tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:34:cb:c5:ae:f9:b3:d9:ab:37:40:17:06:d5:27:b2:3a:1e was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:34:cb:c5:ae:f9:b3:d9:ab:37:40:17:06:d5:27:b2:3a:1e
Serial Number (int): 366414686521478000433480579569261988690462
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9e:59:f9:fc:2c:47:6c:ee:4b:10:34:e7:1f:bd:4b:e9:13:11:07:75
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:57:53:52:44:e5:ee:ba:03:e8:91:41:40:81:24:58:00:d1:e5:f7
Fingerprint (sha256): 72:8e:f2:b1:b3:b8:76:84:22:4d:fc:89:99:68:c5:61:3e:de:9d:a2:dd:4b:d3:12:3c:c9:8d:38:7b:2f:c4:29

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sittinandwishin.com
sittingatthefootoftheblues.com
sittingbull.edu
sittingbytheriverside.com
sittingcomfortably.org
sittingducksports.com
sittinginspiltink.com
sittinginthewoods.com
sittingonthebaby.com
sittingontheswings.com
sittingonwheels.com
sittingprettyinthequeencity.com
sittingprettyredesign.com
sittingunderthefamilytree.com
sittrotselfies.com
sittsen.com
situacioncronica.com
situatededucation.com
situationalgoaltending.com
situationreport.org
situationspecialist.com
situazionecostruita.com
situmiradanomiente.com
situsavais-sts.com
situveuxjouer.com
tls.automattic.com
www.sittersaruba.com
www.sittinandwishin.com
www.sittingatthefootoftheblues.com
www.sittingbull.edu
www.sittingbytheriverside.com
www.sittingcomfortably.org
www.sittingducksports.com
www.sittinginspiltink.com
www.sittinginthewoods.com
www.sittingonthebaby.com
www.sittingontheswings.com
www.sittingonwheels.com
www.sittingprettyredesign.com
www.sittingunderthefamilytree.com
www.sittrotselfies.com
www.sittsen.com
www.situacioncronica.com
www.situatededucation.com
www.situationalgoaltending.com
www.situationreport.org
www.situationspecialist.com
www.situazionecostruita.com
www.situmiradanomiente.com
www.situsavais-sts.com
www.situveuxjouer.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKTjCCCTagAwIBAgISBDTLxa75s9mrN0AXBtUnsjoeMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMzAyMTI5NDZaFw0y
MDAyMjgyMTI5NDZaMB0xGzAZBgNVBAMTEnRscy5hdXRvbWF0dGljLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK+MHwzG8w31uYFjjnj1wfgFcSjH
OuW3QSU1WGaPQw3jxsROi6r1CqtVKvD/AJLRJBcF4bFrUAESsmKjtxXAlICfyJay
3fleF9DC0uPeu7m8c9msV3Aj29WjvbuS2IyBKr0Io4A5ewpE1iZ94xU2ttoZ32Lp
xBovWFFsqs64/W28JX7gr+2uEulI0fZgH7McmpaUmMZ6m+bqnk9QtT5/jxiVNmp4
yjmHZQs+taNfbV7w7IhuKU7pE2hUWExtgf8CjBw99zUAJ8HdU+OWTwteL1ypydXC
LY8zT1JF4urv+3tgoDNEo+t41h4kDm5Cly4izPVVQ1EQYA5fFVbNekZzRWMCAwEA
AaOCB1kwggdVMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUnln5/CxHbO5LEDTnH71L
6RMRB3UwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCBQ4GA1UdEQSCBQUwggUBghNzaXR0aW5hbmR3aXNoaW4uY29tgh5z
aXR0aW5nYXR0aGVmb290b2Z0aGVibHVlcy5jb22CD3NpdHRpbmdidWxsLmVkdYIZ
c2l0dGluZ2J5dGhlcml2ZXJzaWRlLmNvbYIWc2l0dGluZ2NvbWZvcnRhYmx5Lm9y
Z4IVc2l0dGluZ2R1Y2tzcG9ydHMuY29tghVzaXR0aW5naW5zcGlsdGluay5jb22C
FXNpdHRpbmdpbnRoZXdvb2RzLmNvbYIUc2l0dGluZ29udGhlYmFieS5jb22CFnNp
dHRpbmdvbnRoZXN3aW5ncy5jb22CE3NpdHRpbmdvbndoZWVscy5jb22CH3NpdHRp
bmdwcmV0dHlpbnRoZXF1ZWVuY2l0eS5jb22CGXNpdHRpbmdwcmV0dHlyZWRlc2ln
bi5jb22CHXNpdHRpbmd1bmRlcnRoZWZhbWlseXRyZWUuY29tghJzaXR0cm90c2Vs
Zmllcy5jb22CC3NpdHRzZW4uY29tghRzaXR1YWNpb25jcm9uaWNhLmNvbYIVc2l0
dWF0ZWRlZHVjYXRpb24uY29tghpzaXR1YXRpb25hbGdvYWx0ZW5kaW5nLmNvbYIT
c2l0dWF0aW9ucmVwb3J0Lm9yZ4IXc2l0dWF0aW9uc3BlY2lhbGlzdC5jb22CF3Np
dHVhemlvbmVjb3N0cnVpdGEuY29tghZzaXR1bWlyYWRhbm9taWVudGUuY29tghJz
aXR1c2F2YWlzLXN0cy5jb22CEXNpdHV2ZXV4am91ZXIuY29tghJ0bHMuYXV0b21h
dHRpYy5jb22CFHd3dy5zaXR0ZXJzYXJ1YmEuY29tghd3d3cuc2l0dGluYW5kd2lz
aGluLmNvbYIid3d3LnNpdHRpbmdhdHRoZWZvb3RvZnRoZWJsdWVzLmNvbYITd3d3
LnNpdHRpbmdidWxsLmVkdYIdd3d3LnNpdHRpbmdieXRoZXJpdmVyc2lkZS5jb22C
