tls.automattic.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d7:9f:5a:42:53:35:dd:fa:d7:b5:ea:33:22:b8:8a:4b:cd was issued on by Let's Encrypt.
With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=tls.automattic.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d7:9f:5a:42:53:35:dd:fa:d7:b5:ea:33:22:b8:8a:4b:cdSerial Number (int): 334709382586561221735167145334303602920397
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 22:6d:0a:50:d7:36:56:b4:ed:ab:10:58:b4:8e:4f:33:54:fe:b3:81
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 46:f8:a6:dc:c3:d0:09:b4:e4:92:40:07:8b:7e:84:30:fb:be:f3:41
Fingerprint (sha256): 52:68:04:9b:b8:ce:9b:bb:58:6f:42:89:26:8a:7f:a0:12:50:81:b0:f7:24:d5:5b:37:41:62:30:09:43:2f:8a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate tls.automattic.com
51
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tls.automattic.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blog.historichotels.org
historicalsocietyofeastonct.org
historicalsocietyofelba.com
historicaltheology.org
historicalthinkingmissionscanada.net
historicaltruthproject.com
historicalwilliamsburg.com
historicathenaeum.com
historicbarnssanjuanislands.com
historiccitiesrules.com
historicclubcastrovillari.com
historicdc.com
historicdc.org
historichighway101.com
historiclittleswitzerland.com
historicmarcosregister.com
historicmichiganroad.org
historicnewyorktours.com
historicobarakaldocf.com
historicoccasions.com
historicophiles.com
historicparanormal.net
historicparkavenue.org
historicparkview.org
historicplaceswellington.org
historicsantabarbara.com
tls.automattic.com
www.historicalsocietyofeastonct.org
www.historicalsocietyofelba.com
www.historicaltheology.org
www.historicalthinkingmissionscanada.net
www.historicaltruthproject.com
www.historicalwilliamsburg.com
www.historicathenaeum.com
www.historicbarnssanjuanislands.com
www.historiccitiesrules.com
www.historicclubcastrovillari.com
www.historicdc.com
www.historicdc.org
www.historichighway101.com
www.historiclittleswitzerland.com
www.historicmarcosregister.com
www.historicmichiganroad.org
www.historicnewyorktours.com
www.historicobarakaldocf.com
www.historicoccasions.com
www.historicophiles.com
www.historicparanormal.net
www.historicparkavenue.org
www.historicparkview.org
www.historicplaceswellington.org
historicalsocietyofeastonct.org
historicalsocietyofelba.com
historicaltheology.org
historicalthinkingmissionscanada.net
historicaltruthproject.com
historicalwilliamsburg.com
historicathenaeum.com
historicbarnssanjuanislands.com
historiccitiesrules.com
historicclubcastrovillari.com
historicdc.com
historicdc.org
historichighway101.com
historiclittleswitzerland.com
historicmarcosregister.com
historicmichiganroad.org
historicnewyorktours.com
historicobarakaldocf.com
historicoccasions.com
historicophiles.com
historicparanormal.net
historicparkavenue.org
historicparkview.org
historicplaceswellington.org
historicsantabarbara.com
tls.automattic.com
www.historicalsocietyofeastonct.org
www.historicalsocietyofelba.com
www.historicaltheology.org
www.historicalthinkingmissionscanada.net
www.historicaltruthproject.com
www.historicalwilliamsburg.com
www.historicathenaeum.com
www.historicbarnssanjuanislands.com
www.historiccitiesrules.com
www.historicclubcastrovillari.com
www.historicdc.com
www.historicdc.org
www.historichighway101.com
www.historiclittleswitzerland.com
www.historicmarcosregister.com
www.historicmichiganroad.org
www.historicnewyorktours.com
www.historicobarakaldocf.com
www.historicoccasions.com
www.historicophiles.com
www.historicparanormal.net
www.historicparkavenue.org
www.historicparkview.org
www.historicplaceswellington.org
Other certificates including the domain name automattic.com
(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
Certificate
