tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:29:61:f4:8b:42:db:1e:72:df:39:07:18:fd:1a:0d:f8:62 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:29:61:f4:8b:42:db:1e:72:df:39:07:18:fd:1a:0d:f8:62
Serial Number (int): 275418639699615643940399698613256930064482
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 03:ff:f3:32:aa:f3:16:73:73:49:21:e9:9a:28:10:b7:af:d3:cc:89
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4a:94:0d:aa:dc:2c:b3:33:af:53:9b:54:78:85:4c:8c:8b:3b:d7:50
Fingerprint (sha256): 45:a2:bd:88:9b:e4:a2:22:ad:25:5e:52:56:95:af:b9:d6:79:6b:a0:7f:e7:42:b4:13:6a:be:7a:9e:bf:05:3c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sitomillan.com
siton.is
sitorimon.com
sitoxicgaming.com
sitruunaruoho.com
sitsipnbe.com
sitspike.com
sitstaysniffplay.com
sittableside.com
sittawitness.com
sitte.be
sitterbugs.ch
sittersaruba.com
sittinandwishin.com
sittingabout.com
sittingandknitting.com
sittingatthefootoftheblues.com
sittingbull.edu
sittingbytheriverside.com
sittingcomfortably.org
sittingducksports.com
sittinginspiltink.com
sittinginthewoods.com
sittingonthebaby.com
sittingonthehilltop.com
tls.automattic.com
www.sitnokglobalbusinessintelligence.com
www.sitomillan.com
www.siton.is
www.sitorimon.com
www.sitoxicgaming.com
www.sitruunaruoho.com
www.sitsipnbe.com
www.sitspike.com
www.sitstaysniffplay.com
www.sittableside.com
www.sittawitness.com
www.sitte.be
www.sitterbugs.ch
www.sittersaruba.com
www.sittinandwishin.com
www.sittingabout.com
www.sittingandknitting.com
www.sittingatthefootoftheblues.com
www.sittingbull.edu
www.sittingbytheriverside.com
www.sittingcomfortably.org
www.sittingducksports.com
www.sittinginspiltink.com
www.sittinginthewoods.com
www.sittingonthebaby.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJozCCCIugAwIBAgISAylh9ItC2x5y3zkHGP0aDfhiMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMjQwMTQ0MTRaFw0x
OTAyMjIwMTQ0MTRaMB0xGzAZBgNVBAMTEnRscy5hdXRvbWF0dGljLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALdzb1P+VT8mG+FtuiM0eNU5Rk4s
1G6lfMXPv8WeU/6cvn6kWHBH3f0zikul6HBWLmy7bOMjMGP/FHJGztr5cdq/C4/U
aIOYQk8dZs+3CQmMBBykXK492g09WaF4ik3lpcqcjGScP53bkfVHeBA5V5ALyO2T
fVlarIFYbcu9scB11q8ePmzg5axvy/jL/M1On6s/R/BUafz5S92J4UUaB61X4Ns9
70kFtM51jdzwg0MjAEiLx6CEtapNmG9iuw8Z4f15tU6L3RKArt3I+ZL7V77ZS7ax
tuVFSu//PIfZ9/DO8AwcnJ2gTmYw8U9Do1+6kDx8M4Fc/goUP0YzgbV+bwUCAwEA
AaOCBq4wggaqMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUA//zMqrzFnNzSSHpmigQ
t6/TzIkwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCBGIGA1UdEQSCBFkwggRVgg5zaXRvbWlsbGFuLmNvbYIIc2l0b24u
aXOCDXNpdG9yaW1vbi5jb22CEXNpdG94aWNnYW1pbmcuY29tghFzaXRydXVuYXJ1
b2hvLmNvbYINc2l0c2lwbmJlLmNvbYIMc2l0c3Bpa2UuY29tghRzaXRzdGF5c25p
ZmZwbGF5LmNvbYIQc2l0dGFibGVzaWRlLmNvbYIQc2l0dGF3aXRuZXNzLmNvbYII
c2l0dGUuYmWCDXNpdHRlcmJ1Z3MuY2iCEHNpdHRlcnNhcnViYS5jb22CE3NpdHRp
bmFuZHdpc2hpbi5jb22CEHNpdHRpbmdhYm91dC5jb22CFnNpdHRpbmdhbmRrbml0
dGluZy5jb22CHnNpdHRpbmdhdHRoZWZvb3RvZnRoZWJsdWVzLmNvbYIPc2l0dGlu
Z2J1bGwuZWR1ghlzaXR0aW5nYnl0aGVyaXZlcnNpZGUuY29tghZzaXR0aW5nY29t
Zm9ydGFibHkub3JnghVzaXR0aW5nZHVja3Nwb3J0cy5jb22CFXNpdHRpbmdpbnNw
aWx0aW5rLmNvbYIVc2l0dGluZ2ludGhld29vZHMuY29tghRzaXR0aW5nb250aGVi
YWJ5LmNvbYIXc2l0dGluZ29udGhlaGlsbHRvcC5jb22CEnRscy5hdXRvbWF0dGlj
LmNvbYIod3d3LnNpdG5va2dsb2JhbGJ1c2luZXNzaW50ZWxsaWdlbmNlLmNvbYIS
d3d3LnNpdG9taWxsYW4uY29tggx3d3cuc2l0b24uaXOCEXd3dy5zaXRvcmltb24u
Y29tghV3d3cuc2l0b3hpY2dhbWluZy5jb22CFXd3dy5zaXRydXVuYXJ1b2hvLmNv
bYIRd3d3LnNpdHNpcG5iZS5jb22CEHd3dy5zaXRzcGlrZS5jb22CGHd3dy5zaXRz
dGF5c25pZmZwbGF5LmNvbYIUd3d3LnNpdHRhYmxlc2lkZS5jb22CFHd3dy5zaXR0
YXdpdG5lc3MuY29tggx3d3cuc2l0dGUuYmWCEXd3dy5zaXR0ZXJidWdzLmNoghR3
d3cuc2l0dGVyc2FydWJhLmNvbYIXd3d3LnNpdHRpbmFuZHdpc2hpbi5jb22CFHd3
dy5zaXR0aW5nYWJvdXQuY29tghp3d3cuc2l0dGluZ2FuZGtuaXR0aW5nLmNvbYIi
d3d3LnNpdHRpbmdhdHRoZWZvb3RvZnRoZWJsdWVzLmNvbYITd3d3LnNpdHRpbmdi
dWxsLmVkdYIdd3d3LnNpdHRpbmdieXRoZXJpdmVyc2lkZS5jb22CGnd3dy5zaXR0
aW5nY29tZm9ydGFibHkub3Jnghl3d3cuc2l0dGluZ2R1Y2tzcG9ydHMuY29tghl3
d3cuc2l0dGluZ2luc3BpbHRpbmsuY29tghl3d3cuc2l0dGluZ2ludGhld29vZHMu
Y29tghh3d3cuc2l0dGluZ29udGhlYmFieS5jb20wTAYDVR0gBEUwQzAIBgZngQwB
AgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRz
ZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwB0ftqDMa0zEJEh
nM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWdDmnPoAAAEAwBIMEYCIQCmzjjWjo/i
3h0zTtzn/RXBYjRXF4O5ymCLLl3xdAtrPwIhAIVxuF/AOPz49jDKN8bZUyiOs3Mq
zfv4jLcvgwQoDoKsAHUAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgA
AAFnQ5p2PAAABAMARjBEAiB32F7D6kpMSFq4tZzfEgpTYeeFsyuTp6iiAjDV3cc5
KQIgD8FvygLB2mXWUMrrJRl+dMkTmPHyA1lqT2qJLBztA6AwDQYJKoZIhvcNAQEL
BQADggEBAIH1eIiaWGyWFPhTWEsfLWBCnSnrJvp1SzeyjGp4KuE2LaJJvJ7zqtYd
SxR98iXR7VQ2+7wsiZQE5y0AooW9X1hsYc+ieomzwYbQ0RcAuqdwbcEOmkalmlU5
z8j0fQz1h6W8A6fKBpe2+X9W8CMUJdxnrdmaiV+bVLZxJmCv8NZfP4c2oJT7O5Yr
t2om0g9TzDSpu8xB5GgjM0KltlaqgkMEXWlN9WWudmWLVLhMdQ0TOi16in2zWA24
4NbA3F3xsm08eXeyzVV0D8EZjxl8UtQCcUGTqwFLeNA5ZwR9dC0oQO2Q/lzU52Sm
sY7akyikqsV8uyPXiDh2iXMzTW3EvmA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3NvU/5VPyYb4W26IzR4
1TlGTizUbqV8xc+/xZ5T/py+fqRYcEfd/TOKS6XocFYubLts4yMwY/8UckbO2vlx
