease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftoveruniverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftrightalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftrightandcenter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftwin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftwingwatch.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftwithballs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftwithlouie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftwoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftyhooligan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftylex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftysmudges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lefuturdestartup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lefuturewave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lefuturistedailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legaciclismoprof.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy-blog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacybarn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacycoachingnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacydefensesystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyinitiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyinternationalchristiancenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftonwalnut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftovercooking.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftoversplease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftoveruniverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftrightalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftrightandcenter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftwin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftwingwatch.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftwithballs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftwithlouie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftwoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftyhooligan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftylex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftysmudges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefuturdestartup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefuturewave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefuturistedailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legaciclismoprof.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacy-blog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacybarn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacycoachingnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacydefensesystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacyinitiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacyinternationalchristiancenter.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170fda78482000004030047304502203251bf1b97f02af63bc054f967541e357dfc320673979d63dcc348bf42b67e25022100b6e6053ed350248af3a5d202369cb51664a09b233bfe89513e26e53e6c5e69eb00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170fda784bb0000040300473045022100a593a307ab65b030f28c6a7fd33a376177bee22413459c101e17d9afc2f2e90102207ac190b46856a8062182465d1dc3f19cd1f2ad383c3e6571ea176b1b2600a12f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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