tls.automattic.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a6:4f:cc:5a:93:94:f7:9b:00:c4:92:5d:a0:8e:07:87:18 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:a6:4f:cc:5a:93:94:f7:9b:00:c4:92:5d:a0:8e:07:87:18
Serial Number (int): 317929800781492181669946673316883014846232
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9c:40:e2:a5:d5:59:50:fa:3f:8d:92:52:40:b2:6f:e1:62:79:1d:62
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a8:b2:b1:ad:2a:9c:51:ff:d6:7b:49:d8:a9:90:b6:c8:d5:46:80:9a
Fingerprint (sha256): 44:75:6e:1c:a4:89:24:e3:1c:b4:88:26:f6:9d:2c:69:4d:2e:af:d7:f1:55:20:29:9b:f1:f5:e1:f1:48:9e:29

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abraxio.com
actionforhealth.org
akworld.game.blog
andreashv.com
annew.org
ataikoblog.com
atelierdegriff.com
averagedanruns.com
aymeesmith.com
basvisscher.blog
beautyofgeorgia.com
bicajos.com
cricketfootballknowledge.sport.blog
cyclediving47.sport.blog
eytandreymann.com
fabablab.com
fadefactorybarbershopllc.com
foodiefindswithtony.blog
francis.science.blog
gamechangereducators.com
hashtagunited.sport.blog
jpsengineers.com.sg
lisafenn.com
michaelgallagher.online
ministryprofessionalsupervisionaustralia.com
runwithmarjolein.nl
sakura55.family.blog
tls.automattic.com
welcometothekingdomofsports.sport.blog
www.abraxio.com
www.actionforhealth.org
www.andreashv.com
www.annew.org
www.ataikoblog.com
www.atelierdegriff.com
www.averagedanruns.com
www.aymeesmith.com
www.basvisscher.blog
www.beautyofgeorgia.com
www.bet366.sport.blog
www.bicajos.com
www.cyclediving47.sport.blog
www.f1gamerzone.com
www.fadefactorybarbershopllc.com
www.foodiefindswithtony.blog
www.gamechangereducators.com
www.jancacerescounselling.com
www.jpsengineers.com.sg
www.lisafenn.com
www.southburnettgems.org
www.soweto.movie.blog

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIInDCCB4SgAwIBAgISA6ZPzFqTlPebAMSSXaCOB4cYMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MDkwOTA5MjVaFw0yNDA3MDgwOTA5MjRaMB0xGzAZBgNVBAMT
EnRscy5hdXRvbWF0dGljLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABB+X
48a634z0o51Gf6qkXxFxNrt4LY4GnsHnG6RuNfWfCvrJqRuIggahO8zZ1f714MHj
10LLyQt1MQgJO1m8sp6jggaKMIIGhjAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJxA
4qXVWVD6P42SUkCyb+FieR1iMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52L
FMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVu
Y3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIEkgYD
VR0RBIIEiTCCBIWCC2FicmF4aW8uY29tghNhY3Rpb25mb3JoZWFsdGgub3JnghFh
a3dvcmxkLmdhbWUuYmxvZ4INYW5kcmVhc2h2LmNvbYIJYW5uZXcub3Jngg5hdGFp
a29ibG9nLmNvbYISYXRlbGllcmRlZ3JpZmYuY29tghJhdmVyYWdlZGFucnVucy5j
b22CDmF5bWVlc21pdGguY29tghBiYXN2aXNzY2hlci5ibG9nghNiZWF1dHlvZmdl
b3JnaWEuY29tggtiaWNham9zLmNvbYIjY3JpY2tldGZvb3RiYWxsa25vd2xlZGdl
LnNwb3J0LmJsb2eCGGN5Y2xlZGl2aW5nNDcuc3BvcnQuYmxvZ4IRZXl0YW5kcmV5
bWFubi5jb22CDGZhYmFibGFiLmNvbYIcZmFkZWZhY3RvcnliYXJiZXJzaG9wbGxj
LmNvbYIYZm9vZGllZmluZHN3aXRodG9ueS5ibG9nghRmcmFuY2lzLnNjaWVuY2Uu
YmxvZ4IYZ2FtZWNoYW5nZXJlZHVjYXRvcnMuY29tghhoYXNodGFndW5pdGVkLnNw
b3J0LmJsb2eCE2pwc2VuZ2luZWVycy5jb20uc2eCDGxpc2FmZW5uLmNvbYIXbWlj
aGFlbGdhbGxhZ2hlci5vbmxpbmWCLG1pbmlzdHJ5cHJvZmVzc2lvbmFsc3VwZXJ2
aXNpb25hdXN0cmFsaWEuY29tghNydW53aXRobWFyam9sZWluLm5sghRzYWt1cmE1
NS5mYW1pbHkuYmxvZ4ISdGxzLmF1dG9tYXR0aWMuY29tgiZ3ZWxjb21ldG90aGVr
aW5nZG9tb2ZzcG9ydHMuc3BvcnQuYmxvZ4IPd3d3LmFicmF4aW8uY29tghd3d3cu
YWN0aW9uZm9yaGVhbHRoLm9yZ4IRd3d3LmFuZHJlYXNodi5jb22CDXd3dy5hbm5l
dy5vcmeCEnd3dy5hdGFpa29ibG9nLmNvbYIWd3d3LmF0ZWxpZXJkZWdyaWZmLmNv
bYIWd3d3LmF2ZXJhZ2VkYW5ydW5zLmNvbYISd3d3LmF5bWVlc21pdGguY29tghR3
d3cuYmFzdmlzc2NoZXIuYmxvZ4IXd3d3LmJlYXV0eW9mZ2VvcmdpYS5jb22CFXd3
dy5iZXQzNjYuc3BvcnQuYmxvZ4IPd3d3LmJpY2Fqb3MuY29tghx3d3cuY3ljbGVk
aXZpbmc0Ny5zcG9ydC5ibG9nghN3d3cuZjFnYW1lcnpvbmUuY29tgiB3d3cuZmFk
ZWZhY3RvcnliYXJiZXJzaG9wbGxjLmNvbYIcd3d3LmZvb2RpZWZpbmRzd2l0aHRv
bnkuYmxvZ4Icd3d3LmdhbWVjaGFuZ2VyZWR1Y2F0b3JzLmNvbYIdd3d3LmphbmNh
Y2VyZXNjb3Vuc2VsbGluZy5jb22CF3d3dy5qcHNlbmdpbmVlcnMuY29tLnNnghB3
d3cubGlzYWZlbm4uY29tghh3d3cuc291dGhidXJuZXR0Z2Vtcy5vcmeCFXd3dy5z
b3dldG8ubW92aWUuYmxvZzATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB
1nkCBAIEgfQEgfEA7wB1ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQX
AAABjsJVexYAAAQDAEYwRAIgZEuB+t2Zr93vWs8SaLgNPTxv1K6VSvZbeILgTxpr
RmsCIHsYSPeV3yUr56vL0a+5Vbtf4QdRrG6WwuvWeTffo7g0AHYAGZgQcQnw1lIu
MIDSnj9ku4NuKMz5D1KO7t/OSj8WtMoAAAGOwlV7PAAABAMARzBFAiACjGINg+EY
7ke69BwsPrjOt3w12FyCjsV31OcazudXlAIhAP9msKAFkR0dKwpvZ2RqUy77CnP9
heUi/RaECtH3SO5hMA0GCSqGSIb3DQEBCwUAA4IBAQAYIHjQBmw5BnZKhf3xJ0J/
OkM8msIzPSVk49z7zelghwFRMN+sav7yQmKE3QT0tbzRQcif9HLllvVux28YXsKj
CoarMQnu9p+43uNXSona4Dl9k35ECNHyHfuSOB1GLA6ODdkIVsB9LMrIyaBPDrUQ
htv/X18C+149W9SOxwrxWeB3e8UDzseyYX7gp3N8KnsPbJozYEPwZEXbKa0YWI6Q
