tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:92:75:be:1c:9e:35:35:36:42:fd:14:a5:20:0e:4e:c8:de was issued on by Let's Encrypt.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:92:75:be:1c:9e:35:35:36:42:fd:14:a5:20:0e:4e:c8:de
Serial Number (int): 311174590158089697994236577053457049897182
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b0:b3:3e:3a:ed:59:87:af:b7:b6:42:eb:76:7e:f0:a9:e6:c4:c7:96
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cb:36:55:ee:0e:2c:5e:15:24:01:2e:1a:16:db:9b:58:39:06:6f:b9
Fingerprint (sha256): 1b:59:a6:f3:be:38:24:7b:b1:ad:39:f7:d1:e5:f5:a9:8b:08:23:08:7d:84:d6:cc:cb:d2:91:05:4a:24:29:93

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate tls.automattic.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tls.automattic.com
www.unviaggioin3.com
www.unviaggioperdue.com
www.unviaje.org
www.unviajeespacial.com
www.unviajepersonal.com
www.unviajerocurioso.com
www.unviajeromas.com
www.unviajesingular.com
www.unviajesinlimites.com
www.unvisator.ro
www.unvoyagedanslattente.com
www.unvoyagede1000lieues.com
www.unvoyagedemillelieues.com
www.unvoyagehorsdutemps.com
www.unvoyageur.com
www.unwadelhi.org
www.unwantedloveletter.com
www.unwantedreality.com
www.unwarrantedblog.com
www.unwashedadvocate.com
www.unwedmothersmusic.com
www.unwellness.com
www.unwholesomefoods.org
www.unwickeddiva.com
www.unwieldybeast.com
www.unwind-n-more.com
www.unwindblog.com
www.unwindingthoughts.com
www.unwindwithwineinstyle.com
www.unwinedbeanandbistro.ca
www.unwinedbottles.com
www.unwinedinmalibu.com
www.unwinedmalibu.com
www.unwinedwithme.com
www.unwisewisdom.com
www.unwisewoman.com
www.unwittinglyliving.com
www.unworthyservant.com
www.unworthytreasure.com
www.unwrapped.ie
www.unwrapped.me
www.unwrappingconflict.com
www.unwritablewrongs.com
www.unwritten.cc
www.unwrittenfeathers.com
www.unwrittengeek.com
www.unxaheart.com
www.unyarn.com
www.unycc.org
www.unydiageo.com
www.unyielding.info
www.unymktg.com
www.unyouknow.org
www.unzapatodecadacolor.com
www.unzestedefolie.com
www.uoactiveminds.org
www.uoadmin.com
www.uoblibdems.uk
www.uobwritersbloc.com
www.uocbasketball.com
www.uoecoblog.com
www.uofaagricultureclub.com
www.uofahssa.com
www.uofichristiansoncampus.com
www.uofkaren.com
www.uoflcycling.com
www.uofljazz.com
www.uofmars.org
www.uoftcaribbeanfilmfestival.com
www.uoftfilmfest.com
www.uoftrotaract.com
www.uoftwvc.com
www.uofuswe.com
www.uogmediafest.com
www.uogtheology.com
www.uoitdchealthclub.com
www.uoitdcmsa.com
www.uokappasigma.com
www.uoleva.com
www.uominidilatta.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQpOj5TJ/n8rSpkjej+t
5QHy601RjVnJewpQGQcQ3xqWCjMnXJw1iigPiiHIAYCJB5/nM6AIDJ0wDPDVRLLX
BUeYlfqL5r+8JnuXS1iUsqgnxApL3Bp5JlKRscrSnWD+HFKjT1zzNUpNgqncV7gT
ob1QmOof1IQFwhaCfR/2PvWwF6N9H4bbd1/TaB/jaLCzEKR88HRC++JwiWYrSPu7
PYYiv95QwLYdOweBaWc/v4OrF2VOp2aH8zySMIT/cqmI/PQZVfDkEllwGmvQm7TE
TAJsvsntVZX6nVIVeeVQ2gsrSKmjzb+OQ0mq4iplEdPAFx1Urn0ZgD2WzdTT6dU0
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311174590158089697994236577053457049897182
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-04 10:48:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-03 10:48:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23359168929875516940768097198168531516090718386753837088891949929286600046160449084583522749750905846987136205266302977063085758477478179318375576341456546322665395995360964346996325437821248445656179475133249979073889889123291728419249225263021087296557678770294062692123335556683911979456909609725353554066348966731905424059261912536708939686101132468128661231839516241536259377270114857863641024233388747381625514468876598408973714572676780259887562467670828964773512403007781284272632926439566894664128927487753363669504967581656833844955184952507192039422318683913445756208802352974163452703573878713064577381591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0b33e3aed5987afb7b642eb767ef0a9e6c4c796
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1860 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unviaggioin3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unviaggioperdue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unviaje.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unviajeespacial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unviajepersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unviajerocurioso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unviajeromas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unviajesingular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unviajesinlimites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unvisator.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unvoyagedanslattente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unvoyagede1000lieues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unvoyagedemillelieues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unvoyagehorsdutemps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unvoyageur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwadelhi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwantedloveletter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwantedreality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwarrantedblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwashedadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwedmothersmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwholesomefoods.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwickeddiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwieldybeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwind-n-more.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwindblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwindingthoughts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwindwithwineinstyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwinedbeanandbistro.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwinedbottles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwinedinmalibu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwinedmalibu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwinedwithme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwisewisdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwisewoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwittinglyliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unworthyservant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unworthytreasure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwrapped.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwrapped.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwrappingconflict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwritablewrongs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwritten.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwrittenfeathers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwrittengeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unxaheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unyarn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unycc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unydiageo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unyielding.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unymktg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unyouknow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unzapatodecadacolor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unzestedefolie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uoactiveminds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uoadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uoblibdems.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uobwritersbloc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uocbasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uoecoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uofaagricultureclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uofahssa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uofichristiansoncampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uofkaren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uoflcycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uofljazz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uofmars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uoftcaribbeanfilmfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uoftfilmfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uoftrotaract.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uoftwvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uofuswe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uogmediafest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uogtheology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uoitdchealthclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uoitdcmsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uokappasigma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uoleva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uominidilatta.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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