tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9c:32:d2:59:9a:e3:0f:0e:26:af:09:24:2c:b6:29:38:b2 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9c:32:d2:59:9a:e3:0f:0e:26:af:09:24:2c:b6:29:38:b2
Serial Number (int): 314488460634482541397744153981928136587442
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 13:b0:e1:e3:e8:4f:77:c5:2f:96:81:c3:4c:8e:df:15:bd:8e:2f:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a1:8c:3f:82:5f:7a:f1:ee:50:55:e6:b5:6e:66:3d:c0:ee:52:d4:32
Fingerprint (sha256): 01:38:0a:95:81:89:16:8d:2f:f6:f7:d5:f8:32:8a:0b:41:49:40:9b:d9:77:f4:b3:9b:4a:b5:6c:32:06:87:ec

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

collagenlagi.travel.blog
dianainunrd.travel.blog
hoteldicaaereadestinosroteirosviagensdestinos.travel.blog
mhealthimpact.ucdenver.edu
pressroom.ubtrobot.com
team.ucdavis.edu
tls.automattic.com
toddpendleton.com
uber-auntie.blog
uberlegenrottweilers.com
ubermensch.blog
ubermoms.de
ubertasconsulting.com
ubiblog-jp.com
ubilibertas.blog
ubirent.org
ubp.academy
ubuntu.yoga
ubuntustories.blog
ucbeskelam.com
ucbsportsstorytelling.blog
uccpeacevillage.org
ucctrinitywads.com
ucdavisglobalhealth.com
ucelisabethsummer.com
ucfairtradeweek.com
www.collagenlagi.travel.blog
www.dianainunrd.travel.blog
www.hoteldicaaereadestinosroteirosviagensdestinos.travel.blog
www.toddpendleton.com
www.tynetri.org
www.typeafernweh.com
www.ubdoinit.club
www.uber-auntie.blog
www.uberlegenrottweilers.com
www.ubermensch.blog
www.ubermoms.de
www.ubertasconsulting.com
www.ubiblog-jp.com
www.ubilibertas.blog
www.ubirent.org
www.ubp.academy
www.ubuntu.yoga
www.ubuntustories.blog
www.ucbeskelam.com
www.ucbsportsstorytelling.blog
www.uccpeacevillage.org
www.ucctrinitywads.com
www.ucdavisglobalhealth.com
www.ucelisabethsummer.com
www.ucfairtradeweek.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZQm81MzJx4s6kMLIJGb
czMkFvh4vUUa3KCnuT58k7a0bZ7VkvxKvS0hrGhp3gkMOUYMRUB04RoLJ2mY5fE6
fK+BaDhQT3eBKAHx4PMmTmB1JE+3LydlXCzLMCv63rY0mpll1vHVNRgqpZo7c+aV
V6KkFbbBooDK2dZcrISjxTRSu08gaRLrzs7E1xTjG4wphS7DNi8hfsbfBmCYBZ15
3i9zTlHioJXqZoKei+WfYL0UJz6dXldaKfTYmdnewlNT4G4RzVppL+UqxfyNmQGS
gBat4tzntrpe7O947lsHtbL+2v0Mbp9bopdD7yeFrJ5V++k5VWklJEQx6pmYAvFX
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314488460634482541397744153981928136587442
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-23 23:46:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-22 23:46:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25951909066231896399420554143556588868816617192684991496275982715500258119506868184574353852823924824574887445853374532948168877030018057637806864787051389600107944734464118008539674092042066732095038446384791012618349289615305800047329923258480264098227916776481144324134495170611063856108079221011785580042651164787712493203141600202468401031769868190478127960906778065641916524297893874990295133356308402409008889960736485936946844500511977978660214926260255833635288000283713332816705910869322354144324068183591913191227901806108074820762271206919620662442630697005260139393768531759432732908088728059230427371501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13b0e1e3e84f77c52f9681c34c8edf15bd8e2ffa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collagenlagi.travel.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dianainunrd.travel.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoteldicaaereadestinosroteirosviagensdestinos.travel.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhealthimpact.ucdenver.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressroom.ubtrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toddpendleton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uber-auntie.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uberlegenrottweilers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubermensch.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubermoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubertasconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubiblog-jp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubilibertas.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubirent.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubp.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubuntu.yoga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubuntustories.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucbeskelam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucbsportsstorytelling.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccpeacevillage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucctrinitywads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucdavisglobalhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucelisabethsummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucfairtradeweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collagenlagi.travel.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dianainunrd.travel.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoteldicaaereadestinosroteirosviagensdestinos.travel.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toddpendleton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tynetri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.typeafernweh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubdoinit.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uber-auntie.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uberlegenrottweilers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubermensch.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubermoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubertasconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubiblog-jp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubilibertas.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubirent.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubp.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubuntu.yoga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubuntustories.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucbeskelam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucbsportsstorytelling.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uccpeacevillage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucctrinitywads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucdavisglobalhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucelisabethsummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucfairtradeweek.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d60bc2cc20000040300473045022100db202806c8af5e6e54fa381d968707c531fcb37155a61d6bdfef451c0bed5f82022010c6ff797deb47464fd678753546f55fb2db13090d16d1dd5ecc5b45ca76478e00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d60bc2cd50000040300483046022100a34834f3588b56f7abbb09c5bf2291f2f0e11e75f9480fc76cc57ad7b57bab99022100b672c8e0f1f13137ecc23e6b61e780b2ee9bdb84a694cecbbf47a463c933c0d4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0044b0bd9127d1789373975399546dd3add0d21f3020eb8fd1147d5884e1ad10c0eed77869135d95cc6d086a8c3b0d20b2439c5f2301890c0026f64ca9b6e96e68f1adcf9d270357bf26735cd8faa34102ab969ad2cd8dd22db1cd66dbc962e8532fdc4e4a75084d6c5b90108e0c7079793b4651c4ea233e6528f5eef8dc58afb23ef545b1f25365d196790aeec6b0cb8ca13100ede2d30bf17e0ebcfe7c8d48a29498c1181606226c702653377b26b742f67e5611d3239f0a47ca622d6589fc0384d58673e41164cc58ea39a567b389fdb4a7c5d15eab205d4e2dfab775162bb52cc6cad82d83895d8d3a41ab234690fd4cb0ffb1390743ec37ffdd03a27356c9