tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b7:cd:7d:9f:f5:eb:8a:0e:92:d2:7f:5d:b7:9f:52:c8:e5 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:cd:7d:9f:f5:eb:8a:0e:92:d2:7f:5d:b7:9f:52:c8:e5
Serial Number (int): 323881674962442626035571104795067715602661
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 63:ea:b4:93:aa:38:41:69:ee:f3:68:2a:60:ba:f4:3b:16:b3:ac:17
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 19:f4:99:58:44:7d:85:25:5b:de:bd:a4:b8:4a:80:e9:92:34:90:1a
Fingerprint (sha256): 68:8c:8a:7a:e4:ac:ab:74:04:82:f3:4e:1c:79:6b:94:26:5f:91:74:1f:66:ee:0d:b5:17:04:b5:da:6b:1e:a5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

architecture.uic.es
coursedesign.uidaho.edu
dualcredit.uidaho.edu
obalemba-lab.uidaho.edu
tls.automattic.com
uhkapeli-ilmastolla.net
uhlenhof2.de
uhlnc.org
uhmagazine.com
uhmprettymonika.com
uhnwinvestors.com
uhochdrei.de
uholneskladymatis.com
uhoortnogvanons.org
uhort.net
uhrbert.com
uhrginc.com
uhsswordandshield.com
uianthropocene.org
uibk-hbi-hypoxia-research.org
uicatoronto.com
uidahoalphagammarho.com
uidesignexplained.com
uidswansea.com
uihumanitiesforthepublicgood.com
uiiiiii.com
webauthoring.uidaho.edu
www.coursedesign.uidaho.edu
www.dualcredit.uidaho.edu
www.obalemba-lab.uidaho.edu
www.uhkapeli-ilmastolla.net
www.uhlenhof2.de
www.uhlnc.org
www.uhmagazine.com
www.uhmprettymonika.com
www.uhnwinvestors.com
www.uhochdrei.de
www.uholneskladymatis.com
www.uhoortnogvanons.org
www.uhort.net
www.uhrbert.com
www.uhrginc.com
www.uhsswordandshield.com
www.uianthropocene.org
www.uibk-hbi-hypoxia-research.org
www.uicatoronto.com
www.uidahoalphagammarho.com
www.uidesignexplained.com
www.uidswansea.com
www.uihumanitiesforthepublicgood.com
www.uiiiiii.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJqTCCCJGgAwIBAgISA7fNfZ/164oOktJ/XbefUsjlMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MDExNzUwNDhaFw0x
OTA4MzAxNzUwNDhaMB0xGzAZBgNVBAMTEnRscy5hdXRvbWF0dGljLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKEtK4rOC63w29wNj+FjLMKoSf7c
lx16sJi/O+4GWo2EnWfWpFi98PclgHlcuCL3Q6dSh7ezYqXA4gwtjAynZFaHejhO
TJx41/saypdrvQILISk87S5jtncMNUyCbpFkQWRexEBlkSVsU68Hg8B1ymCRBTYm
To5j2Zx95mytAF7Tfg2VMmeM2DjGBcvb6a5ivUMN8d/5/vCd2iD5NnlmW1TYPUAw
f9MaSepj99QGN0lqWyU6q9sRvSfPiEU0hiPF1RRTlxA/Zh9iOIFWZgLeox9QokNH
t03zrmx+MYAcO2LQh4h45h1QnvGO1Njs/SKBOFZol6FL2lbVyFRPRUJKaB0CAwEA
AaOCBrQwggawMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUY+q0k6o4QWnu82gqYLr0
OxazrBcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCBGcGA1UdEQSCBF4wggRaghNhcmNoaXRlY3R1cmUudWljLmVzghdj
b3Vyc2VkZXNpZ24udWlkYWhvLmVkdYIVZHVhbGNyZWRpdC51aWRhaG8uZWR1ghdv
YmFsZW1iYS1sYWIudWlkYWhvLmVkdYISdGxzLmF1dG9tYXR0aWMuY29tghd1aGth
cGVsaS1pbG1hc3RvbGxhLm5ldIIMdWhsZW5ob2YyLmRlggl1aGxuYy5vcmeCDnVo
bWFnYXppbmUuY29tghN1aG1wcmV0dHltb25pa2EuY29tghF1aG53aW52ZXN0b3Jz
LmNvbYIMdWhvY2hkcmVpLmRlghV1aG9sbmVza2xhZHltYXRpcy5jb22CE3Vob29y
dG5vZ3Zhbm9ucy5vcmeCCXVob3J0Lm5ldIILdWhyYmVydC5jb22CC3VocmdpbmMu
Y29tghV1aHNzd29yZGFuZHNoaWVsZC5jb22CEnVpYW50aHJvcG9jZW5lLm9yZ4Id
dWliay1oYmktaHlwb3hpYS1yZXNlYXJjaC5vcmeCD3VpY2F0b3JvbnRvLmNvbYIX
dWlkYWhvYWxwaGFnYW1tYXJoby5jb22CFXVpZGVzaWduZXhwbGFpbmVkLmNvbYIO
dWlkc3dhbnNlYS5jb22CIHVpaHVtYW5pdGllc2ZvcnRoZXB1YmxpY2dvb2QuY29t
ggt1aWlpaWlpLmNvbYIXd2ViYXV0aG9yaW5nLnVpZGFoby5lZHWCG3d3dy5jb3Vy
c2VkZXNpZ24udWlkYWhvLmVkdYIZd3d3LmR1YWxjcmVkaXQudWlkYWhvLmVkdYIb
d3d3Lm9iYWxlbWJhLWxhYi51aWRhaG8uZWR1ght3d3cudWhrYXBlbGktaWxtYXN0
b2xsYS5uZXSCEHd3dy51aGxlbmhvZjIuZGWCDXd3dy51aGxuYy5vcmeCEnd3dy51
