tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5d:8f:25:2c:67:bb:1c:3a:05:bd:68:0a:6a:1f:2a:d9:22 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5d:8f:25:2c:67:bb:1c:3a:05:bd:68:0a:6a:1f:2a:d9:22
Serial Number (int): 293173390537953456920818441096948831934754
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:4f:69:4a:e6:f4:90:69:2d:1d:b6:ea:38:5a:16:0a:d1:ca:7b:d1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1c:ff:f9:31:ff:1a:fd:03:4d:cf:35:4d:4a:96:6d:47:a8:09:23:da
Fingerprint (sha256): 79:fe:a5:23:e7:39:fe:9f:bf:c9:97:dd:7c:9f:50:6a:d1:c9:cb:1e:5d:95:03:a2:4a:2d:11:92:bf:6d:8a:62

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

architecture.uic.es
coursedesign.uidaho.edu
dualcredit.uidaho.edu
obalemba-lab.uidaho.edu
tls.automattic.com
treasureboxgifts.org
trishlcone.com
uhsswordandshield.com
uhurd.me
uianthropocene.org
uibk-hbi-hypoxia-research.org
uicatoronto.com
uidahoalphagammarho.com
uidesignexplained.com
uidswansea.com
uiiiiii.com
uilfplperugiaumbria.net
uinmind.net
uinnova.cl
uinnova.org
uintahhistory.org
uiseag.com
uisilogistics.org
uisrentals.com
uistkunstist.com
uisud.ee
webauthoring.uidaho.edu
www.coursedesign.uidaho.edu
www.dualcredit.uidaho.edu
www.obalemba-lab.uidaho.edu
www.treasureboxgifts.org
www.trishlcone.com
www.uhsswordandshield.com
www.uhurd.me
www.uianthropocene.org
www.uibk-hbi-hypoxia-research.org
www.uicatoronto.com
www.uidahoalphagammarho.com
www.uidesignexplained.com
www.uidswansea.com
www.uiiiiii.com
www.uilfplperugiaumbria.net
www.uinmind.net
www.uinnova.cl
www.uinnova.org
www.uintahhistory.org
www.uiseag.com
www.uisilogistics.org
www.uisrentals.com
www.uistkunstist.com
www.uisud.ee

