tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:10:da:d2:d4:2c:df:aa:c7:64:99:74:80:7b:73:3a:46:dd was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:10:da:d2:d4:2c:df:aa:c7:64:99:74:80:7b:73:3a:46:dd
Serial Number (int): 267072242054863256070348630840778218424029
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c1:2d:86:f5:d3:10:43:c1:20:d5:06:3e:fc:67:b9:ea:d9:a8:77:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f8:42:9f:b1:62:25:f4:b7:d1:71:09:ab:05:af:d9:09:bb:3c:18:d8
Fingerprint (sha256): 74:9e:4d:52:90:75:53:d6:a7:b6:7e:45:45:a9:8c:cb:0a:20:26:ca:9b:c6:bb:9f:79:4c:04:f6:a5:79:6c:f6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.epicureanusa.com
epicsevs.com
epicsfilm.com
epicshotcandids.com
epictheology.com
epictrain.me
epictros.com
epicurean-kitten.com
epicureanescapades.com
epicureanodysseys.com
epicureantease.com
epicureanwellness.com
epicureinlight.com
epicureinparidise.com
epicurenextdoor.com
epicurenutrition.org
epicurien.me
epicurioscity.com
epicuriosos.com
epicurioucity.com
epicuriousmaximus.com
epicurioustexan.com
epicurioustravelers.com
epicurischfotografie.nl
epicuriusescapades.com
tls.automattic.com
www.epicsalonsweethome.com
www.epicsevs.com
www.epicsfilm.com
www.epicshotcandids.com
www.epictheology.com
www.epictrain.me
www.epictros.com
www.epicurean-kitten.com
www.epicureanescapades.com
www.epicureanodysseys.com
www.epicureantease.com
www.epicureanwellness.com
www.epicureinlight.com
www.epicureinparidise.com
www.epicurenextdoor.com
www.epicurenutrition.org
www.epicurien.me
www.epicurioscity.com
www.epicuriosos.com
www.epicurioucity.com
www.epicuriousmaximus.com
www.epicurioustexan.com
www.epicurioustravelers.com
www.epicurischfotografie.nl
www.epicuriusescapades.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKaTCCCVGgAwIBAgISAxDa0tQs36rHZJl0gHtzOkbdMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MDMwMzE4MzBaFw0x
ODEwMDEwMzE4MzBaMB0xGzAZBgNVBAMTEnRscy5hdXRvbWF0dGljLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN9F2AV+vna1fhfNo8VldUFswpBq
DrnebiJOpxPJLxgvBKC9fTMEhVKaYaa8fQeycSncHhZI2McduFLOzKZ8CWANd9QI
P63xbpfGWkoRjhQgwagQPJ2nFMKM6Vp2RxPaj1GWu2etj2G9JsqMCbN3oio5ANdR
zo/O2tGkkkjREzoDIGAbtcZEBNlIJmoxrFwYS41vg+7Zje/9PWjxMDfqHCFkC2To
gIJEr4EoKI5CXHFHA9IUx63yZhsEfzw/c2H6XL0qx2s9fMGjNkJJzVyw2auctHnK
rbVmy1cCYNjRsdN+9K164BX4elP0DayJjx/MGSvSBpdTS6ftNUgBb96p2qMCAwEA
AaOCB3QwggdwMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUwS2G9dMQQ8Eg1QY+/Ge5
6tmodwYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCBHYGA1UdEQSCBG0wggRpghVibG9nLmVwaWN1cmVhbnVzYS5jb22C
DGVwaWNzZXZzLmNvbYINZXBpY3NmaWxtLmNvbYITZXBpY3Nob3RjYW5kaWRzLmNv
bYIQZXBpY3RoZW9sb2d5LmNvbYIMZXBpY3RyYWluLm1lggxlcGljdHJvcy5jb22C
FGVwaWN1cmVhbi1raXR0ZW4uY29tghZlcGljdXJlYW5lc2NhcGFkZXMuY29tghVl
cGljdXJlYW5vZHlzc2V5cy5jb22CEmVwaWN1cmVhbnRlYXNlLmNvbYIVZXBpY3Vy
ZWFud2VsbG5lc3MuY29tghJlcGljdXJlaW5saWdodC5jb22CFWVwaWN1cmVpbnBh
cmlkaXNlLmNvbYITZXBpY3VyZW5leHRkb29yLmNvbYIUZXBpY3VyZW51dHJpdGlv
bi5vcmeCDGVwaWN1cmllbi5tZYIRZXBpY3VyaW9zY2l0eS5jb22CD2VwaWN1cmlv
c29zLmNvbYIRZXBpY3VyaW91Y2l0eS5jb22CFWVwaWN1cmlvdXNtYXhpbXVzLmNv
bYITZXBpY3VyaW91c3RleGFuLmNvbYIXZXBpY3VyaW91c3RyYXZlbGVycy5jb22C
F2VwaWN1cmlzY2hmb3RvZ3JhZmllLm5sghZlcGljdXJpdXNlc2NhcGFkZXMuY29t
ghJ0bHMuYXV0b21hdHRpYy5jb22CGnd3dy5lcGljc2Fsb25zd2VldGhvbWUuY29t
ghB3d3cuZXBpY3NldnMuY29tghF3d3cuZXBpY3NmaWxtLmNvbYIXd3d3LmVwaWNz
aG90Y2FuZGlkcy5jb22CFHd3dy5lcGljdGhlb2xvZ3kuY29tghB3d3cuZXBpY3Ry
YWluLm1lghB3d3cuZXBpY3Ryb3MuY29tghh3d3cuZXBpY3VyZWFuLWtpdHRlbi5j
b22CGnd3dy5lcGljdXJlYW5lc2NhcGFkZXMuY29tghl3d3cuZXBpY3VyZWFub2R5
c3NleXMuY29tghZ3d3cuZXBpY3VyZWFudGVhc2UuY29tghl3d3cuZXBpY3VyZWFu
d2VsbG5lc3MuY29tghZ3d3cuZXBpY3VyZWlubGlnaHQuY29tghl3d3cuZXBpY3Vy
ZWlucGFyaWRpc2UuY29tghd3d3cuZXBpY3VyZW5leHRkb29yLmNvbYIYd3d3LmVw
aWN1cmVudXRyaXRpb24ub3JnghB3d3cuZXBpY3VyaWVuLm1lghV3d3cuZXBpY3Vy
aW9zY2l0eS5jb22CE3d3dy5lcGljdXJpb3Nvcy5jb22CFXd3dy5lcGljdXJpb3Vj
aXR5LmNvbYIZd3d3LmVwaWN1cmlvdXNtYXhpbXVzLmNvbYIXd3d3LmVwaWN1cmlv
dXN0ZXhhbi5jb22CG3d3dy5lcGljdXJpb3VzdHJhdmVsZXJzLmNvbYIbd3d3LmVw
aWN1cmlzY2hmb3RvZ3JhZmllLm5sghp3d3cuZXBpY3VyaXVzZXNjYXBhZGVzLmNv
bTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcC
AjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24g
YnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0
aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5
cHQub3JnL3JlcG9zaXRvcnkvMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA23Sv
7ssp7LH+yj5xbSzluaq7NveEcYPHXZ1PN7Yfv2QAAAFkXlz+JQAABAMARjBEAiBg
IGQkbNxThWgukZu4zD94iLDuegWyXZcyqT8TOTG+TgIgA0Wa45mnG8TZ+RZ03WtR
zLnWZGbA8uRR+gN/xL7NheEAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTl
RUf0eAAAAWReXP45AAAEAwBHMEUCIHo25AmPyaiCCMpm/sPO4ZKrPY9/HFYCOJaE
T0f2ERwFAiEA7gUwuvK7yy3fX6BfcMHb6JTj1OG3ekJtmUyOogOzrQgwDQYJKoZI
hvcNAQELBQADggEBAB9KeVZqDaxxxxFbHUTKeKON0WkueJYyoIWgy7kGHe6K9kV2
ctAaIdUujOlAhhu9hKKguZKvUFzcA+8QJtHiP4ChAiz+itGUb6y3oYtSl9dROorH
RFhaNs/fiP5Eqmy7s4u1H+8g/eQREbh/U0CTGZta4XtjrV2K0PmQqOwNa+OHCCkA
HcSzGaPCoZ0v4zkGbIgpVvv+LvU7u+wUKC61cetD51dmCpehbFkm2d3B6pdo0xY7
10lwfuTCqrlX78OsS57/LZuBGevPnLryg2wWWrZnx54oa7Nrh5uYer8ufwcqAqey
Ar4q+B441hZ83O+rAQyGQVx0MAp8a05sONrqsb4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30XYBX6+drV+F82jxWV1