aG1hZ2F6aW5lLmNvbYIXd3d3LnVobXByZXR0eW1vbmlrYS5jb22CFXd3dy51aG53
aW52ZXN0b3JzLmNvbYIQd3d3LnVob2NoZHJlaS5kZYIZd3d3LnVob2xuZXNrbGFk
eW1hdGlzLmNvbYIXd3d3LnVob29ydG5vZ3Zhbm9ucy5vcmeCDXd3dy51aG9ydC5u
ZXSCD3d3dy51aHJiZXJ0LmNvbYIPd3d3LnVocmdpbmMuY29tghl3d3cudWhzc3dv
cmRhbmRzaGllbGQuY29tghZ3d3cudWlhbnRocm9wb2NlbmUub3JngiF3d3cudWli
ay1oYmktaHlwb3hpYS1yZXNlYXJjaC5vcmeCE3d3dy51aWNhdG9yb250by5jb22C
G3d3dy51aWRhaG9hbHBoYWdhbW1hcmhvLmNvbYIZd3d3LnVpZGVzaWduZXhwbGFp
bmVkLmNvbYISd3d3LnVpZHN3YW5zZWEuY29tgiR3d3cudWlodW1hbml0aWVzZm9y
dGhlcHVibGljZ29vZC5jb22CD3d3dy51aWlpaWlpLmNvbTBMBgNVHSAERTBDMAgG
BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz
LmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AOJpS64m
6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABaxRhSg0AAAQDAEgwRgIhAOM9
U9fLWSlenonwMTCsK4vpgCVP8FOnK2A7GnUTHH57AiEAiprw5N04wxwkQgc+igwD
cWqa8tbqIhyjf6+C6WG2SxUAdgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdo
VEvYjQAAAWsUYUoxAAAEAwBHMEUCIQDkDEmeV7BlkvQAk7+IKmrzDQV5OkQTgMUH
BwsEWz+iqwIgTNzN5AOxSJ0aP/IxVXJ80xNLeqU3fVipWIyVBkmy1HwwDQYJKoZI
hvcNAQELBQADggEBAC2f4ApJBb/U+luPGv9nS7c3NyNKaqvOgFC5rtbsgKfid3Z4
nRqRocR3iwH+AfBThG51exfKTopnWXrf8KdCzjKKlXwaRg2maYDAq/DdGq0rbo9g
6Z+D74UXBNZwl4l333rN8/1weOC51AIgCUyc3n2Od9Y6FxVAtWdQUq1Eqx51KnSt
T0uq21ZmGWAyEzNurdMlTRrrClqH7ld8J+C/zrab1zvZw+ZQL65nUk+lzBazx9NZ
fAYXTmvtBptf1UlZrvNsGLULGUSW7O9FiZ5mHkiExlDO+cG77BkRlsTIvGuF5mPr
t4TuI+g9XiOVwsUCW6Q56fDfGIegBtsgjtQ8m9w=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS0ris4LrfDb3A2P4WMs
wqhJ/tyXHXqwmL877gZajYSdZ9akWL3w9yWAeVy4IvdDp1KHt7NipcDiDC2MDKdk
Vod6OE5MnHjX+xrKl2u9AgshKTztLmO2dww1TIJukWRBZF7EQGWRJWxTrweDwHXK
YJEFNiZOjmPZnH3mbK0AXtN+DZUyZ4zYOMYFy9vprmK9Qw3x3/n+8J3aIPk2eWZb
VNg9QDB/0xpJ6mP31AY3SWpbJTqr2xG9J8+IRTSGI8XVFFOXED9mH2I4gVZmAt6j
H1CiQ0e3TfOubH4xgBw7YtCHiHjmHVCe8Y7U2Oz9IoE4VmiXoUvaVtXIVE9FQkpo
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323881674962442626035571104795067715602661
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-01 17:50:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-30 17:50:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20346641299479787593360891077880839646739746300451876030441669732081970974690674062249699954077592076726422223948480342831310815113558806374152926752520162615497800381743159946713206570740736585251865729723531414975502694052930498037073305731825499272872936352965263696220530573545204401599700062334338919458490219317641059463539336211631202077002294346217251555236485536382447970769575411302083503362095895929462078498369822251960697023992522700985912650379706044934413362519777481550849494695733406649589068359386502361911666264949615687982916321435402896195431012363115794770631581455476747373607903746743849347101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							63eab493aa384169eef3682a60baf43b16b3ac17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architecture.uic.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coursedesign.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dualcredit.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obalemba-lab.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhkapeli-ilmastolla.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhlenhof2.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhlnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhmprettymonika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhnwinvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhochdrei.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uholneskladymatis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhoortnogvanons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhort.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhrbert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhrginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhsswordandshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uianthropocene.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uibk-hbi-hypoxia-research.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uicatoronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uidahoalphagammarho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uidesignexplained.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uidswansea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uihumanitiesforthepublicgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uiiiiii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webauthoring.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coursedesign.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dualcredit.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obalemba-lab.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhkapeli-ilmastolla.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhlenhof2.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhlnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhmprettymonika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhnwinvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhochdrei.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uholneskladymatis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhoortnogvanons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhort.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhrbert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhrginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhsswordandshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uianthropocene.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uibk-hbi-hypoxia-research.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uicatoronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uidahoalphagammarho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uidesignexplained.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uidswansea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uihumanitiesforthepublicgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uiiiiii.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b14614a0d0000040300483046022100e33d53d7cb59295e9e89f03130ac2b8be980254ff053a72b603b1a75131c7e7b0221008a9af0e4dd38c31c2442073e8a0c03716a9af2d6ea221ca37faf82e961b64b1500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b14614a310000040300473045022100e40c499e57b06592f40093bf882a6af30d05793a441380c507070b045b3fa2ab02204cdccde403b1489d1a3ff23155727cd3134b7aa5377d58a9588c950649b2d47c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002d9fe00a4905bfd4fa5b8f1aff674bb73737234a6aabce8050b9aed6ec80a7e27776789d1a91a1c4778b01fe01f053846e757b17ca4e8a67597adff0a742ce328a957c1a460da66980c0abf0dd1aad2b6e8f60e99f83ef851704d670978977df7acdf3fd7078e0b9d40220094c9cde7d8e77d63a171540b5675052ad44ab1e752a74ad4f4baadb566619603213336eadd3254d1aeb0a5a87ee577c27e0bfceb69bd73bd9c3e6502fae67524fa5cc16b3c7d3597c06174e6bed069b5fd54959aef36c18b50b194496ecef45899e661e4884c650cef9c1bbec191196c4c8bc6b85e663ebb784ee23e83d5e2395c2c5025ba439e9f0df1887a006db208ed43c9bdc