tls.automattic.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ef:c0:36:e2:09:80:4c:40:db:c4:2c:b6:56:e3:64:42:a5 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:ef:c0:36:e2:09:80:4c:40:db:c4:2c:b6:56:e3:64:42:a5
Serial Number (int): 342919840233183427589718446746815321883301
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5c:b0:06:24:9e:cd:8b:d2:77:4b:fb:77:72:79:68:88:51:3a:e2:56
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c7:c2:fc:4a:79:9b:8b:23:4f:1e:69:e1:44:fa:b9:c7:44:51:e9:50
Fingerprint (sha256): 1b:78:c3:46:e9:20:99:4e:f3:b8:75:e2:f6:13:aa:13:7d:da:6c:f3:f9:54:a8:ea:4f:76:91:b3:1c:54:15:a6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

belowwavesaboveclouds.com
buysmartuganda.com
canvas-lens.com
christrpv.com
cidadelatente.com
cristianministrylaroca.org
falegnameriarlab.com
harinamachintamani.com
jpbillault.com
justevents.ca
karinsplacevt.com
muskegonjubilee.org
mynature.blog
registrybee.blog
reisen-nach-spanien.com
sentient-studios.com
table-and-tree.blog
therealhairlooks.com
timesofthrissur.com
tls.automattic.com
tq11sh.co.uk
unrelenting-force.com
vincitore.car.blog
www.belowwavesaboveclouds.com
www.buysmartuganda.com
www.canvas-lens.com
www.christrpv.com
www.cidadelatente.com
www.cristianministrylaroca.org
www.falegnameriarlab.com
www.harinamachintamani.com
www.jpbillault.com
www.justevents.ca
www.karinsplacevt.com
www.muskegonjubilee.org
www.mynature.blog
www.registrybee.blog
www.reisen-nach-spanien.com
www.sentient-studios.com
www.spillingwords.blog
www.table-and-tree.blog
www.theadventuresofincognegro.com
www.thecraftyledger.blog
www.theengine.co
www.theoldenchantedwillow.com
www.thesecretreef.com
www.thestudioforlearning.com
www.threehorseshoesfordham.com
www.timesofthrissur.com
www.tq11sh.co.uk
www.vincitore.car.blog