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKIDCCCQigAwIBAgISA12PJSxnuxw6Bb1oCmofKtkiMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MjYxMzU2MThaFw0x
ODEwMjQxMzU2MThaMB0xGzAZBgNVBAMTEnRscy5hdXRvbWF0dGljLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMh+LWaQ2L9ClPdEnE/DG17ZxXEC
FZc1ovXwvyfNPMOrXOKLv7BnSrHiWX82NiJzqKP2ar1/bcugzBHE5KjmqIMWWWKu
px+jYziETcUZny8ieBtV7WsMtrxlRsXnQnKTUan4+mZOQrK2H2L48rLoGaWBix/G
NbNbtgb5Wk61TZP54NP0At7hbyabtzhF/E6eb5BvDfO8g0q7vuIHzjUfbZIW5ZRd
PYqHQDrZNw6J4b8fq8oi5shjqkJEWCZ4FFPfVBiYPtJt1Z96wpYzVby5CyPxW3DS
DmQA7HJOAnxkjbR41uIdm3xPq2Hir/BtzmY+dhzrBDxPPAg1hF3Nc+Mgad8CAwEA
AaOCByswggcnMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUz09pSub0kGktHbbqOFoW
CtHKe9EwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCBCsGA1UdEQSCBCIwggQeghNhcmNoaXRlY3R1cmUudWljLmVzghdj
b3Vyc2VkZXNpZ24udWlkYWhvLmVkdYIVZHVhbGNyZWRpdC51aWRhaG8uZWR1ghdv
YmFsZW1iYS1sYWIudWlkYWhvLmVkdYISdGxzLmF1dG9tYXR0aWMuY29tghR0cmVh
c3VyZWJveGdpZnRzLm9yZ4IOdHJpc2hsY29uZS5jb22CFXVoc3N3b3JkYW5kc2hp
ZWxkLmNvbYIIdWh1cmQubWWCEnVpYW50aHJvcG9jZW5lLm9yZ4IddWliay1oYmkt
aHlwb3hpYS1yZXNlYXJjaC5vcmeCD3VpY2F0b3JvbnRvLmNvbYIXdWlkYWhvYWxw
aGFnYW1tYXJoby5jb22CFXVpZGVzaWduZXhwbGFpbmVkLmNvbYIOdWlkc3dhbnNl
YS5jb22CC3VpaWlpaWkuY29tghd1aWxmcGxwZXJ1Z2lhdW1icmlhLm5ldIILdWlu
bWluZC5uZXSCCnVpbm5vdmEuY2yCC3Vpbm5vdmEub3JnghF1aW50YWhoaXN0b3J5
Lm9yZ4IKdWlzZWFnLmNvbYIRdWlzaWxvZ2lzdGljcy5vcmeCDnVpc3JlbnRhbHMu
Y29tghB1aXN0a3Vuc3Rpc3QuY29tggh1aXN1ZC5lZYIXd2ViYXV0aG9yaW5nLnVp
ZGFoby5lZHWCG3d3dy5jb3Vyc2VkZXNpZ24udWlkYWhvLmVkdYIZd3d3LmR1YWxj
cmVkaXQudWlkYWhvLmVkdYIbd3d3Lm9iYWxlbWJhLWxhYi51aWRhaG8uZWR1ghh3
d3cudHJlYXN1cmVib3hnaWZ0cy5vcmeCEnd3dy50cmlzaGxjb25lLmNvbYIZd3d3
LnVoc3N3b3JkYW5kc2hpZWxkLmNvbYIMd3d3LnVodXJkLm1lghZ3d3cudWlhbnRo
cm9wb2NlbmUub3JngiF3d3cudWliay1oYmktaHlwb3hpYS1yZXNlYXJjaC5vcmeC
E3d3dy51aWNhdG9yb250by5jb22CG3d3dy51aWRhaG9hbHBoYWdhbW1hcmhvLmNv
bYIZd3d3LnVpZGVzaWduZXhwbGFpbmVkLmNvbYISd3d3LnVpZHN3YW5zZWEuY29t
gg93d3cudWlpaWlpaS5jb22CG3d3dy51aWxmcGxwZXJ1Z2lhdW1icmlhLm5ldIIP
d3d3LnVpbm1pbmQubmV0gg53d3cudWlubm92YS5jbIIPd3d3LnVpbm5vdmEub3Jn
ghV3d3cudWludGFoaGlzdG9yeS5vcmeCDnd3dy51aXNlYWcuY29tghV3d3cudWlz
aWxvZ2lzdGljcy5vcmeCEnd3dy51aXNyZW50YWxzLmNvbYIUd3d3LnVpc3RrdW5z
dGlzdC5jb22CDHd3dy51aXN1ZC5lZTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB
5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2Vu
Y3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5
IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5
IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5k
IGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMIIBBQYKKwYB
BAHWeQIEAgSB9gSB8wDxAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo3
2RMAAAFk1xcvrAAABAMARzBFAiAMhvyvuDIK8ndaE4r4ton7a5AynOLILQPDWu0h
laTF0AIhAJXurGW5YW4KNb1RgDtUd0xGcg1r1AIY9KqGhe4U/AULAHcAKTxRllTI
OWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFk1xcwiwAABAMASDBGAiEAyTAs
bGIkbXbvM4jbj9cf8g03DkrCFNFouGQnZiWdsNwCIQDk7jfgUv0y0WtVx9Wn+kO3
3P5RIgsbpNC1R/iTPqGKMTANBgkqhkiG9w0BAQsFAAOCAQEAl7bGgwiuuYk8h5ez
zIaxnRSU2D0VL1zlYk8a4ETAGOgYsf7RUARmVCcu2SY4etpRQGc2Lp01EohB4GFt
+NPPjbOPYPB2gm0NxvWL02MuInIUoehAn9Ub0Pt5sQbiF31rcWeGYeyrC51/jmBJ
7zP6NaiHz1U4cePCqKssDnRQHNxx8nSkJGAMY+uJlbdcOYFOdZ02QKmMOFuKuOBi
O3T0IFb9dl0/Go8uMZDyC6RdemGS1qsEv7XlJINMBONCJAh/oApFKHb6F59ks32X
Dgo2HCrdoEa/UE/TkdHmJz4pc1JqabJn5u8YIrtspRf484FTFkfZ0+viqpIyHotF
Znqjdg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH4tZpDYv0KU90ScT8Mb
XtnFcQIVlzWi9fC/J808w6tc4ou/sGdKseJZfzY2InOoo/ZqvX9ty6DMEcTkqOao
gxZZYq6nH6NjOIRNxRmfLyJ4G1Xtawy2vGVGxedCcpNRqfj6Zk5CsrYfYvjysugZ
pYGLH8Y1s1u2BvlaTrVNk/ng0/QC3uFvJpu3OEX8Tp5vkG8N87yDSru+4gfONR9t
khbllF09iodAOtk3Donhvx+ryiLmyGOqQkRYJngUU99UGJg+0m3Vn3rCljNVvLkL
I/FbcNIOZADsck4CfGSNtHjW4h2bfE+rYeKv8G3OZj52HOsEPE88CDWEXc1z4yBp
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293173390537953456920818441096948831934754
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-26 13:56:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-24 13:56:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25309881361647290740464567738655589336777989587230877649076312108580939205499542747918843438229562521248247298051831674594237832984150054490356203101190161162991137865975574109851956678833322238000403622147340247978156076776696593342626733626703227769773039024079739927314120393577686139447067314651484168263225546103298583891292537846176258918304551994525525390568766824964426111055312910820335107287891023445212926289629680453939643155329037075327839788552140435846796504095131350049254021327190230797073041312434356937193914804887024001347347688166231478686290907942173870803415109739230134395338868706471539927519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf4f694ae6f490692d1db6ea385a160ad1ca7bd1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1058 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architecture.uic.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coursedesign.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dualcredit.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obalemba-lab.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treasureboxgifts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trishlcone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhsswordandshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhurd.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uianthropocene.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uibk-hbi-hypoxia-research.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uicatoronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uidahoalphagammarho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uidesignexplained.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uidswansea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uiiiiii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uilfplperugiaumbria.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uinmind.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uinnova.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uinnova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uintahhistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uiseag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uisilogistics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uisrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uistkunstist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uisud.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webauthoring.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coursedesign.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dualcredit.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obalemba-lab.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.treasureboxgifts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trishlcone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhsswordandshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhurd.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uianthropocene.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uibk-hbi-hypoxia-research.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uicatoronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uidahoalphagammarho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uidesignexplained.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uidswansea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uiiiiii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uilfplperugiaumbria.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uinmind.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uinnova.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uinnova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uintahhistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uiseag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uisilogistics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uisrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uistkunstist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uisud.ee'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000164d7172fac000004030047304502200c86fcafb8320af2775a138af8b689fb6b90329ce2c82d03c35aed2195a4c5d002210095eeac65b9616e0a35bd51803b54774c46720d6bd40218f4aa8685ee14fc050b007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164d717308b0000040300483046022100c9302c6c62246d76ef3388db8fd71ff20d370e4ac214d168b8642766259db0dc022100e4ee37e052fd32d16b55c7d5a7fa43b7dcfe51220b1ba4d0b547f8933ea18a31
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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