Gnd3dy5zaXR0aW5nY29tZm9ydGFibHkub3Jnghl3d3cuc2l0dGluZ2R1Y2tzcG9y
dHMuY29tghl3d3cuc2l0dGluZ2luc3BpbHRpbmsuY29tghl3d3cuc2l0dGluZ2lu
dGhld29vZHMuY29tghh3d3cuc2l0dGluZ29udGhlYmFieS5jb22CGnd3dy5zaXR0
aW5nb250aGVzd2luZ3MuY29tghd3d3cuc2l0dGluZ29ud2hlZWxzLmNvbYIdd3d3
LnNpdHRpbmdwcmV0dHlyZWRlc2lnbi5jb22CIXd3dy5zaXR0aW5ndW5kZXJ0aGVm
YW1pbHl0cmVlLmNvbYIWd3d3LnNpdHRyb3RzZWxmaWVzLmNvbYIPd3d3LnNpdHRz
ZW4uY29tghh3d3cuc2l0dWFjaW9uY3JvbmljYS5jb22CGXd3dy5zaXR1YXRlZGVk
dWNhdGlvbi5jb22CHnd3dy5zaXR1YXRpb25hbGdvYWx0ZW5kaW5nLmNvbYIXd3d3
LnNpdHVhdGlvbnJlcG9ydC5vcmeCG3d3dy5zaXR1YXRpb25zcGVjaWFsaXN0LmNv
bYIbd3d3LnNpdHVhemlvbmVjb3N0cnVpdGEuY29tghp3d3cuc2l0dW1pcmFkYW5v
bWllbnRlLmNvbYIWd3d3LnNpdHVzYXZhaXMtc3RzLmNvbYIVd3d3LnNpdHV2ZXV4
am91ZXIuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw
JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYB
BAHWeQIEAgSB9ASB8QDvAHUAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFx
RVgAAAFuvm8pRwAABAMARjBEAiBepRzn+9fsWXgoz459dKZbMnOdno/lxHCk6Vxk
pwWo/QIgeqxUWxx3KZ5i0+WaIVxw9LmXkpeErMaT7DhR9hwFzYwAdgCyHgXMi6LN
iiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW6+byk6AAAEAwBHMEUCIA2IHX/L
fMWBd+D4Eq8OsBGFQMqSuJ5XDviEKl4aSkNGAiEAmhcaYuz/o+egNDYsg+nMlrmp
rkZQiZpX96n5dE8k8d8wDQYJKoZIhvcNAQELBQADggEBAC7BCHvGp1Gd8GpgP4ke
a+y+wxe5ZZk4gr1M73lbSLCGkekiRJsmvllQw0oKakwISJcvF2n+1pmHY8VmAdRp
oTLc2Fh8d67d5lSxJOtJ2RP6HQgKCQScLujG+RMwl7wqBw7RFT+yvmnMMJSCs1fn
hjhkUFksGa/C3fMs/yGIxK7FngQEVKGtf+K3e41+88/B4vNWMqg/I7mIzVVk1Fj4
qc1+RA1fGgWAM3Ljjo63r4OAUxaBx6r9RKWL/iDS2oisU/19l3cHS12BM4ibV6F0
P18Ou0SLGfbFLsSCRdEbmqEJTiByqTKwRCyTpQo5Zs2iveVJmN9VCYvdW3XarORt
H3U=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4wfDMbzDfW5gWOOePXB
+AVxKMc65bdBJTVYZo9DDePGxE6LqvUKq1Uq8P8AktEkFwXhsWtQARKyYqO3FcCU
gJ/IlrLd+V4X0MLS4967ubxz2axXcCPb1aO9u5LYjIEqvQijgDl7CkTWJn3jFTa2
2hnfYunEGi9YUWyqzrj9bbwlfuCv7a4S6UjR9mAfsxyalpSYxnqb5uqeT1C1Pn+P
GJU2anjKOYdlCz61o19tXvDsiG4pTukTaFRYTG2B/wKMHD33NQAnwd1T45ZPC14v
XKnJ1cItjzNPUkXi6u/7e2CgM0Sj63jWHiQObkKXLiLM9VVDURBgDl8VVs16RnNF
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366414686521478000433480579569261988690462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-30 21:29:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 21:29:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22160799751782474429234809126474429158418713979221577846774972625368186199621076657295307146333166361212968085723290376445566431819138264358942666003292658940105204213360492518343088916697987005430481032086453842904708717784421318978056795992787236323371730351681283767649286471041508047053677393113561194591184020416937000717633336560851042430578532676379977913014140496656271083770935870060986153614284218223081400791331555104035707263095483306248809555345327533012087583166145940312748272966993994680537121305600399122227013370649674952428295144354800735091580519696894294699353067628356222603490667142910456317283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e59f9fc2c476cee4b1034e71fbd4be913110775
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1285 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittinandwishin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingatthefootoftheblues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingbull.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingbytheriverside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingcomfortably.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingducksports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittinginspiltink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittinginthewoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingonthebaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingontheswings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingonwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingprettyinthequeencity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingprettyredesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingunderthefamilytree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittrotselfies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situacioncronica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situatededucation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situationalgoaltending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situationreport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situationspecialist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situazionecostruita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situmiradanomiente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situsavais-sts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situveuxjouer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittersaruba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittinandwishin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingatthefootoftheblues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingbull.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingbytheriverside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingcomfortably.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingducksports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittinginspiltink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittinginthewoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingonthebaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingontheswings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingonwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingprettyredesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingunderthefamilytree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittrotselfies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.situacioncronica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.situatededucation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.situationalgoaltending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.situationreport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.situationspecialist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.situazionecostruita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.situmiradanomiente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.situsavais-sts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.situveuxjouer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ebe6f2947000004030046304402205ea51ce7fbd7ec597828cf8e7d74a65b32739d9e8fe5c470a4e95c64a705a8fd02207aac545b1c77299e62d3e59a215c70f4b997929784acc693ec3851f61c05cd8c007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ebe6f293a000004030047304502200d881d7fcb7cc58177e0f812af0eb0118540ca92b89e570ef8842a5e1a4a43460221009a171a62ecffa3e7a034362c83e9cc96b9a9ae4650899a57f7a9f9744f24f1df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002ec1087bc6a7519df06a603f891e6becbec317b965993882bd4cef795b48b08691e922449b26be5950c34a0a6a4c0848972f1769fed6998763c56601d469a132dcd8587c77aedde654b124eb49d913fa1d080a09049c2ee8c6f9133097bc2a070ed1153fb2be69cc309482b357e786386450592c19afc2ddf32cff2188c4aec59e040454a1ad7fe2b77b8d7ef3cfc1e2f35632a83f23b988cd5564d458f8a9cd7e440d5f1a05803372e38e8eb7af8380531681c7aafd44a58bfe20d2da88ac53fd7d9777074b5d8133889b57a1743f5f0ebb448b19f6c52ec48245d11b9aa1094e2072a932b0442c93a50a3966cda2bde54998df55098bdd5b75daace46d1f75