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIoDCCB4igAwIBAgISA+/ANuIJgExA28QstlbjZEKlMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMjUxMjI0MTRaFw0yNDA2MjMxMjI0MTNaMB0xGzAZBgNVBAMT
EnRscy5hdXRvbWF0dGljLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABD/S
LihqBuX9DFq2tP6xllDL8gkbSAKVTPfYJnT8rqrInr+qjGvNqp/VZs4E2Ri5URIC
du/gSTHWMk0ri2dKEPujggaOMIIGijAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFyw
BiSezYvSd0v7d3J5aIhROuJWMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52L
FMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVu
Y3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIElwYD
VR0RBIIEjjCCBIqCGWJlbG93d2F2ZXNhYm92ZWNsb3Vkcy5jb22CEmJ1eXNtYXJ0
dWdhbmRhLmNvbYIPY2FudmFzLWxlbnMuY29tgg1jaHJpc3RycHYuY29tghFjaWRh
ZGVsYXRlbnRlLmNvbYIaY3Jpc3RpYW5taW5pc3RyeWxhcm9jYS5vcmeCFGZhbGVn
bmFtZXJpYXJsYWIuY29tghZoYXJpbmFtYWNoaW50YW1hbmkuY29tgg5qcGJpbGxh
dWx0LmNvbYINanVzdGV2ZW50cy5jYYIRa2FyaW5zcGxhY2V2dC5jb22CE211c2tl
Z29uanViaWxlZS5vcmeCDW15bmF0dXJlLmJsb2eCEHJlZ2lzdHJ5YmVlLmJsb2eC
F3JlaXNlbi1uYWNoLXNwYW5pZW4uY29tghRzZW50aWVudC1zdHVkaW9zLmNvbYIT
dGFibGUtYW5kLXRyZWUuYmxvZ4IUdGhlcmVhbGhhaXJsb29rcy5jb22CE3RpbWVz
b2Z0aHJpc3N1ci5jb22CEnRscy5hdXRvbWF0dGljLmNvbYIMdHExMXNoLmNvLnVr
ghV1bnJlbGVudGluZy1mb3JjZS5jb22CEnZpbmNpdG9yZS5jYXIuYmxvZ4Idd3d3
LmJlbG93d2F2ZXNhYm92ZWNsb3Vkcy5jb22CFnd3dy5idXlzbWFydHVnYW5kYS5j
b22CE3d3dy5jYW52YXMtbGVucy5jb22CEXd3dy5jaHJpc3RycHYuY29tghV3d3cu
Y2lkYWRlbGF0ZW50ZS5jb22CHnd3dy5jcmlzdGlhbm1pbmlzdHJ5bGFyb2NhLm9y
Z4IYd3d3LmZhbGVnbmFtZXJpYXJsYWIuY29tghp3d3cuaGFyaW5hbWFjaGludGFt
YW5pLmNvbYISd3d3LmpwYmlsbGF1bHQuY29tghF3d3cuanVzdGV2ZW50cy5jYYIV
d3d3Lmthcmluc3BsYWNldnQuY29tghd3d3cubXVza2Vnb25qdWJpbGVlLm9yZ4IR
d3d3Lm15bmF0dXJlLmJsb2eCFHd3dy5yZWdpc3RyeWJlZS5ibG9nght3d3cucmVp
c2VuLW5hY2gtc3Bhbmllbi5jb22CGHd3dy5zZW50aWVudC1zdHVkaW9zLmNvbYIW
d3d3LnNwaWxsaW5nd29yZHMuYmxvZ4IXd3d3LnRhYmxlLWFuZC10cmVlLmJsb2eC
IXd3dy50aGVhZHZlbnR1cmVzb2ZpbmNvZ25lZ3JvLmNvbYIYd3d3LnRoZWNyYWZ0
eWxlZGdlci5ibG9nghB3d3cudGhlZW5naW5lLmNvgh13d3cudGhlb2xkZW5jaGFu
dGVkd2lsbG93LmNvbYIVd3d3LnRoZXNlY3JldHJlZWYuY29tghx3d3cudGhlc3R1
ZGlvZm9ybGVhcm5pbmcuY29tgh53d3cudGhyZWVob3JzZXNob2VzZm9yZGhhbS5j
b22CF3d3dy50aW1lc29mdGhyaXNzdXIuY29tghB3d3cudHExMXNoLmNvLnVrghZ3
d3cudmluY2l0b3JlLmNhci5ibG9nMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAgYK
KwYBBAHWeQIEAgSB8wSB8ADuAHUA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZ
RnEftZsAAAGOdchzUgAABAMARjBEAiBYkIygZ+aFfSiJ8x1oRydStSj/78ttyqW6
cW2tevSVQQIgbhM99wwxiWkwq7PRKmtT1HwTu686mMrq0IRnrtVQlZoAdQCi4r/W
Ht4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAY51yHseAAAEAwBGMEQCIHes
zD9tjq5HdwCuNL5gBHSb01BprLlQIfwq3OYJOCE3AiBclJeLHTdhWeHIlBgSfX//
RvRTJOB+Wy3bl4G6TVVnezANBgkqhkiG9w0BAQsFAAOCAQEACT+PV4fAZqdTq7VF
iYoGJWjDmS0FKuMHcHkmnuBZZmo9CRViK1yAv0oQUKh3qz7GKdlNyAfHmaH8FMhN
CUtosZrUzMYF4Y7K2qzAj88/RFJVugRVgPeRgVUqSsq4F3uXfo9tSQHQvb6JS4QX
n+tJ19k+M3g46uWWKktCMbGGNHzYkTT8aAb7JZLzawTEHWgAtk53eaXJomrtzpDu
7rhzm2OOZb5ctm/iz/G4AxMQLCEZamOKwPATfY0Ai1W5NplHAz/sgO/Ize2n1Zlj
skYIiiPvqHRU0WOoJUntgFLo5ESQnmtNXUksIHFsTLw2KjTcIUMNla1wDHV6ZKle
WfHevg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEP9IuKGoG5f0MWra0/rGWUMvyCRtI
ApVM99gmdPyuqsiev6qMa82qn9VmzgTZGLlREgJ27+BJMdYyTSuLZ0oQ+w==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342919840233183427589718446746815321883301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 12:24:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 12:24:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
 . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
					d22e286a06e5fd0c5ab6b4feb19650cbf2091b4802954cf7d82674fcaeaac89ebfaa8c6bcdaa9fd566ce04d918b951120276efe04931d6324d2b8b674a10fb

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5cb006249ecd8bd2774bfb7772796888513ae256
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1166 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belowwavesaboveclouds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buysmartuganda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canvas-lens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christrpv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidadelatente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristianministrylaroca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falegnameriarlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harinamachintamani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpbillault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justevents.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karinsplacevt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskegonjubilee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynature.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registrybee.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reisen-nach-spanien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentient-studios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'table-and-tree.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therealhairlooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesofthrissur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tq11sh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unrelenting-force.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vincitore.car.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belowwavesaboveclouds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buysmartuganda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canvas-lens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christrpv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cidadelatente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristianministrylaroca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.falegnameriarlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harinamachintamani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jpbillault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justevents.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karinsplacevt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muskegonjubilee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mynature.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.registrybee.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reisen-nach-spanien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sentient-studios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spillingwords.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.table-and-tree.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theadventuresofincognegro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecraftyledger.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theengine.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theoldenchantedwillow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesecretreef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestudioforlearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.threehorseshoesfordham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timesofthrissur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tq11sh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vincitore.car.blog'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e75c873520000040300463044022058908ca067e6857d2889f31d68472752b528ffefcb6dcaa5ba716dad7af4954102206e133df70c31896930abb3d12a6b53d47c13bbaf3a98caead08467aed550959a007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e75c87b1e0000040300463044022077accc3f6d8eae477700ae34be6004749bd35069acb95021fc2adce60938213702205c94978b1d376159e1c89418127d7fff46f45324e07e5b2ddb9781ba4d55677b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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