tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:17:67:7b:4e:ca:7d:66:e2:8a:64:e8:6e:78:a2:a4:63:96 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:17:67:7b:4e:ca:7d:66:e2:8a:64:e8:6e:78:a2:a4:63:96
Serial Number (int): 269300902968612618637417420938108450661270
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fe:4c:07:99:cc:2c:c9:64:7d:d2:18:9f:13:60:f8:f1:cb:c3:57:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8a:d7:c4:bc:63:f6:ea:ee:43:70:d2:e1:a0:a1:0d:a5:d0:71:39:71
Fingerprint (sha256): dc:cc:e4:7d:5d:a3:7c:d5:fb:24:f3:7f:89:3b:29:59:fe:53:6d:18:4d:79:c0:0e:db:b6:5b:ed:97:e3:68:2e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sitspike.com
sitstaysniffplay.com
sittableside.com
sitte.be
sitterbugs.ch
sittersaruba.com
sittinandwishin.com
sittingabout.com
sittingandknitting.com
sittingatthefootoftheblues.com
sittingbull.edu
sittingbytheriverside.com
sittingcomfortably.org
sittingducksports.com
sittinginspiltink.com
sittinginthewoods.com
sittingonthebaby.com
sittingonthehilltop.com
sittingontheswings.com
sittingonwheels.com
sittingprettyinthequeencity.com
sittingprettyredesign.com
sittingthewall.com
sittingunderthefamilytree.com
sittrotselfies.com
tls.automattic.com
www.sitsipnbe.com
www.sitspike.com
www.sitstaysniffplay.com
www.sittableside.com
www.sitte.be
www.sitterbugs.ch
www.sittersaruba.com
www.sittinandwishin.com
www.sittingabout.com
www.sittingandknitting.com
www.sittingatthefootoftheblues.com
www.sittingbull.edu
www.sittingbytheriverside.com
www.sittingcomfortably.org
www.sittingducksports.com
www.sittinginspiltink.com
www.sittinginthewoods.com
www.sittingonthebaby.com
www.sittingonthehilltop.com
www.sittingontheswings.com
www.sittingonwheels.com
www.sittingprettyredesign.com
www.sittingthewall.com
www.sittingunderthefamilytree.com
www.sittrotselfies.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09s36gME5oflxzKhyMG7
OCaQAFqKrdrxT6vp3hUqaghUWiI1NbenTpwjDLHPzhK9X0LRK3l8os8tsV3JqKFS
NIt+9JAREPawCwDn8kp+ip2tuM3qdECu8pRxQm4wzeVX4I25gXKitCnQTKiA0LFm
/dihGV90SdZrdDSPtIHjIO9DqqsLgfF67am4AthdEgrFn5FyDCMnCE2gxeJfkUc8
Ax6D5YRnttvOtIdc+wnDc6POAhBoQuKWegb1m0yL0Ppp/aUT54bRdlN+Q8j0j5+1
mYgRR+5Rl4173yjtysB3ZpnfGaFlkT2svgmc2uAAltPTLz0RAWy9RdAUgi57GKWt
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269300902968612618637417420938108450661270
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-25 01:18:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-25 01:18:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26744382976987332940236795576694891579768270082052967467361500553016434586658059247667492409111914496330200661272605591489922970911879123057178403698521964580104055484165206824023816361089166870615769630068260267535100383674380197497401207013488969202410619294339443395273734745639227286003141761431109731694644367761094271993588760595225940738500298955297079465126486993715793684306221936981054815919284989241351347133019951276890357755187875616450946290265866024821447840670463991739487546084881323048588077408186577789008339679527477068605521771965051401897374627298579599826445532421474009967790854819391520222637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe4c0799cc2cc9647dd2189f1360f8f1cbc35733
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1210 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitspike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitstaysniffplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittableside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitte.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitterbugs.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittersaruba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittinandwishin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingabout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingandknitting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingatthefootoftheblues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingbull.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingbytheriverside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingcomfortably.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingducksports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittinginspiltink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittinginthewoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingonthebaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingonthehilltop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingontheswings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingonwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingprettyinthequeencity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingprettyredesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingthewall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingunderthefamilytree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittrotselfies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitsipnbe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitspike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitstaysniffplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittableside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitte.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitterbugs.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittersaruba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittinandwishin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingabout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingandknitting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingatthefootoftheblues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingbull.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingbytheriverside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingcomfortably.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingducksports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittinginspiltink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittinginthewoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingonthebaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingonthehilltop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingontheswings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingonwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingprettyredesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingthewall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingunderthefamilytree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittrotselfies.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016882cd8a86000004030046304402206250490ff0c03c0cf70dadbd4756d9892b3eb1e5f0f07f2b1144baf8336a78d402204d9999c7057ce3b7253c61827e187c462d2d480c242ebfd0e5f9ec2272d872ff007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016882cd8ad0000004030046304402201b8e879688edd972067304c0961fa6f5b196f1f79ee0f66236ea60a565cb55030220136a06b70640e20548646e60db378bdd663342fd1f380746c4f79204af509a3e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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