The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIK3jCCCcagAwIBAgISA9efWkJTNd3617XqMyK4ikvNMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMDgwMTUxNTBaFw0x OTA0MDgwMTUxNTBaMB0xGzAZBgNVBAMTEnRscy5hdXRvbWF0dGljLmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMlg05rJ6WoLZuChtSrxrYgQn8xp AYBX1Hws0Kqm1wgLMTyU+tX559PtMqevSdYW6i+GUjYXgOdGy97+jmSb3iOx3LZT 4RqaoF3E5gK9WRzCeXbplakd8SAxPiAm3E3Tp2lTOuPY6uwINQCJlI6gx0QRLpAK a5fqBC9h9Zhq9U1WPJD9vkKIEMDFaOb4Ja1oQmkLiXBIxjbGFnkhNQKOXq9foeMF FY6rkzrziu4gwyhlCI7ICHR4abhkTpDXXyEh7v12QCiX3qsmph3Dl0y4Tk8b6/gt IedGgVJ5YvFV3LClcQa4CrNGNr/MSQCp2NHRTzSsg+O4+5bjlzyPHCqVFsECAwEA AaOCB+kwggflMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUIm0KUNc2VrTtqxBYtI5P M1T+s4EwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzCCBZ4GA1UdEQSCBZUwggWRghdibG9nLmhpc3RvcmljaG90ZWxzLm9y Z4IfaGlzdG9yaWNhbHNvY2lldHlvZmVhc3RvbmN0Lm9yZ4IbaGlzdG9yaWNhbHNv Y2lldHlvZmVsYmEuY29tghZoaXN0b3JpY2FsdGhlb2xvZ3kub3JngiRoaXN0b3Jp Y2FsdGhpbmtpbmdtaXNzaW9uc2NhbmFkYS5uZXSCGmhpc3RvcmljYWx0cnV0aHBy b2plY3QuY29tghpoaXN0b3JpY2Fsd2lsbGlhbXNidXJnLmNvbYIVaGlzdG9yaWNh dGhlbmFldW0uY29tgh9oaXN0b3JpY2Jhcm5zc2FuanVhbmlzbGFuZHMuY29tghdo aXN0b3JpY2NpdGllc3J1bGVzLmNvbYIdaGlzdG9yaWNjbHViY2FzdHJvdmlsbGFy aS5jb22CDmhpc3RvcmljZGMuY29tgg5oaXN0b3JpY2RjLm9yZ4IWaGlzdG9yaWNo aWdod2F5MTAxLmNvbYIdaGlzdG9yaWNsaXR0bGVzd2l0emVybGFuZC5jb22CGmhp c3RvcmljbWFyY29zcmVnaXN0ZXIuY29tghhoaXN0b3JpY21pY2hpZ2Fucm9hZC5v cmeCGGhpc3RvcmljbmV3eW9ya3RvdXJzLmNvbYIYaGlzdG9yaWNvYmFyYWthbGRv Y2YuY29tghVoaXN0b3JpY29jY2FzaW9ucy5jb22CE2hpc3Rvcmljb3BoaWxlcy5j b22CFmhpc3RvcmljcGFyYW5vcm1hbC5uZXSCFmhpc3RvcmljcGFya2F2ZW51ZS5v cmeCFGhpc3RvcmljcGFya3ZpZXcub3JnghxoaXN0b3JpY3BsYWNlc3dlbGxpbmd0 b24ub3JnghhoaXN0b3JpY3NhbnRhYmFyYmFyYS5jb22CEnRscy5hdXRvbWF0dGlj LmNvbYIjd3d3Lmhpc3RvcmljYWxzb2NpZXR5b2ZlYXN0b25jdC5vcmeCH3d3dy5o aXN0b3JpY2Fsc29jaWV0eW9mZWxiYS5jb22CGnd3dy5oaXN0b3JpY2FsdGhlb2xv Z3kub3Jngih3d3cuaGlzdG9yaWNhbHRoaW5raW5nbWlzc2lvbnNjYW5hZGEubmV0 gh53d3cuaGlzdG9yaWNhbHRydXRocHJvamVjdC5jb22CHnd3dy5oaXN0b3JpY2Fs d2lsbGlhbXNidXJnLmNvbYIZd3d3Lmhpc3RvcmljYXRoZW5hZXVtLmNvbYIjd3d3 Lmhpc3RvcmljYmFybnNzYW5qdWFuaXNsYW5kcy5jb22CG3d3dy5oaXN0b3JpY2Np dGllc3J1bGVzLmNvbYIhd3d3Lmhpc3RvcmljY2x1YmNhc3Ryb3ZpbGxhcmkuY29t ghJ3d3cuaGlzdG9yaWNkYy5jb22CEnd3dy5oaXN0b3JpY2RjLm9yZ4Iad3d3Lmhp c3RvcmljaGlnaHdheTEwMS5jb22CIXd3dy5oaXN0b3JpY2xpdHRsZXN3aXR6ZXJs YW5kLmNvbYIed3d3Lmhpc3RvcmljbWFyY29zcmVnaXN0ZXIuY29tghx3d3cuaGlz dG9yaWNtaWNoaWdhbnJvYWQub3Jnghx3d3cuaGlzdG9yaWNuZXd5b3JrdG91cnMu Y29tghx3d3cuaGlzdG9yaWNvYmFyYWthbGRvY2YuY29tghl3d3cuaGlzdG9yaWNv Y2Nhc2lvbnMuY29tghd3d3cuaGlzdG9yaWNvcGhpbGVzLmNvbYIad3d3Lmhpc3Rv cmljcGFyYW5vcm1hbC5uZXSCGnd3dy5oaXN0b3JpY3BhcmthdmVudWUub3Jnghh3 d3cuaGlzdG9yaWNwYXJrdmlldy5vcmeCIHd3dy5oaXN0b3JpY3BsYWNlc3dlbGxp bmd0b24ub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYB BAHWeQIEAgSB9ASB8QDvAHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7 zFYAAAFoK1+S0QAABAMARjBEAiBkIaCbxcuON9g1WUvkzL1B2Y4ps1LTPI+JPH0U FMMQFQIgVJptvvnSpXtS4l/tCztSr3XeTTbeEbOuD+YtfoxMU+cAdgBj8tvN6DvM LM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWgrX5TMAAAEAwBHMEUCIQDS8hTL ohOFHcpRcAQBBIlzKS6q24pRfatT4c0p4GxArwIgaCnMehUYHMFqAiGZzcYLlKu5 vil2jXW7R1YvPC6zlKUwDQYJKoZIhvcNAQELBQADggEBABNG6NIpL0KY1BhxlJbc 6/n7hGWlgV9ldp2QpvJe9LDA9U1ywrIg9Jwxz2r2RIV6jgE97B8+VgpyHuSU8nch mgg6O3H9o2XF1YeTaLQwVjoxitfGp8bQE+uS6+ELqc1zq/m08r6e2pKXDtaJfmnL ZyH/PcGJh5+TcPg1sFU8y2joBLhsUe7BWx/xExitr6dju0HsBXJR+UC7P1EVvT7V WgGIjZTDAOmUWrVDpiscujQkUPkam7v7V9Ic3/scPVr09Z49vNBSHK0a34XfvoIZ QZHyNxLpL41RMmxPQ7KAgYCCiMogGbBDz09+4PdPowl3cu0R5vd5d+IhUBcf81cb AL0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWDTmsnpagtm4KG1KvGt iBCfzGkBgFfUfCzQqqbXCAsxPJT61fnn0+0yp69J1hbqL4ZSNheA50bL3v6OZJve I7HctlPhGpqgXcTmAr1ZHMJ5dumVqR3xIDE+ICbcTdOnaVM649jq7Ag1AImUjqDH RBEukAprl+oEL2H1mGr1TVY8kP2+QogQwMVo5vglrWhCaQuJcEjGNsYWeSE1Ao5e r1+h4wUVjquTOvOK7iDDKGUIjsgIdHhpuGROkNdfISHu/XZAKJfeqyamHcOXTLhO Txvr+C0h50aBUnli8VXcsKVxBrgKs0Y2v8xJAKnY0dFPNKyD47j7luOXPI8cKpUW wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 334709382586561221735167145334303602920397 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-08 01:51:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-08 01:51:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25421646264644386208397847399553156901723487423112761242060134528310484502781700585910382216531131683178898769640624579443895576447370737951644383080768674198261322352187861607421183154664858588604674201805445081463177866820381500757742368653391186803198861503966770713707974207561589512813782855139732378895743824870217163414898865970343348626523338349034384260946555515761342594670743300014880951477376524571029835945308816399316935239565920641898121259159250657860088805448642689211433928117242796588248228737206548665759561470917817022809190091978731541934736310329078509258814238660854810287894826264015993640641 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 226d0a50d73656b4edab1058b48e4f3354feb381 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1429 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.historichotels.