tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ea:13:7f:04:fb:4a:0d:86:50:ed:88:06:b1:20:24:2b:70 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ea:13:7f:04:fb:4a:0d:86:50:ed:88:06:b1:20:24:2b:70
Serial Number (int): 340988846509440113161734781479015189588848
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 98:bd:c6:38:4c:70:f3:53:db:9b:2b:ef:51:c8:63:97:7f:98:20:f4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f9:2e:40:b4:fb:32:f8:5b:58:57:46:75:76:c5:83:30:97:44:99:16
Fingerprint (sha256): 1e:94:a9:e8:1a:46:83:5a:6f:ec:67:f1:18:69:8e:5e:cd:c2:7d:4b:1b:b8:68:66:54:a4:d4:a4:d2:01:1a:b8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tls.automattic.com
www.yondersonder.com
www.yonibarmitsva.com
www.yopintoinc.com
www.yopplay.com
www.yorkecobusinesscentre.com
www.yorktruckandtractorllc.com
www.yosoyketo.com
www.youareakee.com
www.youaresalt.com
www.youchooseyourown.com
www.youdidntaskme.com
www.youdontlooksickblog.com
www.youdrinkwedrive.ie
www.yougogirl3d.blog
www.youlefang.online
www.youlittlebinx.com
www.youmeeddie.com
www.younceenterprises.com
www.young-guns.org
www.youngafricanvoice.com
www.youngage.blog
www.younghock.blog
www.youngleansixsigma.com
www.youngpatriotsforliberty.com
www.your-chinese-name.com
www.your-employment-solution.com
yondersonder.com
yonibarmitsva.com
yopintoinc.com
yopplay.com
yorkecobusinesscentre.com
yorktruckandtractorllc.com
youareakee.com
youaresalt.com
youchooseyourown.com
youdidntaskme.com
youdontlooksickblog.com
youdrinkwedrive.ie
yougogirl3d.blog
youlittlebinx.com
youmeeddie.com
younceenterprises.com
young-guns.org
youngafricanvoice.com
youngage.blog
younghock.blog
youngleansixsigma.com
youngpatriotsforliberty.com
your-chinese-name.com
your-employment-solution.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJwDCCCKigAwIBAgISA+oTfwT7Sg2GUO2IBrEgJCtwMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MjgyMTU3MzZaFw0x
OTA3MjcyMTU3MzZaMB0xGzAZBgNVBAMTEnRscy5hdXRvbWF0dGljLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLUiE8kUaxW0ORVsckpx2q9cfuy
OrFnNvq/hghqZdOdo2i5t5RuUnz+5OnlL10dNmAXKFNyvNPWsfIxmIEYWFEPNIG0
H3FbBz4veNnRO9h5kXCvVUDSYSCkT2bxRbYoCMcq9h6/2r81WujrIogt9+tmExGX
fSw9u1bDZXXHEoHcc/gZyQOS/k09xuY/922iDyMzonZhvtVXSSZ9GYMGmvLDLW9P
SoVkKMlRq/J9JuQid81dm8VblflR5y5QKMcxjL/PNB7QZTgbuCUOG4RO+saNPePA
vBh9FAUTlaM4THycmliCjZksPCoDhZN8UWrsXMrDDLxGOJNHEXDKLyHFzOECAwEA
AaOCBsswggbHMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUmL3GOExw81PbmyvvUchj
l3+YIPQwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCBH4GA1UdEQSCBHUwggRxghJ0bHMuYXV0b21hdHRpYy5jb22CFHd3
dy55b25kZXJzb25kZXIuY29tghV3d3cueW9uaWJhcm1pdHN2YS5jb22CEnd3dy55
b3BpbnRvaW5jLmNvbYIPd3d3LnlvcHBsYXkuY29tgh13d3cueW9ya2Vjb2J1c2lu
ZXNzY2VudHJlLmNvbYIed3d3Lnlvcmt0cnVja2FuZHRyYWN0b3JsbGMuY29tghF3
d3cueW9zb3lrZXRvLmNvbYISd3d3LnlvdWFyZWFrZWUuY29tghJ3d3cueW91YXJl
c2FsdC5jb22CGHd3dy55b3VjaG9vc2V5b3Vyb3duLmNvbYIVd3d3LnlvdWRpZG50
YXNrbWUuY29tght3d3cueW91ZG9udGxvb2tzaWNrYmxvZy5jb22CFnd3dy55b3Vk
cmlua3dlZHJpdmUuaWWCFHd3dy55b3Vnb2dpcmwzZC5ibG9nghR3d3cueW91bGVm
YW5nLm9ubGluZYIVd3d3LnlvdWxpdHRsZWJpbnguY29tghJ3d3cueW91bWVlZGRp
ZS5jb22CGXd3dy55b3VuY2VlbnRlcnByaXNlcy5jb22CEnd3dy55b3VuZy1ndW5z
Lm9yZ4IZd3d3LnlvdW5nYWZyaWNhbnZvaWNlLmNvbYIRd3d3LnlvdW5nYWdlLmJs
b2eCEnd3dy55b3VuZ2hvY2suYmxvZ4IZd3d3LnlvdW5nbGVhbnNpeHNpZ21hLmNv
bYIfd3d3LnlvdW5ncGF0cmlvdHNmb3JsaWJlcnR5LmNvbYIZd3d3LnlvdXItY2hp
bmVzZS1uYW1lLmNvbYIgd3d3LnlvdXItZW1wbG95bWVudC1zb2x1dGlvbi5jb22C
EHlvbmRlcnNvbmRlci5jb22CEXlvbmliYXJtaXRzdmEuY29tgg55b3BpbnRvaW5j
LmNvbYILeW9wcGxheS5jb22CGXlvcmtlY29idXNpbmVzc2NlbnRyZS5jb22CGnlv
cmt0cnVja2FuZHRyYWN0b3JsbGMuY29tgg55b3VhcmVha2VlLmNvbYIOeW91YXJl
c2FsdC5jb22CFHlvdWNob29zZXlvdXJvd24uY29tghF5b3VkaWRudGFza21lLmNv
bYIXeW91ZG9udGxvb2tzaWNrYmxvZy5jb22CEnlvdWRyaW5rd2Vkcml2ZS5pZYIQ
eW91Z29naXJsM2QuYmxvZ4IReW91bGl0dGxlYmlueC5jb22CDnlvdW1lZWRkaWUu
Y29tghV5b3VuY2VlbnRlcnByaXNlcy5jb22CDnlvdW5nLWd1bnMub3JnghV5b3Vu
Z2FmcmljYW52b2ljZS5jb22CDXlvdW5nYWdlLmJsb2eCDnlvdW5naG9jay5ibG9n
ghV5b3VuZ2xlYW5zaXhzaWdtYS5jb22CG3lvdW5ncGF0cmlvdHNmb3JsaWJlcnR5
LmNvbYIVeW91ci1jaGluZXNlLW5hbWUuY29tghx5b3VyLWVtcGxveW1lbnQtc29s
dXRpb24uY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw
JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYB
BAHWeQIEAgSB9gSB8wDxAHYAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7
zFYAAAFqZisHvAAABAMARzBFAiEAqkoSDMBkNIOhhDeqkmjYKwAqC4CgNh01iI1z
dIr/nVMCIGZUbIMgJpvzBGE22VvgGcELgl5Do2spHNIhExQToyenAHcAY/Lbzeg7
zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFqZisGEAAABAMASDBGAiEA2p3P
QcMjdT0SkOyqOVvBat9ikIBf9kTSxzxk1BJZTDECIQCBoH8WfPqFjiuf80S4W9ya
CyYElBL1JaMVXt7C/rqmjjANBgkqhkiG9w0BAQsFAAOCAQEAICOTUHsThhDlAGDC
TlyFL6231tMnhp9/jz42y0eK23YcjWZy/oMEPRLVg8LPaIQkN17eJQmjS/UfUQxT
rLQYwUIfob2iWbA+C7kSNnbCjl7tPuDBZiS+VQPJG17J0TWXk7QYfHS3pArjOpXS
m+Q+BIqpuC1H6rNeIul0RZdJslhy0w9P08bGQzTMMzItjxgZaUfmAr8nr4aCBS3U
Pqc93aE41oAs++f2Rjkmpli/Tp7J8Lb0pFySFCt/QtG8CTFBYkqMsmV3hiOBJdba
AEfu+V9ikzEqADKTZXZ0SBQdsomVfObgTo4GE/RhOa3I49FLHPT9r6u0UuwRzNtI
yZz09Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstSITyRRrFbQ5FWxySnH
ar1x+7I6sWc2+r+GCGpl052jaLm3lG5SfP7k6eUvXR02YBcoU3K809ax8jGYgRhY
