tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f4:5a:69:5e:5e:5a:ac:ee:3a:31:4d:2e:95:8a:f5:a8:13 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f4:5a:69:5e:5e:5a:ac:ee:3a:31:4d:2e:95:8a:f5:a8:13
Serial Number (int): 344485932948802526341116890041878857492499
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:86:d0:9d:cc:e8:78:1d:95:bc:51:57:4d:b2:e1:e7:84:16:20:2f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ab:dc:8f:bc:4a:fc:0f:5c:d1:f9:14:f6:3a:15:f3:66:6c:85:a7:ba
Fingerprint (sha256): 4f:a6:fc:40:3b:8b:97:7a:17:5a:a4:78:5f:76:d5:3d:e2:c0:1e:5b:06:47:46:8a:60:03:0b:4c:30:76:7a:1a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.togetherweserved.com
tls.automattic.com
togetherfortommy.com
togethergojet.com
togetherinaction.com
togetherinfaithseries.com
togetherinfaithseries.org
togetherintheuk.net
togetherinwestessex.com
togetherlivewell.com
togethermag.net
togethersee.org
togethersimple.com
togethersisterscreate.com
togethertheyserved.com
togetherunlockingdestiny.com
togetherweareenough.org
togetherwecanbc.com
togetherwecanchangethebipolarstigma.com
togetherwecanworkout.com
togetherwechange.com
togetherwepray.org
togetherwerehome.org
togetherweservedvoices.com
togetherwestay.com
togetherwewander.com
www.togetherfortommy.com
www.togethergojet.com
www.togetherinaction.com
www.togetherinfaithseries.com
www.togetherinfaithseries.org
www.togetherintheuk.net
www.togetherinwestessex.com
www.togetherlivewell.com
www.togethermag.net
www.togethersee.org
www.togethersimple.com
www.togethersisterscreate.com
www.togethertheyserved.com
www.togetherunlockingdestiny.com
www.togetherweareenough.org
www.togetherwecanbc.com
www.togetherwecanchangethebipolarstigma.com
www.togetherwecanworkout.com
www.togetherwechange.com
www.togetherwepray.org
www.togetherwerehome.org
www.togetherweservedvoices.com
www.togetherwestay.com
www.togetherwewander.com
www.togetherweworship.org

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKEjCCCPqgAwIBAgISA/RaaV5eWqzuOjFNLpWK9agTMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA4MTUxODE4MDBaFw0x
NjExMTMxODE4MDBaMB0xGzAZBgNVBAMTEnRscy5hdXRvbWF0dGljLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMOMGBoj88zvyBqrxiBbdS8CjCX7
qekvMNcvI00msNAqqh/r/n2r3NsVgaTO+VmD4+ZSLSTCS/PVTcFd0EJjHPPO0zT3
T2mMF9sj2dYYhw828PwWl6AkpsaK3jAmA6ny4TbDQ9FqMqZ1miC0amq7c2RexAzF
uZ736QpzQcS3L0pRVzLUr8IcmqgjQT0jOjBaQE31D8ZEQktaRPBLtwSddGryxFYs
C1FDgfJzk7zyRvNdka+mx0WwvBPg6IugJAifkwZbbeZND50m1H18NJ4BKawJISRt
MBxBcMZcNTYwd0q5nrnRkulkCgGbcuwHW8lGBRCPRMBoisZ1E04nWIQxdn0CAwEA
AaOCBx0wggcZMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUvYbQnczoeB2VvFFXTbLh
54QWIC8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYBBQUH
AQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZy8wggUlBgNVHREEggUcMIIFGIIZYmxvZy50b2dldGhlcndlc2VydmVk
LmNvbYISdGxzLmF1dG9tYXR0aWMuY29tghR0b2dldGhlcmZvcnRvbW15LmNvbYIR
dG9nZXRoZXJnb2pldC5jb22CFHRvZ2V0aGVyaW5hY3Rpb24uY29tghl0b2dldGhl
cmluZmFpdGhzZXJpZXMuY29tghl0b2dldGhlcmluZmFpdGhzZXJpZXMub3JnghN0
b2dldGhlcmludGhldWsubmV0ghd0b2dldGhlcmlud2VzdGVzc2V4LmNvbYIUdG9n
ZXRoZXJsaXZld2VsbC5jb22CD3RvZ2V0aGVybWFnLm5ldIIPdG9nZXRoZXJzZWUu
b3JnghJ0b2dldGhlcnNpbXBsZS5jb22CGXRvZ2V0aGVyc2lzdGVyc2NyZWF0ZS5j
b22CFnRvZ2V0aGVydGhleXNlcnZlZC5jb22CHHRvZ2V0aGVydW5sb2NraW5nZGVz
dGlueS5jb22CF3RvZ2V0aGVyd2VhcmVlbm91Z2gub3JnghN0b2dldGhlcndlY2Fu
YmMuY29tgid0b2dldGhlcndlY2FuY2hhbmdldGhlYmlwb2xhcnN0aWdtYS5jb22C
GHRvZ2V0aGVyd2VjYW53b3Jrb3V0LmNvbYIUdG9nZXRoZXJ3ZWNoYW5nZS5jb22C
EnRvZ2V0aGVyd2VwcmF5Lm9yZ4IUdG9nZXRoZXJ3ZXJlaG9tZS5vcmeCGnRvZ2V0
