tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:91:fb:a9:25:bc:f2:b5:f3:8e:15:01:08:43:f0:b9:b7:46 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:91:fb:a9:25:bc:f2:b5:f3:8e:15:01:08:43:f0:b9:b7:46
Serial Number (int): 311012315489347088637928717215189171812166
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:88:dd:15:e2:9f:da:90:d5:5b:3a:5b:f7:3b:41:ce:79:39:28:28
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 25:54:55:e3:9d:d4:33:ec:dc:38:c0:33:6c:a0:0a:9f:21:f0:de:df
Fingerprint (sha256): 37:6d:8d:51:64:95:34:e4:48:97:64:af:97:07:79:b7:7b:59:39:2f:86:12:94:15:03:0c:20:d9:86:c7:14:3e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

macon-knights.com
maconachie.com
macondo100.com
macondoeventos.com
maconfidential.com
maconholt.com
maconkidsmagazine.com
maconnerie-traditionnelle.com
maconnerieplante.com
maconststudio.com
maconunited.org
maconversionaujudaisme.com
macorrections.com
macosamidicimai.org
macouinc.org
macoutdoors.com
macparks.org
macphersonbldrs.com
macpowerpc.com
macqliberalclub.com
macraebell.com
macraftbeer.com
macraftbeerpartnership.com
macramegardens.com
macramepurse.com
tls.automattic.com
www.macon-knights.com
www.maconachie.com
www.macondo100.com
www.macondoeventos.com
www.maconfidential.com
www.maconholt.com
www.maconkidsmagazine.com
www.maconnerie-traditionnelle.com
www.maconnerieplante.com
www.maconststudio.com
www.maconunited.org
www.maconversionaujudaisme.com
www.macorrections.com
www.macosamidicimai.org
www.macouinc.org
www.macoutdoors.com
www.macparks.org
www.macphersonbldrs.com
www.macpowerpc.com
www.macqliberalclub.com
www.macraebell.com
www.macraftbeer.com
www.macraftbeerpartnership.com
www.macramegardens.com
www.macramepurse.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJlzCCCH+gAwIBAgISA5H7qSW88rXzjhUBCEPwubdGMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTgxNjQ5MDNaFw0x
OTEwMTYxNjQ5MDNaMB0xGzAZBgNVBAMTEnRscy5hdXRvbWF0dGljLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKtkpbI7QsJBc6XsSMljcq6aC+vi
7KySby+0yb4MlaxLEf18iSOxanWudB2FytMhIxT1OI9GBLd67xai/Mj1xj4TxGCI
VaZaZpEtGXm1z/ey3K7z5KUmEanDUr5BL5fHDWP9obYUfbGD3GUPCb4aoJC34/Xv
74CzILy2YHAbCvjKLWmagu9Gcj+YnUJoRniTu1DTTfVK0MoUFXK8ubkeZJZMKWC7
Gl2wAnCGvaCfNkrkE9HTA0MxV8Am6kM5Cd9YYud2Mpr5ySqgjO05mKKPb3GoWXsk
m2cJgw9wm5/9vJR+TS4DubQtk2aTF1pTgZI8fPxvJrOsTc8AFvPX8T+I9TkCAwEA
AaOCBqIwggaeMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU2YjdFeKf2pDVWzpb9ztB
znk5KCgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCBFUGA1UdEQSCBEwwggRIghFtYWNvbi1rbmlnaHRzLmNvbYIObWFj
b25hY2hpZS5jb22CDm1hY29uZG8xMDAuY29tghJtYWNvbmRvZXZlbnRvcy5jb22C
Em1hY29uZmlkZW50aWFsLmNvbYINbWFjb25ob2x0LmNvbYIVbWFjb25raWRzbWFn
YXppbmUuY29tgh1tYWNvbm5lcmllLXRyYWRpdGlvbm5lbGxlLmNvbYIUbWFjb25u
ZXJpZXBsYW50ZS5jb22CEW1hY29uc3RzdHVkaW8uY29tgg9tYWNvbnVuaXRlZC5v
cmeCGm1hY29udmVyc2lvbmF1anVkYWlzbWUuY29tghFtYWNvcnJlY3Rpb25zLmNv
bYITbWFjb3NhbWlkaWNpbWFpLm9yZ4IMbWFjb3VpbmMub3Jngg9tYWNvdXRkb29y
cy5jb22CDG1hY3BhcmtzLm9yZ4ITbWFjcGhlcnNvbmJsZHJzLmNvbYIObWFjcG93
ZXJwYy5jb22CE21hY3FsaWJlcmFsY2x1Yi5jb22CDm1hY3JhZWJlbGwuY29tgg9t
YWNyYWZ0YmVlci5jb22CGm1hY3JhZnRiZWVycGFydG5lcnNoaXAuY29tghJtYWNy
YW1lZ2FyZGVucy5jb22CEG1hY3JhbWVwdXJzZS5jb22CEnRscy5hdXRvbWF0dGlj
LmNvbYIVd3d3Lm1hY29uLWtuaWdodHMuY29tghJ3d3cubWFjb25hY2hpZS5jb22C
End3dy5tYWNvbmRvMTAwLmNvbYIWd3d3Lm1hY29uZG9ldmVudG9zLmNvbYIWd3d3
Lm1hY29uZmlkZW50aWFsLmNvbYIRd3d3Lm1hY29uaG9sdC5jb22CGXd3dy5tYWNv
bmtpZHNtYWdhemluZS5jb22CIXd3dy5tYWNvbm5lcmllLXRyYWRpdGlvbm5lbGxl
LmNvbYIYd3d3Lm1hY29ubmVyaWVwbGFudGUuY29tghV3d3cubWFjb25zdHN0dWRp
by5jb22CE3d3dy5tYWNvbnVuaXRlZC5vcmeCHnd3dy5tYWNvbnZlcnNpb25hdWp1
ZGFpc21lLmNvbYIVd3d3Lm1hY29ycmVjdGlvbnMuY29tghd3d3cubWFjb3NhbWlk
aWNpbWFpLm9yZ4IQd3d3Lm1hY291aW5jLm9yZ4ITd3d3Lm1hY291dGRvb3JzLmNv
bYIQd3d3Lm1hY3BhcmtzLm9yZ4IXd3d3Lm1hY3BoZXJzb25ibGRycy5jb22CEnd3
dy5tYWNwb3dlcnBjLmNvbYIXd3d3Lm1hY3FsaWJlcmFsY2x1Yi5jb22CEnd3dy5t
YWNyYWViZWxsLmNvbYITd3d3Lm1hY3JhZnRiZWVyLmNvbYIed3d3Lm1hY3JhZnRi
ZWVycGFydG5lcnNoaXAuY29tghZ3d3cubWFjcmFtZWdhcmRlbnMuY29tghR3d3cu
bWFjcmFtZXB1cnNlLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf
EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC
AQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AOJpS64m6OlACeiGG7Y7g9Q+5/50iPuk
jyiTAZ3d8dv+AAABbAYzpDAAAAQDAEgwRgIhAIY61Dg6ZoFvbcWywp+MA50tgGsd
dm6my2B4SGhm2cmRAiEApTFzEkJSDPhuDTHxz7xi/4/980K1kfXUFldXKy7+5lUA
dgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWwGM6QgAAAEAwBH
MEUCIHMB4aH0bcukwakFmN50qQMk/ZmQfMv6OelK6HPRyHRWAiEA7yEXUzRKNibG
Sjz/psXeQHPCjT5+0e0jjxZjtttBirUwDQYJKoZIhvcNAQELBQADggEBAECbVRiK
TxaR0gpuSslc2sCfguar6A3QsHCVg0vtoAmruvMmgqkQRyfMvVCRS+rRY48c9RYS
qNtYdVW3+uml+CwZLFAeVdJ5mwln6aktxxv2QJDq3N1uszxG8wKTnEJwYuO9dQIk
ABN1mfevlaTtaqhp5bmwnW78KysDdb8gTM5TuYhq3VSude8ZYYI/rKfqBU7Hin2W
FwOt/mWEV5Di28+0cDw2UZpjGG3MhVYj4DqAx9HpA9b1cclTZL92mTeMkyESctEa
wg6+EneNUNd17jTZQXWaEj1A/wc5DHGiX/jyX5TMhAvbnQxK/y4avUwK8px9FJdv
Uf/asIc7ZwEGfAE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2SlsjtCwkFzpexIyWNy
rpoL6+LsrJJvL7TJvgyVrEsR/XyJI7Fqda50HYXK0yEjFPU4j0YEt3rvFqL8yPXG