9/d801BY1XccQB/YcQPtnStpfqaazyN3TYlLW+ZV9AU3kO7Dk1BXtPzXBjS1FzgI
YyrvgXV2UXdSIdUtgCiFMU0qMmHyW988uHjSqLliHrdyX4/aWOVoZzEQ/255e7aO
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEH5fjxrrfjPSjnUZ/qqRfEXE2u3gt
jgaewecbpG419Z8K+smpG4iCBqE7zNnV/vXgwePXQsvJC3UxCAk7Wbyyng==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317929800781492181669946673316883014846232
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 09:09:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-08 09:09:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00041f97e3c6badf8cf4a39d467faaa45f117136bb782d8e069ec1e71ba46e35f59f0afac9a91b888206a13bccd9d5fef5e0c1e3d742cbc90b753108093b59bcb29e
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c40e2a5d55950fa3f8d925240b26fe162791d62
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abraxio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actionforhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akworld.game.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andreashv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annew.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ataikoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atelierdegriff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'averagedanruns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aymeesmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basvisscher.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beautyofgeorgia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicajos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketfootballknowledge.sport.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclediving47.sport.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eytandreymann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabablab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fadefactorybarbershopllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodiefindswithtony.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francis.science.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamechangereducators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hashtagunited.sport.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpsengineers.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisafenn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelgallagher.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ministryprofessionalsupervisionaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runwithmarjolein.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sakura55.family.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcometothekingdomofsports.sport.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abraxio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actionforhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andreashv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annew.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ataikoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atelierdegriff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.averagedanruns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aymeesmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basvisscher.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beautyofgeorgia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bet366.sport.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicajos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyclediving47.sport.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.f1gamerzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fadefactorybarbershopllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodiefindswithtony.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamechangereducators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jancacerescounselling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jpsengineers.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lisafenn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southburnettgems.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soweto.movie.blog'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ec2557b1600000403004630440220644b81fadd99afddef5acf1268b80d3d3c6fd4ae954af65b7882e04f1a6b466b02207b1848f795df252be7abcbd1afb955bb5fe10751ac6e96c2ebd67937dfa3b8340076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ec2557b3c00000403004730450220028c620d83e118ee47baf41c2c3eb8ceb77c35d85c828ec577d4e71acee75794022100ff66b0a005911d1d2b0a6f67646a532efb0a73fd85e522fd16840ad1f748ee61
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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