aGVyd2VzZXJ2ZWR2b2ljZXMuY29tghJ0b2dldGhlcndlc3RheS5jb22CFHRvZ2V0
aGVyd2V3YW5kZXIuY29tghh3d3cudG9nZXRoZXJmb3J0b21teS5jb22CFXd3dy50
b2dldGhlcmdvamV0LmNvbYIYd3d3LnRvZ2V0aGVyaW5hY3Rpb24uY29tgh13d3cu
dG9nZXRoZXJpbmZhaXRoc2VyaWVzLmNvbYIdd3d3LnRvZ2V0aGVyaW5mYWl0aHNl
cmllcy5vcmeCF3d3dy50b2dldGhlcmludGhldWsubmV0ght3d3cudG9nZXRoZXJp
bndlc3Rlc3NleC5jb22CGHd3dy50b2dldGhlcmxpdmV3ZWxsLmNvbYITd3d3LnRv
Z2V0aGVybWFnLm5ldIITd3d3LnRvZ2V0aGVyc2VlLm9yZ4IWd3d3LnRvZ2V0aGVy
c2ltcGxlLmNvbYIdd3d3LnRvZ2V0aGVyc2lzdGVyc2NyZWF0ZS5jb22CGnd3dy50
b2dldGhlcnRoZXlzZXJ2ZWQuY29tgiB3d3cudG9nZXRoZXJ1bmxvY2tpbmdkZXN0
aW55LmNvbYIbd3d3LnRvZ2V0aGVyd2VhcmVlbm91Z2gub3Jnghd3d3cudG9nZXRo
ZXJ3ZWNhbmJjLmNvbYIrd3d3LnRvZ2V0aGVyd2VjYW5jaGFuZ2V0aGViaXBvbGFy
c3RpZ21hLmNvbYIcd3d3LnRvZ2V0aGVyd2VjYW53b3Jrb3V0LmNvbYIYd3d3LnRv
Z2V0aGVyd2VjaGFuZ2UuY29tghZ3d3cudG9nZXRoZXJ3ZXByYXkub3Jnghh3d3cu
dG9nZXRoZXJ3ZXJlaG9tZS5vcmeCHnd3dy50b2dldGhlcndlc2VydmVkdm9pY2Vz
LmNvbYIWd3d3LnRvZ2V0aGVyd2VzdGF5LmNvbYIYd3d3LnRvZ2V0aGVyd2V3YW5k
ZXIuY29tghl3d3cudG9nZXRoZXJ3ZXdvcnNoaXAub3JnMIH+BgNVHSAEgfYwgfMw
CAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0
aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRp
ZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQ
b2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9y
eS8wDQYJKoZIhvcNAQELBQADggEBABLhY2y73aVZD+YXefRyWTu1yFzqmoVB2f9D
9VR7H5FhpgFspU1ugtqn1BQzgtlmwdYE0iiLIAB94mDfw8eTltpFZjNN8kC6+TTp
JI1jNCog/1dzIYKZW9uaOaO6r66WYNcZ0fd3IR5GtPiSMSILBE49fvnDffiPRK1o
iK5OV/jeLQNhftwZrCWJyFor92IYy+Ib5PIzOuLP+Dq1GXqiO00uXop8aiSgIhv7
iStQk3UddWWcxt97frqYtRKS6brO3eiM0CwiwPNezO0mrzjKbEuaOpJlmI3tkb+T
PET9AvG8WD8p+2ikgb7k1w/mKVtz6regk8shHC4z0aVp7sqYkPM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4wYGiPzzO/IGqvGIFt1
LwKMJfup6S8w1y8jTSaw0CqqH+v+favc2xWBpM75WYPj5lItJMJL89VNwV3QQmMc
887TNPdPaYwX2yPZ1hiHDzbw/BaXoCSmxoreMCYDqfLhNsND0WoypnWaILRqartz
ZF7EDMW5nvfpCnNBxLcvSlFXMtSvwhyaqCNBPSM6MFpATfUPxkRCS1pE8Eu3BJ10
avLEViwLUUOB8nOTvPJG812Rr6bHRbC8E+Doi6AkCJ+TBltt5k0PnSbUfXw0ngEp
rAkhJG0wHEFwxlw1NjB3SrmeudGS6WQKAZty7AdbyUYFEI9EwGiKxnUTTidYhDF2
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344485932948802526341116890041878857492499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-15 18:18:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-13 18:18:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24685552467948593711512584765914406436786239843667260366438692890137906455528772040811366867940283174291467075677844833552583577983848344939083013633689484631980587982597810040769738101604250842072520179472197088890328666831600961738007688870468102268746033588877171835700782561652617938942870867912808119289297346616754720284847487667036464786509896525700737615549523841407864415340781296556547543613776185333772699645167214113241495263496322490696662077335121860785842175581881429284065178963646609757967145205940129001811625126533790503368711263329557860113275324274105534176861652409579598654151934239100044932733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd86d09dcce8781d95bc51574db2e1e78416202f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1308 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.togetherweserved.