tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2d:26:b6:ae:c0:4c:a5:59:1d:64:5f:c8:e1:e4:e3:47:d0 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2d:26:b6:ae:c0:4c:a5:59:1d:64:5f:c8:e1:e4:e3:47:d0
Serial Number (int): 276701023512965849929991163558404313794512
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c6:c4:55:46:72:32:cd:f6:93:85:ad:94:32:53:da:c9:ee:90:3e:f4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c3:f5:c2:0b:4c:88:fd:2b:3f:24:3d:7b:da:e3:2b:83:a9:3c:a6:0d
Fingerprint (sha256): 38:77:f5:d8:59:37:70:3a:79:74:0d:e8:14:fb:08:b1:0e:99:17:2f:32:7f:1a:cb:46:b5:a5:dc:6f:85:1a:3a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cienaguaspta.org
cienmilpedaladas.com
cigene.no
cimassotherapiechambly.com
cimowrites.com
cincopalabras.com
cincyfitnessleague.com
cindywoodforcountyclerk.com
cinefilocronico.com
cinephilion.net
cinziacolman.com
ciphercanyon.com
circlesandsticks.com
circlesquarelife.com
circlesquarelife.org
circusvagabond.com
cisxiaohua.org
cithelpnow.com
citisci.org
citizenshipcyprus.com
city247.net
citymusiclive.com
cityskippergal.com
civilnomics.com
civilnomics.org
tls.automattic.com
www.cienaguaspta.org
www.cienmilpedaladas.com
www.cigene.no
www.cimassotherapiechambly.com
www.cimowrites.com
www.cincopalabras.com
www.cincyfitnessleague.com
www.cindywoodforcountyclerk.com
www.cinefilocronico.com
www.cinephilion.net
www.cinziacolman.com
www.ciphercanyon.com
www.circlesandsticks.com
www.circlesquarelife.com
www.circlesquarelife.org
www.circusvagabond.com
www.cisxiaohua.org
www.cithelpnow.com
www.citisci.org
www.citizenshipcyprus.com
www.city247.net
www.citymusiclive.com
www.cityskippergal.com
www.civilnomics.com
www.civilnomics.org

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJiTCCCHGgAwIBAgISAy0mtq7ATKVZHWRfyOHk40fQMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDIwNDAyNTRaFw0y
MDA1MzEwNDAyNTRaMB0xGzAZBgNVBAMTEnRscy5hdXRvbWF0dGljLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALrbFRu5lw2yZ78lGhT9fr3rbmBp
NhE10zicfzVDQf2zCNlY5tIC7f355dcQT6hAdyAKXH1FAjuzTGeUaSpXO4jhiFhP
ASllbpUsWNhEvauzN3A7RyEokgQehx8cnWkYBHrWuHOuPIZ1RVyKKFHAkzutiLu9
I0kR2J/MavAF3P3rDRc75JlWdHTFb2gl/LypJNh2KZorZSfseUhNxHL2j1tM9yOo
Zo+n/hA0PNVgtcrq8srXI5Y315164TbIu4S6ShLSwpz1WBONvc7hOAu1aVu52Fv5
6bF7y/wt5tDMbdHf1M44Euf79c1gB+OZTkDGvg3KIKOOEqa7egVy6Blld5ECAwEA
AaOCBpQwggaQMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUxsRVRnIyzfaTha2UMlPa
ye6QPvQwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCBEcGA1UdEQSCBD4wggQ6ghBjaWVuYWd1YXNwdGEub3JnghRjaWVu
bWlscGVkYWxhZGFzLmNvbYIJY2lnZW5lLm5vghpjaW1hc3NvdGhlcmFwaWVjaGFt
Ymx5LmNvbYIOY2ltb3dyaXRlcy5jb22CEWNpbmNvcGFsYWJyYXMuY29tghZjaW5j
eWZpdG5lc3NsZWFndWUuY29tghtjaW5keXdvb2Rmb3Jjb3VudHljbGVyay5jb22C
E2NpbmVmaWxvY3Jvbmljby5jb22CD2NpbmVwaGlsaW9uLm5ldIIQY2luemlhY29s
bWFuLmNvbYIQY2lwaGVyY2FueW9uLmNvbYIUY2lyY2xlc2FuZHN0aWNrcy5jb22C
FGNpcmNsZXNxdWFyZWxpZmUuY29tghRjaXJjbGVzcXVhcmVsaWZlLm9yZ4ISY2ly
Y3VzdmFnYWJvbmQuY29tgg5jaXN4aWFvaHVhLm9yZ4IOY2l0aGVscG5vdy5jb22C
C2NpdGlzY2kub3JnghVjaXRpemVuc2hpcGN5cHJ1cy5jb22CC2NpdHkyNDcubmV0
ghFjaXR5bXVzaWNsaXZlLmNvbYISY2l0eXNraXBwZXJnYWwuY29tgg9jaXZpbG5v
bWljcy5jb22CD2Npdmlsbm9taWNzLm9yZ4ISdGxzLmF1dG9tYXR0aWMuY29tghR3
d3cuY2llbmFndWFzcHRhLm9yZ4IYd3d3LmNpZW5taWxwZWRhbGFkYXMuY29tgg13
d3cuY2lnZW5lLm5vgh53d3cuY2ltYXNzb3RoZXJhcGllY2hhbWJseS5jb22CEnd3
dy5jaW1vd3JpdGVzLmNvbYIVd3d3LmNpbmNvcGFsYWJyYXMuY29tghp3d3cuY2lu
Y3lmaXRuZXNzbGVhZ3VlLmNvbYIfd3d3LmNpbmR5d29vZGZvcmNvdW50eWNsZXJr
LmNvbYIXd3d3LmNpbmVmaWxvY3Jvbmljby5jb22CE3d3dy5jaW5lcGhpbGlvbi5u