QWzCkGoOud5uIk6nE8kvGC8EoL19MwSFUpphprx9B7JxKdweFkjYxx24Us7MpnwJ
YA131Ag/rfFul8ZaShGOFCDBqBA8nacUwozpWnZHE9qPUZa7Z62PYb0myowJs3ei
KjkA11HOj87a0aSSSNETOgMgYBu1xkQE2UgmajGsXBhLjW+D7tmN7/09aPEwN+oc
IWQLZOiAgkSvgSgojkJccUcD0hTHrfJmGwR/PD9zYfpcvSrHaz18waM2QknNXLDZ
q5y0ecqttWbLVwJg2NGx0370rXrgFfh6U/QNrImPH8wZK9IGl1NLp+01SAFv3qna
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267072242054863256070348630840778218424029
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-03 03:18:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-01 03:18:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28185583285545770751235231529136657277179249102760369537547933451515394525540969836846375309507890605934035522490824244180250879832951910396911280923222493768604435233154487132400286823840273069139756983739733280353447013107180048181160498397732755668242599363908998611190466759680757014864900265818406814160584132071750363033308779723511803977475844334808464981008793422351429507247670048530675461303462150833207607923302401289719839681132304746117463361033230966248502516459677698287101170112672736586682197766039280697294395258826386811445193318080326136633781225725628163684544574448908549981742185198978842876579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c12d86f5d31043c120d5063efc67b9ead9a87706
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.epicureanusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicsevs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicsfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicshotcandids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epictheology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epictrain.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epictros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicurean-kitten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicureanescapades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicureanodysseys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicureantease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicureanwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicureinlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicureinparidise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicurenextdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicurenutrition.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicurien.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicurioscity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicuriosos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicurioucity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicuriousmaximus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicurioustexan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicurioustravelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicurischfotografie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicuriusescapades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicsalonsweethome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicsevs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicsfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicshotcandids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epictheology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epictrain.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epictros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicurean-kitten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicureanescapades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicureanodysseys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicureantease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicureanwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicureinlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicureinparidise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicurenextdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicurenutrition.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicurien.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicurioscity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicuriosos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicurioucity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicuriousmaximus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicurioustexan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicurioustravelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicurischfotografie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicuriusescapades.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001645e5cfe2500000403004630440220602064246cdc5385682e919bb8cc3f7888b0ee7a05b25d9732a93f133931be4e022003459ae399a71bc4d9f91674dd6b51ccb9d66466c0f2e451fa037fc4becd85e1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001645e5cfe39000004030047304502207a36e4098fc9a88208ca66fec3cee192ab3d8f7f1c56023896844f47f6111c05022100ee0530baf2bbcb2ddf5fa05f70c1dbe894e3d4e1b77a426d994c8ea203b3ad08
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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