tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f2:78:1c:78:b4:7a:e8:a9:69:3d:5b:7d:66:6b:ce:4e:05 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f2:78:1c:78:b4:7a:e8:a9:69:3d:5b:7d:66:6b:ce:4e:05
Serial Number (int): 343844845782142337110708060538125360713221
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:2b:53:cb:16:0d:2a:5e:4a:37:f0:a1:81:a2:18:f7:57:e0:6e:9a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a6:3f:34:0e:7a:c1:bc:71:ae:5b:68:e8:4d:9f:10:b8:e9:9a:35:e7
Fingerprint (sha256): 56:49:c4:fa:d6:a5:c6:66:a3:27:5f:56:ab:77:c0:3b:64:ce:c1:46:ea:16:56:f8:07:52:ec:7c:db:67:b2:57

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.historichotels.org
historicalness.com
historicalpullmanpark.com
historicalsocietyhopkinscoky.org
historicalsocietyofeastonct.org
historicalsocietyofelba.com
historicalthinkingmissionscanada.net
historicaltruthproject.com
historicalwilliamsburg.com
historicathenaeum.com
historicbarnssanjuanislands.com
historiccitiesrules.com
historicclubcastrovillari.com
historicdc.com
historicdc.org
historiclittleswitzerland.com
historicmarcosregister.com
historicmichiganroad.org
historicnewyorktours.com
historicobarakaldocf.com
historicoccasions.com
historicophiles.com
historicparkavenue.org
historicparkview.org
historicplaceswellington.org
tls.automattic.com
www.historicalmusings.com
www.historicalness.com
www.historicalpullmanpark.com
www.historicalsocietyhopkinscoky.org
www.historicalsocietyofeastonct.org
www.historicalsocietyofelba.com
www.historicalthinkingmissionscanada.net
www.historicaltruthproject.com
www.historicalwilliamsburg.com
www.historicathenaeum.com
www.historicbarnssanjuanislands.com
www.historiccitiesrules.com
www.historicclubcastrovillari.com
www.historicdc.com
www.historicdc.org
www.historiclittleswitzerland.com
www.historicmarcosregister.com
www.historicmichiganroad.org
www.historicnewyorktours.com
www.historicobarakaldocf.com
www.historicoccasions.com
www.historicophiles.com
www.historicparkavenue.org
www.historicparkview.org
www.historicplaceswellington.org

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIK8TCCCdmgAwIBAgISA/J4HHi0euipaT1bfWZrzk4FMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMTEwMTM5MjlaFw0x
OTA2MDkwMTM5MjlaMB0xGzAZBgNVBAMTEnRscy5hdXRvbWF0dGljLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM26ATxsXJBOTJDDpMxKq681ELA6
V6wxUAQkdfyqaHm9AsaXzPrXuWDpaGwYyApFKvUzNgLv+XZsQucAI4kS2nti92RJ
N+LH6xhdh0lNl18RXAqlamxA/ryFdhTZUNwMKvw9ReOoDxC+iomIv6qT5/o/wUx3
MSrEuoBew8b79WJQ8MytJpC/E2Jp5H/OhSh7Yw4pNnpraCp6LI9i0eOGCUkDIdiB
2A2xyhMJJIWmE4Vg4Iu0nZai5Ovt0ymuTl4Qg2PJWro5LPJCDkjCPA7jJgM0ORYV
8TsRScvQCdeoRLY9J6xN3z3Epw+nOdbBcc7K9W5eoVmdrrBCgEPDoTLsn4UCAwEA
AaOCB/wwggf4MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUqitTyxYNKl5KN/ChgaIY
91fgbpowHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCBbEGA1UdEQSCBagwggWkghdibG9nLmhpc3RvcmljaG90ZWxzLm9y
Z4ISaGlzdG9yaWNhbG5lc3MuY29tghloaXN0b3JpY2FscHVsbG1hbnBhcmsuY29t
giBoaXN0b3JpY2Fsc29jaWV0eWhvcGtpbnNjb2t5Lm9yZ4IfaGlzdG9yaWNhbHNv
Y2lldHlvZmVhc3RvbmN0Lm9yZ4IbaGlzdG9yaWNhbHNvY2lldHlvZmVsYmEuY29t
giRoaXN0b3JpY2FsdGhpbmtpbmdtaXNzaW9uc2NhbmFkYS5uZXSCGmhpc3Rvcmlj
YWx0cnV0aHByb2plY3QuY29tghpoaXN0b3JpY2Fsd2lsbGlhbXNidXJnLmNvbYIV
aGlzdG9yaWNhdGhlbmFldW0uY29tgh9oaXN0b3JpY2Jhcm5zc2FuanVhbmlzbGFu
ZHMuY29tghdoaXN0b3JpY2NpdGllc3J1bGVzLmNvbYIdaGlzdG9yaWNjbHViY2Fz
dHJvdmlsbGFyaS5jb22CDmhpc3RvcmljZGMuY29tgg5oaXN0b3JpY2RjLm9yZ4Id
aGlzdG9yaWNsaXR0bGVzd2l0emVybGFuZC5jb22CGmhpc3RvcmljbWFyY29zcmVn
aXN0ZXIuY29tghhoaXN0b3JpY21pY2hpZ2Fucm9hZC5vcmeCGGhpc3RvcmljbmV3
