tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:33:bf:82:f1:b6:9a:4e:59:12:c8:21:1c:17:d0:99:c9:a7 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:bf:82:f1:b6:9a:4e:59:12:c8:21:1c:17:d0:99:c9:a7
Serial Number (int): 278945820956563125501832317501721934416295
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3b:08:36:d7:dc:cb:93:d1:f9:da:11:de:17:06:c7:f0:cc:eb:83:85
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1c:e1:c1:eb:5f:32:93:68:d7:cc:63:99:26:d7:b5:09:e2:4e:16:47
Fingerprint (sha256): 6c:b8:dd:b9:a7:01:10:dc:24:4b:57:db:f0:6d:07:ed:02:88:cf:70:82:d4:81:7f:e9:90:42:83:58:18:e4:c2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lefthistory.ca
leftindixie.com
leftinohio.com
leftofselfcentred.com
leftofthedialmusic.com
leftonwalnut.com
leftovercooking.nl
leftoverlipstick.com
leftoversplease.com
leftoveruniverse.com
leftrev.com
leftrightalliance.com
leftrightandcenter.net
leftup.org
leftwin.org
leftwingwatch.blog
leftwithballs.com
leftwithlouie.com
leftwoods.com
leftyhooligan.com
leftylex.com
leftysmudges.com
lefuturdestartup.com
lefuturewave.com
lefuturistedailynews.com
tls.automattic.com
www.lefthistory.ca
www.leftindixie.com
www.leftinohio.com
www.leftofselfcentred.com
www.leftofthedialmusic.com
www.leftonwalnut.com
www.leftovercooking.nl
www.leftoverlipstick.com
www.leftoversplease.com
www.leftoveruniverse.com
www.leftrev.com
www.leftrightalliance.com
www.leftrightandcenter.net
www.leftup.org
www.leftwin.org
www.leftwingwatch.blog
www.leftwithballs.com
www.leftwithlouie.com
www.leftwoods.com
www.leftyhooligan.com
www.leftylex.com
www.leftysmudges.com
www.lefuturdestartup.com
www.lefuturewave.com
www.lefuturistedailynews.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJezCCCGOgAwIBAgISAzO/gvG2mk5ZEsghHBfQmcmnMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMTkxNDU2MzJaFw0y
MDA0MTgxNDU2MzJaMB0xGzAZBgNVBAMTEnRscy5hdXRvbWF0dGljLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALzP/U/L0UnDrLF1PDQoFOm+3clm
8LhO6xaePNO7juNbU8R6oVfpO07wqmD1NKY3nUK5BrbpjalD1pL2mPkSOXKAd+4P
UEIyr6+8pbk1hPajaS94ppQ5uNSWDyRYw+3zW3jjjJb6orGsPikMBJElFEfTioc+
i9FS/zSUYzle+pE4Bf2u3XqQ4UfiFgjqesRE2xFfOrlaYbXwk5N4Sq4jO+yktwzH
5t2bYCViSSO4FalEtzvuAqZmN4F/q9DLeJNljmFTAyYHxnnZRsBf1tv9oJjzIEFn
xGLQ2AENHP8SblELbT1D8LaO3b4nxFVeGU0eebDWKjOl29I38yoY9QzQfekCAwEA
AaOCBoYwggaCMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUOwg219zLk9H52hHeFwbH
8Mzrg4UwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCBDkGA1UdEQSCBDAwggQsgg5sZWZ0aGlzdG9yeS5jYYIPbGVmdGlu
ZGl4aWUuY29tgg5sZWZ0aW5vaGlvLmNvbYIVbGVmdG9mc2VsZmNlbnRyZWQuY29t
ghZsZWZ0b2Z0aGVkaWFsbXVzaWMuY29tghBsZWZ0b253YWxudXQuY29tghJsZWZ0
b3ZlcmNvb2tpbmcubmyCFGxlZnRvdmVybGlwc3RpY2suY29tghNsZWZ0b3ZlcnNw
bGVhc2UuY29tghRsZWZ0b3ZlcnVuaXZlcnNlLmNvbYILbGVmdHJldi5jb22CFWxl
ZnRyaWdodGFsbGlhbmNlLmNvbYIWbGVmdHJpZ2h0YW5kY2VudGVyLm5ldIIKbGVm
dHVwLm9yZ4ILbGVmdHdpbi5vcmeCEmxlZnR3aW5nd2F0Y2guYmxvZ4IRbGVmdHdp
dGhiYWxscy5jb22CEWxlZnR3aXRobG91aWUuY29tgg1sZWZ0d29vZHMuY29tghFs
ZWZ0eWhvb2xpZ2FuLmNvbYIMbGVmdHlsZXguY29tghBsZWZ0eXNtdWRnZXMuY29t
ghRsZWZ1dHVyZGVzdGFydHVwLmNvbYIQbGVmdXR1cmV3YXZlLmNvbYIYbGVmdXR1
cmlzdGVkYWlseW5ld3MuY29tghJ0bHMuYXV0b21hdHRpYy5jb22CEnd3dy5sZWZ0
aGlzdG9yeS5jYYITd3d3LmxlZnRpbmRpeGllLmNvbYISd3d3LmxlZnRpbm9oaW8u
Y29tghl3d3cubGVmdG9mc2VsZmNlbnRyZWQuY29tghp3d3cubGVmdG9mdGhlZGlh
bG11c2ljLmNvbYIUd3d3LmxlZnRvbndhbG51dC5jb22CFnd3dy5sZWZ0b3ZlcmNv
b2tpbmcubmyCGHd3dy5sZWZ0b3ZlcmxpcHN0aWNrLmNvbYIXd3d3LmxlZnRvdmVy
c3BsZWFzZS5jb22CGHd3dy5sZWZ0b3ZlcnVuaXZlcnNlLmNvbYIPd3d3LmxlZnRy
ZXYuY29tghl3d3cubGVmdHJpZ2h0YWxsaWFuY2UuY29tghp3d3cubGVmdHJpZ2h0
YW5kY2VudGVyLm5ldIIOd3d3LmxlZnR1cC5vcmeCD3d3dy5sZWZ0d2luLm9yZ4IW
d3d3LmxlZnR3aW5nd2F0Y2guYmxvZ4IVd3d3LmxlZnR3aXRoYmFsbHMuY29tghV3
d3cubGVmdHdpdGhsb3VpZS5jb22CEXd3dy5sZWZ0d29vZHMuY29tghV3d3cubGVm
dHlob29saWdhbi5jb22CEHd3dy5sZWZ0eWxleC5jb22CFHd3dy5sZWZ0eXNtdWRn
ZXMuY29tghh3d3cubGVmdXR1cmRlc3RhcnR1cC5jb22CFHd3dy5sZWZ1dHVyZXdh
dmUuY29tghx3d3cubGVmdXR1cmlzdGVkYWlseW5ld3MuY29tMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAb1N2
rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFvvoUdpQAABAMASDBGAiEA
05fVu6i7ty9GOXheYhwlXftXl1WqijDUX8YChM6mnk4CIQDofOpRkuvyETbsBC1R
lDCm8n/0ZPUJlQnJngRMINKR0AB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxh
Ohpp06IcAAABb76FHVMAAAQDAEcwRQIgSOQ/a5lGuijhnramxUoX4WGS3yMTO0RG
Vz7z00dOrloCIQC/2U9a/4fril/YwBBP/1r7WggV7jAD/PvVdaSDYTBz/DANBgkq
hkiG9w0BAQsFAAOCAQEAkq1HoLKXboJnVIWVzovKzomc5DlNtrBSgvkiU/txXZ5K
21/uHKYJJ/bl7cTO/dYKoRk+Q9MFWSv/G75vKqOj+Mj+T2D43sTLtAyOSBEioxpC
ydX8wYFrMhs4JGjBx6PPO4wIfhWpHYbIfv4NjuEQndWWE8RCGlGR3sm7equGnhAG
HNR/96nw3CYr5USbuUyzq/oh9XpZpV7eFLb8fgTVYCKPC9SMYgR6jSXBTI8OaAaq
MQQC/OFe04LIhZ+qAp9k9OWjr6CmMhBLMwRebcWB+H+g1ZrLEMWDoYPQ0Amtu3LA
h8WnjQcIjqkrOPag2XwqKYJYI31bd7ltPaCFLGp0xA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM/9T8vRScOssXU8NCgU
6b7dyWbwuE7rFp4807uO41tTxHqhV+k7TvCqYPU0pjedQrkGtumNqUPWkvaY+RI5
coB37g9QQjKvr7yluTWE9qNpL3imlDm41JYPJFjD7fNbeOOMlvqisaw+KQwEkSUU