2r8Lj9Rog5hCTx1mz7cJCYwEHKRcrj3aDT1ZoXiKTeWlypyMZJw/nduR9Ud4EDlX
kAvI7ZN9WVqsgVhty72xwHXWrx4+bODlrG/L+Mv8zU6fqz9H8FRp/PlL3YnhRRoH
rVfg2z3vSQW0znWN3PCDQyMASIvHoIS1qk2Yb2K7Dxnh/Xm1TovdEoCu3cj5kvtX
vtlLtrG25UVK7/88h9n38M7wDBycnaBOZjDxT0OjX7qQPHwzgVz+ChQ/RjOBtX5v
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275418639699615643940399698613256930064482
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-24 01:44:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-22 01:44:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23158532867394452319298301808619920165626664288431191032399976057006039929597945657158690333161324108838504863998562961830945155989746673126402196995839233095282125822323010012427340045241441488418344083472420440369281069884665360084259824761327071847161341670635424117441474561311447489307098627837385306709725434198205121753966046915283418890769786240753581990973517415549608185370951703350441692537433626641162719395822683195743720735132777948253355276909671123986417514885421921426202672229082971764206871874345329129116040382461744102004586284823973237023934556113721691999312095055616059606738826972210491453189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03fff332aaf31673734921e99a2810b7afd3cc89
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitomillan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siton.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitorimon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitoxicgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitruunaruoho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitsipnbe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitspike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitstaysniffplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittableside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittawitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitte.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitterbugs.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittersaruba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittinandwishin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingabout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingandknitting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingatthefootoftheblues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingbull.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingbytheriverside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingcomfortably.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingducksports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittinginspiltink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittinginthewoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingonthebaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingonthehilltop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitnokglobalbusinessintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitomillan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siton.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitorimon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitoxicgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitruunaruoho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitsipnbe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitspike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitstaysniffplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittableside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittawitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitte.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitterbugs.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittersaruba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittinandwishin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingabout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingandknitting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingatthefootoftheblues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingbull.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingbytheriverside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingcomfortably.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingducksports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittinginspiltink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittinginthewoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingonthebaby.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167439a73e80000040300483046022100a6ce38d68e8fe2de1d334edce7fd15c16234571783b9ca608b2e5df1740b6b3f0221008571b85fc038fcf8f630ca37c6d953288eb3732acdfbf88cb72f8304280e82ac007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167439a763c0000040300463044022077d85ec3ea4a4c485ab8b59cdf120a5361e785b32b93a7a8a20230d5ddc7392902200fc16fca02c1da65d650caeb25197e74c91398f1f203596a4f6a892c1ced03a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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