tls.automattic.com

Issued by R3

About this certificate

This digital certificate with serial number 04:41:da:74:1e:c1:08:d3:d1:1b:61:4e:63:7b:37:72:7d:58 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:41:da:74:1e:c1:08:d3:d1:1b:61:4e:63:7b:37:72:7d:58
Serial Number (int): 370857872210184743837622194951984801545560
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8c:f9:21:84:7a:c6:9d:7a:77:cf:41:b1:0d:98:3d:c7:8b:fe:07:63
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5f:bc:16:29:56:0b:e8:ab:13:ae:af:49:a4:93:ad:72:96:db:2f:1d
Fingerprint (sha256): 1f:e5:07:35:b0:77:38:a7:61:5a:dc:51:57:39:f6:31:30:3c:1d:3f:cb:15:cd:86:22:5c:d6:d3:19:09:a6:fa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amadeus-sherpa.com
amysbookblog.com
aquavisionblog.com
arcata-acupuncture.com
brenda50getactive.com
bynaazu.code.blog
cappsaicin.com
dixitpediatrics.com
ellejanae.com
finalconflictpestmanagement.com
flintadoption.com
foreverfaithfuldiamonds.com
forneycharities.org
fountainstudies.com
friendintheneighborhood.com
funkorean4u.com
gamesizme.game.blog
giacomorondina.com
got.finance.blog
healthcheckwithwainoimuriuki.fitness.blog
leiter.finance.blog
loanandinvestment.finance.blog
ptgirlstyle.fashion.blog
series.fashion.blog
tls.automattic.com
www.amadeus-sherpa.com
www.amysbookblog.com
www.aquavisionblog.com
www.arcata-acupuncture.com
www.brenda50getactive.com
www.bynaazu.code.blog
www.cappsaicin.com
www.dixitpediatrics.com
www.elguerandrea.blog
www.ellejanae.com
www.finalconflictpestmanagement.com
www.flintadoption.com
www.foreverfaithfuldiamonds.com
www.forneycharities.org
www.fountainstudies.com
www.friendintheneighborhood.com
www.funkorean4u.com
www.gamesizme.game.blog
www.giacomorondina.com
www.got.finance.blog
www.healthcheckwithwainoimuriuki.fitness.blog
www.leiter.finance.blog
www.loanandinvestment.finance.blog
www.mightymoverslimited.co.nz
www.ptgirlstyle.fashion.blog
www.series.fashion.blog