R9OKhz6L0VL/NJRjOV76kTgF/a7depDhR+IWCOp6xETbEV86uVphtfCTk3hKriM7
7KS3DMfm3ZtgJWJJI7gVqUS3O+4CpmY3gX+r0Mt4k2WOYVMDJgfGedlGwF/W2/2g
mPMgQWfEYtDYAQ0c/xJuUQttPUPwto7dvifEVV4ZTR55sNYqM6Xb0jfzKhj1DNB9
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278945820956563125501832317501721934416295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-19 14:56:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-18 14:56:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23835364778090333613751143107485074546662007933175308092599970354379844461401437449362973490624071523149943758307797523976752465929423511849838306948657209924470440126222067007170847548198373412874402845665510061944990904387846734675320619498601960925522589119955624472455021018705053840523172940887546444573704476997806636364740591092286447045210324654497518319783890188216752393531346490036840035717146107755671368294075939743377004570044096846737418101950299618201871681000988753905896178679087914238091797533206896550904607984732660478506022303117242147925254908729957282860932802696985129126481570441455196995049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b0836d7dccb93d1f9da11de1706c7f0cceb8385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1072 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lefthistory.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftindixie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftinohio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftofselfcentred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftofthedialmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftonwalnut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftovercooking.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftoverlipstick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftoversplease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftoveruniverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftrev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftrightalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftrightandcenter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftwin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftwingwatch.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftwithballs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftwithlouie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftwoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftyhooligan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftylex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftysmudges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lefuturdestartup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lefuturewave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lefuturistedailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefthistory.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftindixie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftinohio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftofselfcentred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftofthedialmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftonwalnut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftovercooking.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftoverlipstick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftoversplease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftoveruniverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftrev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftrightalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftrightandcenter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftwin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftwingwatch.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftwithballs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftwithlouie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftwoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftyhooligan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftylex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftysmudges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefuturdestartup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefuturewave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefuturistedailynews.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fbe851da50000040300483046022100d397d5bba8bbb72f4639785e621c255dfb579755aa8a30d45fc60284cea69e4e022100e87cea5192ebf21136ec042d519430a6f27ff464f5099509c99e044c20d291d000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fbe851d530000040300473045022048e43f6b9946ba28e19eb6a6c54a17e16192df23133b4446573ef3d3474eae5a022100bfd94f5aff87eb8a5fd8c0104fff5afb5a0815ee3003fcfbd575a483613073fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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