tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a9:ac:6f:e8:bc:85:b4:ec:ec:57:7a:90:97:44:6f:67:8e was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a9:ac:6f:e8:bc:85:b4:ec:ec:57:7a:90:97:44:6f:67:8e
Serial Number (int): 319073786085600945992849457282007526500238
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f9:df:99:da:c1:5c:08:ed:9c:a3:d3:ff:05:8a:e0:92:00:10:72:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): df:00:5c:b9:fa:eb:9a:81:26:b1:1b:4c:49:e7:df:5a:09:17:07:05
Fingerprint (sha256): db:06:27:a7:f7:91:74:48:6e:49:3f:52:41:09:d9:71:bc:8a:a9:27:48:b4:46:4f:4d:67:a7:7b:ee:60:de:0a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.epicureanusa.com
epico.pe
epicpress.biz
epicquartet.com
epicregen.org
epicsalonsweethome.com
epicsevs.com
epicsfilm.com
epicshotcandids.com
epictheology.com
epictrain.me
epictros.com
epicurean-kitten.com
epicureanescapades.com
epicureanodysseys.com
epicureantease.com
epicureanwellness.com
epicureinlight.com
epicureinparidise.com
epicurenextdoor.com
epicurenutrition.org
epicurien.me
epicurioscity.com
epicuriosos.com
epicurioucity.com
tls.automattic.com
www.epicminiwave.com
www.epico.pe
www.epicpress.biz
www.epicquartet.com
www.epicregen.org
www.epicsalonsweethome.com
www.epicsevs.com
www.epicsfilm.com
www.epicshotcandids.com
www.epictheology.com
www.epictrain.me
www.epictros.com
www.epicurean-kitten.com
www.epicureanescapades.com
www.epicureanodysseys.com
www.epicureantease.com
www.epicureanwellness.com
www.epicureinlight.com
www.epicureinparidise.com
www.epicurenextdoor.com
www.epicurenutrition.org
www.epicurien.me
www.epicurioscity.com
www.epicuriosos.com
www.epicurioucity.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV2BH7UaTxCdoMXaynis
29cWDoEulF8Lm+aPoex9pRhit1RgDR/w07fhMFhM0o00kREPV7ajym2HZ93tssfa
ZI0rTsayVl88/9MDpKo7aLaYIK3dvp8ohDusqWSNCrfv44phPIqBm3ZVAvKw1xUK
tlAuiZpfLEXJc6anml5YszMTdC2PDYbucIeSKJXWkPKxA3tDrsDUakEqajCwb6lC
82QhN6U/y69DqzJ66eFStt6D6glTmAXpVrk/8ZG18rojvzAnGPGbMe8z7G1ivfUW
hrMkSv9GF5GbVk0imM1DLKXBX96qMlua60ZhaTpzXdcn8CXPOjJMX5ReXu1bK0pj
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319073786085600945992849457282007526500238
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-03 02:29:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-02 02:29:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23400195151958918071574947020274704683966841935177480545236438479447882508758093025864613132319263511776945596185649307070732283187853247521656812195430448219667679688903928752965620702183768209499180399353560439643780518721257405584307554381971987409498226440226101249378101532107018144537715565745474829169726443631437293349939285825589112217588866528785746525871610609049594934956157889582181538393278688380800874529085912405773969682379906826270419495312614925615660174965771392586626824242197105635342666900556051243985162399567228503216937454574193344126660967713935306623234699458182157748651318545891029836619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9df99dac15c08ed9ca3d3ff058ae092001072fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1053 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.epicureanusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epico.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicpress.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicquartet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicregen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicsalonsweethome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicsevs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicsfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicshotcandids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epictheology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epictrain.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epictros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicurean-kitten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicureanescapades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicureanodysseys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicureantease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicureanwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicureinlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicureinparidise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicurenextdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicurenutrition.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicurien.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicurioscity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicuriosos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicurioucity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicminiwave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epico.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicpress.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicquartet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicregen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicsalonsweethome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicsevs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicsfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicshotcandids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epictheology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epictrain.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epictros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicurean-kitten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicureanescapades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicureanodysseys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicureantease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicureanwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicureinlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicureinparidise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicurenextdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicurenutrition.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicurien.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicurioscity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicuriosos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicurioucity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f63360000001659d7ab0e9000004030046304402202c04a85bc91f4a49469898d7e703ba6118cd74b3c1c407d2b135277c3f48a430022035bc28504f381ecea3d7b806e99c9a5c707fc1024ba47532764cfd563f8bc674007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001659d7ab11b00000403004730450220335915bc99b648015a00950d977de88acc60fe8ef231b134d74cc9bbfb36014b022100d2b10d1416a80c72aad7164a619320861f1fb7747a8e4616cde911d0f9a2c65d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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