PhPEYIhVplpmkS0ZebXP97LcrvPkpSYRqcNSvkEvl8cNY/2hthR9sYPcZQ8Jvhqg
kLfj9e/vgLMgvLZgcBsK+MotaZqC70ZyP5idQmhGeJO7UNNN9UrQyhQVcry5uR5k
lkwpYLsaXbACcIa9oJ82SuQT0dMDQzFXwCbqQzkJ31hi53YymvnJKqCM7TmYoo9v
cahZeySbZwmDD3Cbn/28lH5NLgO5tC2TZpMXWlOBkjx8/G8ms6xNzwAW89fxP4j1
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311012315489347088637928717215189171812166
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 16:49:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 16:49:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21636381158361561177915819035097318432921650734847299443659370859492472813261356552122395836393172950298506192126704611076421695152092917390768675064061803519513716643668991122575359552411314648147012141028165659508288539925924037423058015024768203317627197695866115353734505681982024489216612111305899268255651488002879852184770464470774386680415441954307552625518135982672399290570180860207803079746757166644630284644782447846360692029999235008484217929260249029205677386654632030059422373622245831964221186447270513048506406045186842915837044618810812771273815766937243577563303856717586212665691775749277010687289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d988dd15e29fda90d55b3a5bf73b41ce79392828
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macon-knights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maconachie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macondo100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macondoeventos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maconfidential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maconholt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maconkidsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maconnerie-traditionnelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maconnerieplante.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maconststudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maconunited.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maconversionaujudaisme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macorrections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macosamidicimai.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macouinc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macoutdoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macphersonbldrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macpowerpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macqliberalclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macraebell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macraftbeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macraftbeerpartnership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macramegardens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macramepurse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macon-knights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maconachie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macondo100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macondoeventos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maconfidential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maconholt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maconkidsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maconnerie-traditionnelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maconnerieplante.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maconststudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maconunited.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maconversionaujudaisme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macorrections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macosamidicimai.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macouinc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macoutdoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macphersonbldrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macpowerpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macqliberalclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macraebell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macraftbeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macraftbeerpartnership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macramegardens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macramepurse.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c0633a4300000040300483046022100863ad4383a66816f6dc5b2c29f8c039d2d806b1d766ea6cb6078486866d9c991022100a531731242520cf86e0d31f1cfbc62ff8ffdf342b591f5d41657572b2efee65500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c0633a420000004030047304502207301e1a1f46dcba4c1a90598de74a90324fd99907ccbfa39e94ae873d1c87456022100ef211753344a3626c64a3cffa6c5de4073c28d3e7ed1ed238f1663b6db418ab5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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