DV SSL/TLS Certificate for tls.automattic.com

Certificate is witin its validity period

Issued by Let's Encrypt (E5)

About the tls.automattic.com DV SSL/TLS Certificate

This certificate with serial number 06:32:67:17:4f:aa:fd:16:c2:b2:23:0e:c8:3b:77:35:68:f7 for tls.automattic.com was issued on by Let's Encrypt.

With 41 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for tls.automattic.com provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:32:67:17:4f:aa:fd:16:c2:b2:23:0e:c8:3b:77:35:68:f7
Serial Number (int): 539824865458859469228041552720803568904439
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 03:35:a0:b2:ba:d0:d1:2b:20:20:1a:44:80:8f:92:93:77:f5:66:d0
Authority Key Identifier: 9f:2b:5f:cf:3c:21:4f:9d:04:b7:ed:2b:2c:c4:c6:70:8b:d2:d7:0d

Fingerprint (SHA-1): ea:7b:f4:bd:6f:3a:f4:28:a3:62:f3:f8:ed:d5:5d:a4:d3:80:c2:3c
Fingerprint (SHA-256): ba:e0:fb:a8:8d:98:fe:d8:d0:c6:58:35:8a:05:b7:0e:b4:62:53:b0:d1:4a:74:ae:6e:3b:39:ea:39:30:f8:ee

Issuing Certificate URL: http://e5.i.lencr.org/

Revocation Information

CRL Distribution Point: http://e5.c.lencr.org/120.crl

Check the revocation status for certificate tls.automattic.com
41
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for tls.automattic.com

Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
ECDSA with SHA384
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

elevateyourbeing.life
energiedelasoare.ro
freddieandsteviesadventures.com
lycurgus.nl
piscesstargazing.com
stykdesign.com
tls.automattic.com
wordfilledwomen.com
wordforlifesays.com
wordfortheweary.com
wordgeekco.com
wordgeyser.com
wordgirl63.com
wordonthehills.com
worlds.lu
writtenbycllilley.blog
www.dermatologmesutdemirci.com
www.elevateyourbeing.life
www.energiedelasoare.ro
www.freddieandsteviesadventures.com
www.piscesstargazing.com
www.spizzometro.it
www.stykdesign.com
www.talesofpie.com
www.wordcloudportraits.com
www.wordenfarmtotable.com
www.wordepress.com
www.wordfeudforbundet.net
www.wordfilledwomen.com
www.wordforlifesays.com
www.wordfortheweary.com
www.wordgeekco.com
www.wordgeyser.com
www.wordofmouthtrends.net
www.wordonawhim.com
www.wordrpress.com
www.worldpokerfederation.org
www.writtenbycllilley.blog
www.yanamori.com
www.yetyhomeservices.com
www.yoandevios.com

X.509 Certificate

The complete raw X.509 certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAECv967VsKOkiK5XtFjlp9rA8QACJH
Rm9BMf5qdI2VE1cdJhPPqawTlv+nCPJsfjxHHr+A4uJcn79H6DJwqBRr0w==
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 539824865458859469228041552720803568904439
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'E5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-11 07:34:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-09 07:34:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00040aff7aed5b0a3a488ae57b458e5a7dac0f10002247466f4131fe6a748d9513571d2613cfa9ac1396ffa708f26c7e3c471ebf80e2e25c9fbf47e83270a8146bd3
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0335a0b2bad0d12b20201a44808f929377f566d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f2b5fcf3c214f9d04b7ed2b2cc4c6708bd2d70d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e5.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (932 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevateyourbeing.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energiedelasoare.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freddieandsteviesadventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lycurgus.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piscesstargazing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stykdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordfilledwomen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordforlifesays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordfortheweary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordgeekco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordgeyser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordgirl63.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordonthehills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worlds.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writtenbycllilley.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dermatologmesutdemirci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elevateyourbeing.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energiedelasoare.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freddieandsteviesadventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piscesstargazing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spizzometro.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stykdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talesofpie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordcloudportraits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordenfarmtotable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordfeudforbundet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordfilledwomen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordforlifesays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordfortheweary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordgeekco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordgeyser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordofmouthtrends.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordonawhim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordrpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldpokerfederation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.writtenbycllilley.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yanamori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yetyhomeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yoandevios.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e5.c.lencr.org/120.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a845400000196be7a243400000403004730450220573b0b3b4a2378e9ce10a319f78b350d3ebab1cdcd0f6a5e6b5051ff647b9717022100862aa458ae07ad7aea45ace0eeba30a0c4b1e5b7857f9ed1c846364fa4684c19007700dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a00000196be7a2478000004030048304602210091bdcbd1bee871c7149d5bcc46312851c0887ccdadda96dd184ff3d855b1adc2022100be8d7aa45e3fb54f6402a51cb0063ddbbaab54731e4b9b2cd92cd85a66c02301
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3
 . . . . [c:0|t:3|false] BIT STRING (824 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 32221360023776064570802822209942946543823803034686071098671319741242285800490675664997675057066016125828217371113265
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 9195531991775792658051776659418969625130226154581301382220445713651110606954320360547110331520224164724897666873232