ZXSCFHd3dy5jaW56aWFjb2xtYW4uY29tghR3d3cuY2lwaGVyY2FueW9uLmNvbYIY
d3d3LmNpcmNsZXNhbmRzdGlja3MuY29tghh3d3cuY2lyY2xlc3F1YXJlbGlmZS5j
b22CGHd3dy5jaXJjbGVzcXVhcmVsaWZlLm9yZ4IWd3d3LmNpcmN1c3ZhZ2Fib25k
LmNvbYISd3d3LmNpc3hpYW9odWEub3JnghJ3d3cuY2l0aGVscG5vdy5jb22CD3d3
dy5jaXRpc2NpLm9yZ4IZd3d3LmNpdGl6ZW5zaGlwY3lwcnVzLmNvbYIPd3d3LmNp
dHkyNDcubmV0ghV3d3cuY2l0eW11c2ljbGl2ZS5jb22CFnd3dy5jaXR5c2tpcHBl
cmdhbC5jb22CE3d3dy5jaXZpbG5vbWljcy5jb22CE3d3dy5jaXZpbG5vbWljcy5v
cmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQC
BIH2BIHzAPEAdwDnEvKwN34aYvuOyQxhhPHqezfLVh0RJlvz4PNL8kFUbgAAAXCZ
oCWVAAAEAwBIMEYCIQDBrbWkPEQ1Bn4q4q1+TM6yUo3w/bw9f7q7Z5uvRLF/AAIh
APvBm0c7rB0oszoGSNTo8JCaLp8wTX41u+ISrSxRu+XtAHYAsh4FzIuizYogTodm
+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFwmaAligAABAMARzBFAiEAvpAQHuM0wWJM
UAeghbiNCE1MqrTQDQNWCeAyQlKKx9cCIFhj3npL3RSv4WEmkwcGqd144+CZFxq5
BXwfmQ9Z6t5yMA0GCSqGSIb3DQEBCwUAA4IBAQBkXuqT/YFK41k86X9+V/XYsCyk
w/7Hsu/7YjAQ+835xPrIylJLgILX6cc1i1I2Jxn/GrR3emGT9/K+vUlrzGjrEYeH
5oat/QqqdWbxAPqbeuGpIzNXwG+Zjp0W9pyywvSVzE/8g9XuR+H0YlgQropMcLWF
NLL+1GFs8DeE7jKrLjV5zPn+4KnHkm2HrBOHnBaXsoPlzWsMcgE5E/TfvdIxzYSB
8sM3DyQfVrEXCQpden4JLwnL6nSh85AGMfuzmfedZ3NKPvdeQCUIQ9eFpY/xcWT9
fZwm00cs3ORXeBm/aQ4mgzaYd+Rk8fSMqsf/dG8gcrs0D2i8iYmWyAkP3J83
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutsVG7mXDbJnvyUaFP1+
vetuYGk2ETXTOJx/NUNB/bMI2Vjm0gLt/fnl1xBPqEB3IApcfUUCO7NMZ5RpKlc7
iOGIWE8BKWVulSxY2ES9q7M3cDtHISiSBB6HHxydaRgEeta4c648hnVFXIooUcCT
O62Iu70jSRHYn8xq8AXc/esNFzvkmVZ0dMVvaCX8vKkk2HYpmitlJ+x5SE3EcvaP
W0z3I6hmj6f+EDQ81WC1yuryytcjljfXnXrhNsi7hLpKEtLCnPVYE429zuE4C7Vp
W7nYW/npsXvL/C3m0Mxt0d/UzjgS5/v1zWAH45lOQMa+Dcogo44Sprt6BXLoGWV3
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276701023512965849929991163558404313794512
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 04:02:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-31 04:02:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23588358308368747133324804875514459027039254092875018561800106500035248025895497235063235276534321814974786496218498441111492397658737647021690891458847074195153965924614436084908298592080640705704213019370842440109414081455766332659634080016705995964884444855346131578641987953026989331483013562142113317631569050068862898254095189493739995166954228359635505020974934110037195541962647316403303309298490227599601286723154454606044068536450705691416347753979897076074349618259922313846682246344016046037784852956981619066276311895913059455371088749710822632505859725224898109079573472420015385202063403475200014382993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6c455467232cdf69385ad943253dac9ee903ef4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1086 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cienaguaspta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cienmilpedaladas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cigene.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimassotherapiechambly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimowrites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cincopalabras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cincyfitnessleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cindywoodforcountyclerk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinefilocronico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinephilion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinziacolman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciphercanyon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circlesandsticks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circlesquarelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circlesquarelife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circusvagabond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisxiaohua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cithelpnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citisci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizenshipcyprus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'city247.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citymusiclive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityskippergal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilnomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilnomics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cienaguaspta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cienmilpedaladas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cigene.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cimassotherapiechambly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cimowrites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cincopalabras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cincyfitnessleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cindywoodforcountyclerk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinefilocronico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinephilion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinziacolman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciphercanyon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circlesandsticks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circlesquarelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circlesquarelife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circusvagabond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cisxiaohua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cithelpnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citisci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citizenshipcyprus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.city247.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citymusiclive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityskippergal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilnomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilnomics.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017099a025950000040300483046022100c1adb5a43c4435067e2ae2ad7e4cceb2528df0fdbc3d7fbabb679baf44b17f00022100fbc19b473bac1d28b33a0648d4e8f0909a2e9f304d7e35bbe212ad2c51bbe5ed007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017099a0258a0000040300473045022100be90101ee334c1624c5007a085b88d084d4caab4d00d035609e03242528ac7d702205863de7a4bdd14afe16126930706a9dd78e3e099171ab9057c1f990f59eade72
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00645eea93fd814ae3593ce97f7e57f5d8b02ca4c3fec7b2effb623010fbcdf9c4fac8ca524b8082d7e9c7358b52362719ff1ab4777a6193f7f2bebd496bcc68eb118787e686adfd0aaa7566f100fa9b7ae1a9233357c06f998e9d16f69cb2c2f495cc4ffc83d5ee47e1f4625810ae8a4c70b58534b2fed4616cf03784ee32ab2e3579ccf9fee0a9c7926d87ac13879c1697b283e5cd6b0c72013913f4dfbdd231cd8481f2c3370f241f56b117090a5d7a7e092f09cbea74a1f3900631fbb399f79d67734a3ef75e40250843d785a58ff17164fd7d9c26d3472cdce4577819bf690e2683369877e464f1f48caac7ff746f2072bb340f68bc898996c8090fdc9f37