tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:44:03:80:c9:24:b5:46:46:c5:e7:fa:89:48:12:0c:85:aa was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:44:03:80:c9:24:b5:46:46:c5:e7:fa:89:48:12:0c:85:aa
Serial Number (int): 284480715123562448591237021193221230593450
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 03:0c:b7:f5:a4:1a:0c:82:fa:bb:63:aa:d3:ec:4a:e9:a5:9f:cd:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e8:ac:71:40:c1:f9:59:69:52:2d:64:c5:17:c6:a2:9f:ed:b0:38:5a
Fingerprint (sha256): e3:81:a5:f1:69:68:84:8c:1f:2f:17:00:cd:67:00:0e:0a:b8:04:40:fc:8d:2b:c0:c9:3c:d2:fb:62:75:21:3a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

news.sosevents.org
sortofscience.com
sortyourmoney.com
sorvablog.com
sorvatar.com
soryan.us
sosanchez.com
sosangeldelaguardia.org
sosanglais.ca
sosarenders.com
sosawa.org
sosaysthefox.com
sosaysthepsychnurse.com
sosbellydance.com
sosbusinessdevelopment.com
soscatrescueaz.org
sosciencespo.fr
soscoduo.com
sosdeltallobregat.org
sosdigitalpr.com
sosecretoccultandconcealed.com
sosedov.com
sosenvahisseurs06.com
sosewsally.com
sosformazione.com
sosgals.com
tls.automattic.com
www.sortofscience.com
www.sortyourmoney.com
www.sorvablog.com
www.sorvatar.com
www.soryan.us
www.sosanchez.com
www.sosangeldelaguardia.org
www.sosanglais.ca
www.sosarenders.com
www.sosawa.org
www.sosaysthefox.com
www.sosaysthepsychnurse.com
www.sosbellydance.com
www.sosbusinessdevelopment.com
www.soscatrescueaz.org
www.sosciencespo.fr
www.soscoduo.com
www.sosdeltallobregat.org
www.sosdigitalpr.com
www.sosecretoccultandconcealed.com
www.sosedov.com
www.sosenvahisseurs06.com
www.sosewsally.com
www.sosformazione.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQHwFxtA9V+4JlssSDAx
d4f2E2Fdl/VlMZ+79OY112S9uzPATNbF4qj0+e0Le74nQJalvt9kOUEmz9v60bYr
YmDMrY7RVBGkymzyQZ4EVv7kErCWIRPN3xhQ/k2pkDOqvpVhXjXYhdb6uVRELm8f
XMKumQl9OkXCabkTcIihWvKDZ0fBIs3i1hXNdIb17M5Drku9QkBKR5AXnfezhWSM
Qg+0zXmQSRvQYdupCaxDq8OC3n5DbqAJTa9K16nhF0SGxfR1oq8mYWDs/OzaKNtm
OT3jmIaMh6q8fst1ianHOLM42Y3MPD3cMSHMRBm0W1G9rDNagL3ZK8QMVFNPjuDI
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284480715123562448591237021193221230593450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-28 06:51:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 06:51:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24869901669034423050754316600229471455397118430219212033176479461927906143850242878795280895614495237467847235142508556579145110833108422357182909080890244692011910518806595379803467511720376577417742707226334479722746846466719139643619471645398547692306081475540296862423072481656467156587086499776427867229123169123150476772783505236959436582447924775046959081775459789480022839710702939494396078391268772696451634900677586443358246304707928225505079994155341071185134824555669347317811246220999676609071329492764431254863210901942567748122370035040889207240431106915889078337655379345891023140038211130609820026991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							030cb7f5a41a0c82fabb63aad3ec4ae9a59fcdea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1047 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.sosevents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sortofscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sortyourmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorvablog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorvatar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soryan.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosanchez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosangeldelaguardia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosanglais.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosarenders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosawa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosaysthefox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosaysthepsychnurse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosbellydance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosbusinessdevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soscatrescueaz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosciencespo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soscoduo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosdeltallobregat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosdigitalpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosecretoccultandconcealed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosedov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosenvahisseurs06.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosewsally.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosformazione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosgals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sortofscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sortyourmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sorvablog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sorvatar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soryan.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosanchez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosangeldelaguardia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosanglais.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosarenders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosawa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosaysthefox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosaysthepsychnurse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosbellydance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosbusinessdevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soscatrescueaz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosciencespo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soscoduo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosdeltallobregat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosdigitalpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosecretoccultandconcealed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosedov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosenvahisseurs06.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosewsally.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosformazione.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169c348a1f6000004030046304402204ebc326f2586965e683bf86eb6dfec661da612b486036dcf13fdf04a359642a102203f7df626588156350d3aada3c0052d99299d651c610d8875ec607dae0fda7e4a007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169c348a26d0000040300483046022100c9ed8e3651724118b9c85fcea9bab71f7bb9985b343d3ea424c913446f3541f1022100c6a16b295d726a98fc59ec178bc6b999ada563fac092f21d15aee30f029fd76a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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