tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:44:b1:61:cd:de:84:ea:a9:53:a7:88:5a:98:0c:18:b5:48 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:44:b1:61:cd:de:84:ea:a9:53:a7:88:5a:98:0c:18:b5:48
Serial Number (int): 284711839929477519979485527709521788056904
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:82:de:b5:38:9a:c1:bc:fe:22:04:7e:cf:d5:db:a4:3b:d5:59:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d5:b2:81:ca:26:98:18:12:e5:16:61:c7:5c:fc:95:90:c3:b6:14:49
Fingerprint (sha256): de:c5:2e:0b:67:46:61:b3:4e:9a:18:56:24:cd:c1:cc:5a:cc:88:69:a0:6a:a1:b6:7a:ee:d9:56:70:2a:57:8c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sitonmecock.com
sitorimon.com
sitoxicgaming.com
sitruunaruoho.com
sitsipnbe.com
sitspike.com
sitstaysniffplay.com
sittableside.com
sittawitness.com
sitte.be
sitterbugs.ch
sittersaruba.com
sittinandwishin.com
sittingabout.com
sittingandknitting.com
sittingatthefootoftheblues.com
sittingbull.edu
sittingbytheriverside.com
sittingcomfortably.org
sittingdownwith.com
sittingducksports.com
sittinginspiltink.com
sittinginthewoods.com
sittingonthebaby.com
sittingonthehilltop.com
tls.automattic.com
www.siton.is
www.sitonmecock.com
www.sitorimon.com
www.sitoxicgaming.com
www.sitruunaruoho.com
www.sitsipnbe.com
www.sitspike.com
www.sitstaysniffplay.com
www.sittableside.com
www.sittawitness.com
www.sitte.be
www.sitterbugs.ch
www.sittersaruba.com
www.sittinandwishin.com
www.sittingabout.com
www.sittingandknitting.com
www.sittingatthefootoftheblues.com
www.sittingbull.edu
www.sittingbytheriverside.com
www.sittingcomfortably.org
www.sittingdownwith.com
www.sittingducksports.com
www.sittinginspiltink.com
www.sittinginthewoods.com
www.sittingonthebaby.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnWS0Dn3eUGUXqDDqQBc
EJvetlOIGJXTGfUEXRMMIWQPBLdWOoO6f8q3+nFzlBbHRwhOdHlhHk6I5OTDzaE4
F2IBy0ybUwHZr3qnrqKTXYUyJrV/evrVgFf8TDhT56cbuIMHlKpm2dCvVuBzr+gv
B0M9MEWUVUoTEPr1SytdLMCepFQ8PZp6c3X7ItMSk2r2dnjqtoKibgeHhDUmnw+C
aI/HP5XCzlRlHKqw2bYWAzU+lZZ/2mtzqt23JT1i5FA3yantlhjy2PEBfk7AlYhf
ILT7xRf5OFRdX2vr6Zd8U49oLttAOtqBDk0g6G823jt6mnx5B9xxSo3Vy9Wxbh7j
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284711839929477519979485527709521788056904
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-23 02:25:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-22 02:25:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23033349152491327616220002962872139987998524917117568967467074236143761962625845363357330610746195840278789167473602890037158867297422822145305079426986481090649538790949189782175269178652617466412251155466435387882485382024560469400495788427750493685439169343735021593643116639659245933906183879387886162058397893441910645513549746954707158467983216756880044947995744983457454461979297244259598486119387080413397651911428546953531638051665396839812166814250937591496995280647427906665100900471782578346432486145366654216191955286179108994459837952777479683844533647033853825696433455039681090030089235487862674088801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7882deb5389ac1bcfe22047ecfd5dba43bd5596e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitonmecock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitorimon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitoxicgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitruunaruoho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitsipnbe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitspike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitstaysniffplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittableside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittawitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitte.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitterbugs.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittersaruba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittinandwishin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingabout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingandknitting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingatthefootoftheblues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingbull.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingbytheriverside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingcomfortably.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingdownwith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingducksports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittinginspiltink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittinginthewoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingonthebaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingonthehilltop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siton.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitonmecock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitorimon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitoxicgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitruunaruoho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitsipnbe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitspike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitstaysniffplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittableside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittawitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitte.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitterbugs.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittersaruba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittinandwishin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingabout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingandknitting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingatthefootoftheblues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingbull.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingbytheriverside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingcomfortably.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingdownwith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingducksports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittinginspiltink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittinginthewoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingonthebaby.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f633600000016604761b700000040300463044022072d21935ff9eee190f5c325ad06078c6e1d017393fb10065f3b4b2aa8697178502201f9f9ba65d4e12642d1913545ce1f6ca0cbb02d1574490092b7c0b720dc95627007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016604761b810000040300463044022018b3c4ac4c1ae433d794081e0596e50862c99942c47e5b0549ca650ad343d85c022047cba9f4efd895fa3fe79f55e3c06b3c5989e18a854f575a79cab0dd981315c7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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