eW9ya3RvdXJzLmNvbYIYaGlzdG9yaWNvYmFyYWthbGRvY2YuY29tghVoaXN0b3Jp
Y29jY2FzaW9ucy5jb22CE2hpc3Rvcmljb3BoaWxlcy5jb22CFmhpc3RvcmljcGFy
a2F2ZW51ZS5vcmeCFGhpc3RvcmljcGFya3ZpZXcub3JnghxoaXN0b3JpY3BsYWNl
c3dlbGxpbmd0b24ub3JnghJ0bHMuYXV0b21hdHRpYy5jb22CGXd3dy5oaXN0b3Jp
Y2FsbXVzaW5ncy5jb22CFnd3dy5oaXN0b3JpY2FsbmVzcy5jb22CHXd3dy5oaXN0
b3JpY2FscHVsbG1hbnBhcmsuY29tgiR3d3cuaGlzdG9yaWNhbHNvY2lldHlob3Br
aW5zY29reS5vcmeCI3d3dy5oaXN0b3JpY2Fsc29jaWV0eW9mZWFzdG9uY3Qub3Jn
gh93d3cuaGlzdG9yaWNhbHNvY2lldHlvZmVsYmEuY29tgih3d3cuaGlzdG9yaWNh
bHRoaW5raW5nbWlzc2lvbnNjYW5hZGEubmV0gh53d3cuaGlzdG9yaWNhbHRydXRo
cHJvamVjdC5jb22CHnd3dy5oaXN0b3JpY2Fsd2lsbGlhbXNidXJnLmNvbYIZd3d3
Lmhpc3RvcmljYXRoZW5hZXVtLmNvbYIjd3d3Lmhpc3RvcmljYmFybnNzYW5qdWFu
aXNsYW5kcy5jb22CG3d3dy5oaXN0b3JpY2NpdGllc3J1bGVzLmNvbYIhd3d3Lmhp
c3RvcmljY2x1YmNhc3Ryb3ZpbGxhcmkuY29tghJ3d3cuaGlzdG9yaWNkYy5jb22C
End3dy5oaXN0b3JpY2RjLm9yZ4Ihd3d3Lmhpc3RvcmljbGl0dGxlc3dpdHplcmxh
bmQuY29tgh53d3cuaGlzdG9yaWNtYXJjb3NyZWdpc3Rlci5jb22CHHd3dy5oaXN0
b3JpY21pY2hpZ2Fucm9hZC5vcmeCHHd3dy5oaXN0b3JpY25ld3lvcmt0b3Vycy5j
b22CHHd3dy5oaXN0b3JpY29iYXJha2FsZG9jZi5jb22CGXd3dy5oaXN0b3JpY29j
Y2FzaW9ucy5jb22CF3d3dy5oaXN0b3JpY29waGlsZXMuY29tghp3d3cuaGlzdG9y
aWNwYXJrYXZlbnVlLm9yZ4IYd3d3Lmhpc3RvcmljcGFya3ZpZXcub3JngiB3d3cu
aGlzdG9yaWNwbGFjZXN3ZWxsaW5ndG9uLm9yZzBMBgNVHSAERTBDMAgGBmeBDAEC
ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl
bmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AHR+2oMxrTMQkSGc
ziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABaWqejXYAAAQDAEcwRQIgEzhfKmpM1D3H
HRO0vY5pHkV/QImW/BebaAgeQcFqSIsCIQCGtX7fMn6KN4lZ5mdky/aIkn2KBgSA
tkboaARQgdsBagB1ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAAB
aWqej9QAAAQDAEYwRAIgX0ht9rFm5phAu0Mx02pySqLAZ1lcJcjgItDHpr+Ya4AC
IA2Co0TGMumP15MRw5nAZ4aK8j4nZbruBnvpuNwpEaB8MA0GCSqGSIb3DQEBCwUA
A4IBAQA/SgiAtwbdEfTjd2HgSJc8EEzFxi0NTumC5d8Dsu07A5j1q8uOLGe4hWA1
dEFEIZAjGufBHwTd5XdiGBX9zRWqoGb0/jrSblvc8IDTmuO8rZVwcBECbxnHK5KA
sF87g0N7/toGZlkemqC58vPKHC7A3W7xr1tx6ZSZ/ZPymQEaQEqInZvvAQn1YhMs
K3R05M/g3gPI+CDI/16eekMLDUTgiM2VWeP1ut5H7ouESX7qD6SrYGelKUAmefsJ
EkjHxh+n6mN0TnyAufwE6WMqeRuYP1qjbI6yvu5eneNQTj1yx60LJ29q+uSiu2j6
iYb5JAGiaCUemdD1Oz5ZaDAeutVH
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzboBPGxckE5MkMOkzEqr
rzUQsDpXrDFQBCR1/Kpoeb0CxpfM+te5YOlobBjICkUq9TM2Au/5dmxC5wAjiRLa
e2L3ZEk34sfrGF2HSU2XXxFcCqVqbED+vIV2FNlQ3Awq/D1F46gPEL6KiYi/qpPn
+j/BTHcxKsS6gF7Dxvv1YlDwzK0mkL8TYmnkf86FKHtjDik2emtoKnosj2LR44YJ
SQMh2IHYDbHKEwkkhaYThWDgi7SdlqLk6+3TKa5OXhCDY8laujks8kIOSMI8DuMm
AzQ5FhXxOxFJy9AJ16hEtj0nrE3fPcSnD6c51sFxzsr1bl6hWZ2usEKAQ8OhMuyf
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343844845782142337110708060538125360713221
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 01:39:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-09 01:39:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25970574917385925358578702950310120531025873998421583465519719832830185731850480181462432596885696142319130424699912620752322667588386893799034791497419819636897652017210886112430216307054373959988564981072556442386316575233395335527072074576133506038708406793493330910837795602168454296283660218267103643378170472929699847311776272174536834498460931470789759412833204266086884915565979898120542444233328861639883005179092904730921386507695460437063564022383447634640469445651509119227293856196599399271586517800624529110847359627906807055138968648807666677743638979906341707029918838119636729310180978162052664958853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa2b53cb160d2a5e4a37f0a181a218f757e06e9a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1448 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.historichotels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalpullmanpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalsocietyhopkinscoky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalsocietyofeastonct.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalsocietyofelba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalthinkingmissionscanada.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicaltruthproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalwilliamsburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicathenaeum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicbarnssanjuanislands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historiccitiesrules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicclubcastrovillari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historiclittleswitzerland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicmarcosregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicmichiganroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicnewyorktours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicobarakaldocf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicoccasions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicophiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicparkavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicparkview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicplaceswellington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalmusings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalpullmanpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalsocietyhopkinscoky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalsocietyofeastonct.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalsocietyofelba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalthinkingmissionscanada.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicaltruthproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalwilliamsburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicathenaeum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicbarnssanjuanislands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historiccitiesrules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicclubcastrovillari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historiclittleswitzerland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicmarcosregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicmichiganroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicnewyorktours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicobarakaldocf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicoccasions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicophiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicparkavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicparkview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicplaceswellington.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001696a9e8d760000040300473045022013385f2a6a4cd43dc71d13b4bd8e691e457f408996fc179b68081e41c16a488b02210086b57edf327e8a378959e66764cbf688927d8a060480b646e868045081db016a007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001696a9e8fd4000004030046304402205f486df6b166e69840bb4331d36a724aa2c067595c25c8e022d0c7a6bf986b8002200d82a344c632e98fd79311c399c067868af23e2765baee067be9b8dc2911a07c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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