UQ80gbQfcVsHPi942dE72HmRcK9VQNJhIKRPZvFFtigIxyr2Hr/avzVa6OsiiC33
62YTEZd9LD27VsNldccSgdxz+BnJA5L+TT3G5j/3baIPIzOidmG+1VdJJn0Zgwaa
8sMtb09KhWQoyVGr8n0m5CJ3zV2bxVuV+VHnLlAoxzGMv880HtBlOBu4JQ4bhE76
xo0948C8GH0UBROVozhMfJyaWIKNmSw8KgOFk3xRauxcysMMvEY4k0cRcMovIcXM
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340988846509440113161734781479015189588848
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-28 21:57:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 21:57:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22575221944891426609589094925799579217875463903074922225765041577660797043728931420882474045818534994592779902974961548863884540721947941943719180683995819580026942988050813553545995252036848487968326300556785572291130934449134215798762439848849956354872831951809454199036812005633457311652108506624091370468085842174722149568510605877184343113363533768521180726908167268273168864984900723860725101485523879109636096774063689334726992829043459781962136764894822153127259589787001363302857347802529486259058945919296994355636609952011078100262543896162119889199283620668746275854837249935238755108073353390111913790689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98bdc6384c70f353db9b2bef51c863977f9820f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yondersonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yonibarmitsva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yopintoinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yopplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yorkecobusinesscentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yorktruckandtractorllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yosoyketo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youareakee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youaresalt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youchooseyourown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youdidntaskme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youdontlooksickblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youdrinkwedrive.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yougogirl3d.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youlefang.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youlittlebinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youmeeddie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.younceenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.young-guns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youngafricanvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youngage.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.younghock.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youngleansixsigma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youngpatriotsforliberty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.your-chinese-name.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.your-employment-solution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yondersonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yonibarmitsva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yopintoinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yopplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkecobusinesscentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorktruckandtractorllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youareakee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youaresalt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youchooseyourown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youdidntaskme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youdontlooksickblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youdrinkwedrive.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yougogirl3d.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youlittlebinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youmeeddie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'younceenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'young-guns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngafricanvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngage.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'younghock.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngleansixsigma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngpatriotsforliberty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'your-chinese-name.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'your-employment-solution.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a662b07bc0000040300473045022100aa4a120cc0643483a18437aa9268d82b002a0b80a0361d35888d73748aff9d53022066546c8320269bf3046136d95be019c10b825e43a36b291cd221131413a327a700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a662b06100000040300483046022100da9dcf41c323753d1290ecaa395bc16adf6290805ff644d2c73c64d412594c3102210081a07f167cfa858e2b9ff344b85bdc9a0b26049412f525a3155edec2febaa68e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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