tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1b:7c:c6:f5:ac:00:6c:37:d4:4a:d4:0a:9a:d6:50:25:9d was issued on by Let's Encrypt.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1b:7c:c6:f5:ac:00:6c:37:d4:4a:d4:0a:9a:d6:50:25:9d
Serial Number (int): 270690339031219125592240830582891587052957
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 79:08:f6:c0:38:55:99:aa:76:fe:0d:3a:3f:23:3c:d1:97:31:8f:00
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7f:f3:64:3b:f4:25:e0:a1:13:31:b9:56:87:ba:35:fb:20:f4:c4:f6
Fingerprint (sha256): 87:f8:68:a4:a2:b7:f2:e8:91:f7:74:49:10:1b:ba:f1:68:2b:ec:87:9f:1e:9a:7d:28:b1:ab:c7:db:a5:e3:1c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate tls.automattic.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tls.automattic.com
www.ruminationsuntold.com
www.ruminationville.com
www.ruminering.com
www.rumirosetarot.com
www.rumis.org
www.rumiscircle.com
www.rumjam.com
www.rummagecarlow.com
www.rummelcob.org
www.rummersclub.com
www.rummon.com
www.rumoacannes2027.com
www.rumoacomrades.com
www.rumoastrilhas.com
www.rumocerto180.com
www.rumochuthyrning.se
www.rumoredphoto.com
www.rumorosabluesband.com
www.rumorshairstudio1.com
www.rumoursofglory.com
www.rumpelteazermunggojerrie.org
www.rumpi.net
www.rumpledluggagetag.com
www.rumpleminzegreentea.com
www.rumptrumpet.com
www.rumpublogi.com
www.rumpunch.me
www.rumpunchblog.com
www.rumpusbrain.com
www.rumpusonflr.com
www.rumpusparable.com
www.rumpusparableart.com
www.rumpydog.com
www.rumrazor.com
www.rumrmarketing.nl
www.rumrockandgrogs.com
www.rumrunnerkitty.com
www.rumsennews.org
www.rumsonfairhavenhome.com
www.rumvictoria.com
www.rumytaulu.com
www.run-becca-run.com
www.run-for-life.org
www.run-in-progress.com
www.run-mary-run.com
www.run-mommy-run.com
www.run-right.ca
www.run-sew-read.com
www.run-that.com
www.run-the-streets.com
www.run-the-world.me
www.run-with-the-flow.com
www.run14in2014.com
www.run2016in2016.com
www.run2buildschools.com
www.run2expand.com
www.run2golden.com
www.run4fit.com
www.run4icecream.com
www.run4nk.org
www.run4oregon.com
www.run4rice.org
www.run4vision.com
www.run4will.com
www.run69.org
www.run71.net
www.run7days.nl
www.runabouttheworld.com
www.runafterit.com
www.runahofficial.com
www.runambler.com
www.runamukfarm.com
www.runandbestill.com
www.runandgunoutdoors.com
www.runandgunvideography.com
www.runandimages.com
www.runandom.com
www.runandplaymd.com
www.runandski.com
www.runandsparkleco.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1Eg0cX2MbhU+DVdHgcp
0KwjWbVQbQ+gSZ78eqoVhbTxI3Fl03kxciMa6LhWCUYTdSOkZuhDYO6ixGY+IyS7
+jSvUp2s/ug5J7tI/ptiF8udZ03Vr5gNDvU/PkGREhGwfhW71qE0YZ3E/g9erYcb
Y82vgWyqiNFWPOQIAva4+xCaHMHBAKnRmA7AOA7YMznfhmqU+5Uexq9qzktl+CWj
ULhle1Q5eComsbZqDFWFagzciltXAbwhYL641ukbqJMNaUVxl69QdBF7U0JWJ7Ug
op6LUoEqkzwEJ13k4+Hn07nvS4WkKmO8dEzQK3oUubWxwRospGx81V3zA16j/Y+k
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270690339031219125592240830582891587052957
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-04 10:31:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-03 10:31:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25161428495139567392876514671727252994560004298016366921120102869471989300547414859593282257029503387238305425177866651709735781616047435997984234084352183243697249746781368694032287843215485096483640289299521322641783358418397167234134696355149019802899903280624685141047120039932172122916932281389399198467385962755492248932746281645492728956871806098321986758200758452483051274905221980948627608420469011426916238909124378516564276471953762802157162641705203844981919299304812483052965602723414776043505652158758512053028511148336728547236288751454637586547734921172968337716236240468230731674342376727928474936567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7908f6c0385599aa76fe0d3a3f233cd197318f00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1769 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruminationsuntold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruminationville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruminering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumirosetarot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumiscircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumjam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rummagecarlow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rummelcob.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rummersclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rummon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumoacannes2027.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumoacomrades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumoastrilhas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumocerto180.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumochuthyrning.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumoredphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumorosabluesband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumorshairstudio1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumoursofglory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumpelteazermunggojerrie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumpi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumpledluggagetag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumpleminzegreentea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumptrumpet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumpublogi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumpunch.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumpunchblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumpusbrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumpusonflr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumpusparable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumpusparableart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumpydog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumrazor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumrmarketing.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumrockandgrogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumrunnerkitty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumsennews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumsonfairhavenhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumvictoria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumytaulu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-becca-run.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-for-life.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-in-progress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-mary-run.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-mommy-run.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-right.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-sew-read.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-that.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-the-streets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-the-world.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-with-the-flow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run14in2014.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run2016in2016.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run2buildschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run2expand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run2golden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run4fit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run4icecream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run4nk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run4oregon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run4rice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run4vision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run4will.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run69.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run71.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run7days.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runabouttheworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runafterit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runahofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runambler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runamukfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runandbestill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runandgunoutdoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runandgunvideography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runandimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runandom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runandplaymd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runandski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runandsparkleco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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