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherfortommy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togethergojet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherinaction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherinfaithseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherinfaithseries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherintheuk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherinwestessex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherlivewell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togethermag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togethersee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togethersimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togethersisterscreate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togethertheyserved.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherunlockingdestiny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherweareenough.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherwecanbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherwecanchangethebipolarstigma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherwecanworkout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherwechange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherwepray.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherwerehome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherweservedvoices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherwestay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherwewander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherfortommy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togethergojet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherinaction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherinfaithseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherinfaithseries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherintheuk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherinwestessex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherlivewell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togethermag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togethersee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togethersimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togethersisterscreate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togethertheyserved.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherunlockingdestiny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherweareenough.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherwecanbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherwecanchangethebipolarstigma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherwecanworkout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherwechange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherwepray.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherwerehome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherweservedvoices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherwestay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherwewander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherweworship.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0012e1636cbbdda5590fe61779f472593bb5c85cea9a8541d9ff43f5547b1f9161a6016ca54d6e82daa7d4143382d966c1d604d2288b20007de260dfc3c79396da4566334df240baf934e9248d63342a20ff57732182995bdb9a39a3baafae9660d719d1f777211e46b4f89231220b044e3d7ef9c37df88f44ad6888ae4e57f8de2d03617edc19ac2589c85a2bf76218cbe21be4f2333ae2cff83ab5197aa23b4d2e5e8a7c6a24a0221bfb892b5093751d75659cc6df7b7eba98b51292e9bacedde88cd02c22c0f35ecced26af38ca6c4b9a3a9265988ded91bf933c44fd02f1bc583f29fb68a481bee4d70fe6295b73eab7a093cb211c2e33d1a569eeca9890f3