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalsocietyofeastonct.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalsocietyofelba.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicaltheology.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalthinkingmissionscanada.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicaltruthproject.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalwilliamsburg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicathenaeum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicbarnssanjuanislands.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historiccitiesrules.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicclubcastrovillari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicdc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicdc.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historichighway101.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historiclittleswitzerland.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicmarcosregister.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicmichiganroad.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicnewyorktours.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicobarakaldocf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicoccasions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicophiles.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicparanormal.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicparkavenue.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicparkview.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicplaceswellington.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicsantabarbara.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalsocietyofeastonct.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalsocietyofelba.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicaltheology.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalthinkingmissionscanada.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicaltruthproject.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalwilliamsburg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicathenaeum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicbarnssanjuanislands.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historiccitiesrules.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicclubcastrovillari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicdc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicdc.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historichighway101.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historiclittleswitzerland.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicmarcosregister.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicmichiganroad.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicnewyorktours.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicobarakaldocf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicoccasions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicophiles.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicparanormal.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicparkavenue.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicparkview.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicplaceswellington.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001682b5f92d1000004030046304402206421a09bc5cb8e37d835594be4ccbd41d98e29b352d33c8f893c7d1414c310150220549a6dbef9d2a57b52e25fed0b3b52af75de4d36de11b3ae0fe62d7e8c4c53e700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001682b5f94cc0000040300473045022100d2f214cba213851dca51700401048973292eaadb8a517dab53e1cd29e06c40af02206829cc7a15181cc16a022199cdc60b94abb9be29768d75bb47562f3c2eb394a5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001346e8d2292f4298d418719496dcebf9fb8465a5815f65769d90a6f25ef4b0c0f54d72c2b220f49c31cf6af644857a8e013dec1f3e560a721ee494f277219a083a3b71fda365c5d5879368b430563a318ad7c6a7c6d013eb92ebe10ba9cd73abf9b4f2be9eda92970ed6897e69cb6721ff3dc189879f9370f835b0553ccb68e804b86c51eec15b1ff11318adafa763bb41ec057251f940bb3f5115bd3ed55a01888d94c300e9945ab543a62b1cba342450f91a9bbbfb57d21cdffb1c3d5af4f59e3dbcd0521cad1adf85dfbe82194191f23712e92f8d51326c4f43b28081808288ca2019b043cf4f7ee0f74fa3097772ed11e6f77977e22150171ff3571b00bd