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJBzCCB++gAwIBAgISBEHadB7BCNPRG2FOY3s3cn1YMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMjAxMzQ1MTRaFw0yNDAxMTgxMzQ1MTNaMB0xGzAZBgNVBAMT
EnRscy5hdXRvbWF0dGljLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABBpS
Fs1pYhQQZCQB7KxKpz+/yy+903W6FshGCjwRX0rDi6ci8HpJ6tPhWgt0vh9yvp0n
ew0npJJOHfGig7akcyKjggb1MIIG8TAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIz5
IYR6xp16d89BsQ2YPceL/gdjMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52L
FMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVu
Y3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIE/QYD
VR0RBIIE9DCCBPCCEmFtYWRldXMtc2hlcnBhLmNvbYIQYW15c2Jvb2tibG9nLmNv
bYISYXF1YXZpc2lvbmJsb2cuY29tghZhcmNhdGEtYWN1cHVuY3R1cmUuY29tghVi
cmVuZGE1MGdldGFjdGl2ZS5jb22CEWJ5bmFhenUuY29kZS5ibG9ngg5jYXBwc2Fp
Y2luLmNvbYITZGl4aXRwZWRpYXRyaWNzLmNvbYINZWxsZWphbmFlLmNvbYIfZmlu
YWxjb25mbGljdHBlc3RtYW5hZ2VtZW50LmNvbYIRZmxpbnRhZG9wdGlvbi5jb22C
G2ZvcmV2ZXJmYWl0aGZ1bGRpYW1vbmRzLmNvbYITZm9ybmV5Y2hhcml0aWVzLm9y
Z4ITZm91bnRhaW5zdHVkaWVzLmNvbYIbZnJpZW5kaW50aGVuZWlnaGJvcmhvb2Qu
Y29tgg9mdW5rb3JlYW40dS5jb22CE2dhbWVzaXptZS5nYW1lLmJsb2eCEmdpYWNv
bW9yb25kaW5hLmNvbYIQZ290LmZpbmFuY2UuYmxvZ4IpaGVhbHRoY2hlY2t3aXRo
d2Fpbm9pbXVyaXVraS5maXRuZXNzLmJsb2eCE2xlaXRlci5maW5hbmNlLmJsb2eC
HmxvYW5hbmRpbnZlc3RtZW50LmZpbmFuY2UuYmxvZ4IYcHRnaXJsc3R5bGUuZmFz
aGlvbi5ibG9nghNzZXJpZXMuZmFzaGlvbi5ibG9nghJ0bHMuYXV0b21hdHRpYy5j
b22CFnd3dy5hbWFkZXVzLXNoZXJwYS5jb22CFHd3dy5hbXlzYm9va2Jsb2cuY29t
ghZ3d3cuYXF1YXZpc2lvbmJsb2cuY29tghp3d3cuYXJjYXRhLWFjdXB1bmN0dXJl
LmNvbYIZd3d3LmJyZW5kYTUwZ2V0YWN0aXZlLmNvbYIVd3d3LmJ5bmFhenUuY29k
ZS5ibG9nghJ3d3cuY2FwcHNhaWNpbi5jb22CF3d3dy5kaXhpdHBlZGlhdHJpY3Mu
Y29tghV3d3cuZWxndWVyYW5kcmVhLmJsb2eCEXd3dy5lbGxlamFuYWUuY29tgiN3
d3cuZmluYWxjb25mbGljdHBlc3RtYW5hZ2VtZW50LmNvbYIVd3d3LmZsaW50YWRv
cHRpb24uY29tgh93d3cuZm9yZXZlcmZhaXRoZnVsZGlhbW9uZHMuY29tghd3d3cu
Zm9ybmV5Y2hhcml0aWVzLm9yZ4IXd3d3LmZvdW50YWluc3R1ZGllcy5jb22CH3d3
dy5mcmllbmRpbnRoZW5laWdoYm9yaG9vZC5jb22CE3d3dy5mdW5rb3JlYW40dS5j
b22CF3d3dy5nYW1lc2l6bWUuZ2FtZS5ibG9nghZ3d3cuZ2lhY29tb3JvbmRpbmEu
Y29tghR3d3cuZ290LmZpbmFuY2UuYmxvZ4Itd3d3LmhlYWx0aGNoZWNrd2l0aHdh
aW5vaW11cml1a2kuZml0bmVzcy5ibG9nghd3d3cubGVpdGVyLmZpbmFuY2UuYmxv
Z4Iid3d3LmxvYW5hbmRpbnZlc3RtZW50LmZpbmFuY2UuYmxvZ4Idd3d3Lm1pZ2h0
eW1vdmVyc2xpbWl0ZWQuY28ubnqCHHd3dy5wdGdpcmxzdHlsZS5mYXNoaW9uLmJs
b2eCF3d3dy5zZXJpZXMuZmFzaGlvbi5ibG9nMBMGA1UdIAQMMAowCAYGZ4EMAQIB
MIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0
x70ADS1yb+H61BcAAAGLTYwxhQAABAMARzBFAiEAvjyML9Q+CB3cCTFg7LWRF7l6
34HYXOYUdJp+wJ48H9kCIE7zOSIIB2NWrJTNGplmwaChGstUpoIWX8baK9rNdvIn
AHUAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGLTYwxxAAABAMA
RjBEAiAXIIkprWpG0cB5tJFH8bA3b80Ip8qtzQX4NXCYpyUU3QIgEDKXJNC+Nk8g
zIhZnvSUUw8p3FJzr0Gy4W9lab43ILUwDQYJKoZIhvcNAQELBQADggEBAB0PVSqz
jNvVSHi1fu2Z7oo1hxn9AAEUbV6cv0/jN8hqB+v1YkQsXboIFSvKWfnhfGrP5WtK
kyPvKR60mEenrLgxsPsf8G9Rjw9qw2ie+6K3I2fifBIeuKegBTrEJ6z3EiwOPZ8N
4lVANbTMnrPRB7CbMaf81Roacg+KgepQp3zgdmGPzMGXqOAOPhws0QgdgvQqaQdC
1Txk8t7zZZcYLIoe7JiHQvBqbJsb4xDgdqX3429oDOvoadfVKRF1V7ZUPwllaV70
uqgcMEpk7YwHs3q3xHcYtrFLL1zDjOEcgjIkYRuG82ZlNj1WtjFkU4mTKwv66WgY
U59698zRmIBpHj8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEGlIWzWliFBBkJAHsrEqnP7/LL73T
dboWyEYKPBFfSsOLpyLweknq0+FaC3S+H3K+nSd7DSekkk4d8aKDtqRzIg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370857872210184743837622194951984801545560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 13:45:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 13:45:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00041a5216cd69621410642401ecac4aa73fbfcb2fbdd375ba16c8460a3c115f4ac38ba722f07a49ead3e15a0b74be1f72be9d277b0d27a4924e1df1a283b6a47322
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8cf921847ac69d7a77cf41b10d983dc78bfe0763
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1268 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amadeus-sherpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amysbookblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquavisionblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcata-acupuncture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brenda50getactive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bynaazu.code.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cappsaicin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dixitpediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellejanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finalconflictpestmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flintadoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreverfaithfuldiamonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forneycharities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fountainstudies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendintheneighborhood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funkorean4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamesizme.game.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giacomorondina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'got.finance.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcheckwithwainoimuriuki.fitness.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leiter.finance.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loanandinvestment.finance.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptgirlstyle.fashion.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'series.fashion.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amadeus-sherpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amysbookblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquavisionblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcata-acupuncture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brenda50getactive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bynaazu.code.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cappsaicin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dixitpediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elguerandrea.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellejanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finalconflictpestmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flintadoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foreverfaithfuldiamonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forneycharities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fountainstudies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendintheneighborhood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.funkorean4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamesizme.game.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giacomorondina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.got.finance.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthcheckwithwainoimuriuki.fitness.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leiter.finance.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loanandinvestment.finance.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mightymoverslimited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ptgirlstyle.fashion.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.series.fashion.blog'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b4d8c31850000040300473045022100be3c8c2fd43e081ddc093160ecb59117b97adf81d85ce614749a7ec09e3c1fd902204ef3392208076356ac94cd1a9966c1a0a11acb54a682165fc6da2bdacd76f22700750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b4d8c31c40000040300463044022017208929ad6a46d1c079b49147f1b0376fcd08a7caadcd05f8357098a72514dd022010329724d0be364f20cc88599ef494530f29dc5273af41b2e16f6569be3720b5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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