tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0d:3f:72:b7:ed:66:28:01:f4:54:6d:8a:45:91:03:7e:eb was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0d:3f:72:b7:ed:66:28:01:f4:54:6d:8a:45:91:03:7e:eb
Serial Number (int): 265844865581318910456638513807341796949739
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 22:b1:61:37:8f:59:89:f3:0d:1a:54:2a:3a:8c:5e:2d:a8:ec:84:37
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 91:94:26:91:3c:ce:39:1d:c3:40:df:7e:9c:4c:97:0b:35:9e:b2:05
Fingerprint (sha256): 8e:65:b7:14:10:cf:38:e9:1e:c3:cc:86:ae:f9:bc:4d:60:e8:32:f3:6e:8a:9d:2b:80:42:46:4e:e2:13:85:5d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

athenafitness.org
athenaintegralidade.com
athenamj.com
athenamkaiman.com
athenasdreamhouse.com
athenasobhan.com
athenasverige.se
athenats.com
athenessadesignsllc.com
atheniensis.com
athensartbookfair.gr
athensprime.com
atheoryforyoutodisregard.com
atheoryof.us
atherapistsdiary.com
athiefcalledgrief.com
athinaisnega.com
athinkingkid.com
athirsty.fish
athlerec.org
athleteglobal.blog
athletephysics.com
athletesecond.blog
athletic-choice.com
thepillar.athenian.org
tls.automattic.com
www.athenafit.org
www.athenafitness.org
www.athenaintegralidade.com
www.athenamj.com
www.athenamkaiman.com
www.athenasdreamhouse.com
www.athenasobhan.com
www.athenasverige.se
www.athenats.com
www.athenessadesignsllc.com
www.atheniensis.com
www.athensartbookfair.gr
www.athensprime.com
www.atheoryforyoutodisregard.com
www.atheoryof.us
www.atherapistsdiary.com
www.athiefcalledgrief.com
www.athinaisnega.com
www.athinkingkid.com
www.athirsty.fish
www.athlerec.org
www.athleteglobal.blog
www.athletephysics.com
www.athletesecond.blog
www.athletic-choice.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJkTCCCHmgAwIBAgISAw0/crftZigB9FRtikWRA37rMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDMxNzM5MTlaFw0y
MDA2MDExNzM5MTlaMB0xGzAZBgNVBAMTEnRscy5hdXRvbWF0dGljLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALQJcyN8JXyefjmji2FUaS7q3tZQ
V6wtaH0/NoyiSgSP+lMOtujFVSAV82MKSOwbDCE06cxHtNBN81VrSgdroP1YHOhk
0mLlJuEb0mg7QQ3prGKAf3oZKOsH3ijPRfW68raM+qTTI561KgTI2SDwE2CWQF1N
b3dH5lXmQ7s06f4k5pTk85rAZsJ9bmFhdR8mjPVjJj/AocbJEZ2beC0LwkfFImLz
0lfaj+cQmmXX7r+nJggaGeVF/g/SVBYv2bXYE2mlfySTfT7NE+hgRpV+fT4SjGgo
HzHyV66a2mq3k9JKLkZayx9FFcVzGhlAzpqN89+rTuZm6GghrZuHOb4QUMECAwEA
AaOCBpwwggaYMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUIrFhN49ZifMNGlQqOoxe
LajshDcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCBFAGA1UdEQSCBEcwggRDghFhdGhlbmFmaXRuZXNzLm9yZ4IXYXRo
ZW5haW50ZWdyYWxpZGFkZS5jb22CDGF0aGVuYW1qLmNvbYIRYXRoZW5hbWthaW1h
bi5jb22CFWF0aGVuYXNkcmVhbWhvdXNlLmNvbYIQYXRoZW5hc29iaGFuLmNvbYIQ
YXRoZW5hc3ZlcmlnZS5zZYIMYXRoZW5hdHMuY29tghdhdGhlbmVzc2FkZXNpZ25z
bGxjLmNvbYIPYXRoZW5pZW5zaXMuY29tghRhdGhlbnNhcnRib29rZmFpci5ncoIP
YXRoZW5zcHJpbWUuY29tghxhdGhlb3J5Zm9yeW91dG9kaXNyZWdhcmQuY29tggxh
dGhlb3J5b2YudXOCFGF0aGVyYXBpc3RzZGlhcnkuY29tghVhdGhpZWZjYWxsZWRn
cmllZi5jb22CEGF0aGluYWlzbmVnYS5jb22CEGF0aGlua2luZ2tpZC5jb22CDWF0
aGlyc3R5LmZpc2iCDGF0aGxlcmVjLm9yZ4ISYXRobGV0ZWdsb2JhbC5ibG9nghJh
dGhsZXRlcGh5c2ljcy5jb22CEmF0aGxldGVzZWNvbmQuYmxvZ4ITYXRobGV0aWMt
Y2hvaWNlLmNvbYIWdGhlcGlsbGFyLmF0aGVuaWFuLm9yZ4ISdGxzLmF1dG9tYXR0
aWMuY29tghF3d3cuYXRoZW5hZml0Lm9yZ4IVd3d3LmF0aGVuYWZpdG5lc3Mub3Jn
ght3d3cuYXRoZW5haW50ZWdyYWxpZGFkZS5jb22CEHd3dy5hdGhlbmFtai5jb22C
FXd3dy5hdGhlbmFta2FpbWFuLmNvbYIZd3d3LmF0aGVuYXNkcmVhbWhvdXNlLmNv
bYIUd3d3LmF0aGVuYXNvYmhhbi5jb22CFHd3dy5hdGhlbmFzdmVyaWdlLnNlghB3
d3cuYXRoZW5hdHMuY29tght3d3cuYXRoZW5lc3NhZGVzaWduc2xsYy5jb22CE3d3
dy5hdGhlbmllbnNpcy5jb22CGHd3dy5hdGhlbnNhcnRib29rZmFpci5ncoITd3d3
LmF0aGVuc3ByaW1lLmNvbYIgd3d3LmF0aGVvcnlmb3J5b3V0b2Rpc3JlZ2FyZC5j
b22CEHd3dy5hdGhlb3J5b2YudXOCGHd3dy5hdGhlcmFwaXN0c2RpYXJ5LmNvbYIZ
d3d3LmF0aGllZmNhbGxlZGdyaWVmLmNvbYIUd3d3LmF0aGluYWlzbmVnYS5jb22C
FHd3dy5hdGhpbmtpbmdraWQuY29tghF3d3cuYXRoaXJzdHkuZmlzaIIQd3d3LmF0
aGxlcmVjLm9yZ4IWd3d3LmF0aGxldGVnbG9iYWwuYmxvZ4IWd3d3LmF0aGxldGVw
aHlzaWNzLmNvbYIWd3d3LmF0aGxldGVzZWNvbmQuYmxvZ4IXd3d3LmF0aGxldGlj
LWNob2ljZS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEw
KDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgor
BgEEAdZ5AgQCBIH1BIHyAPAAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt
74uQXgAAAXChsfTkAAAEAwBHMEUCIQDvcEHjjihoeobCKT2CmLld3I1B7cMhjjwU
X0nbataIWQIgLKiIwXD+vHGgEp9dz6yAhJ+qn2qAYwPeHfM9/cC2ERkAdgBvU3as
MfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAXChsfYVAAAEAwBHMEUCIE1L
iPJha7JnG/QVGMm0MaBqXfKB0fEgDubgQXQoS/6JAiEAoZB4eU3v2iY9WsthdWmh
sZ/OIEixbGpoRkStiLKgn+QwDQYJKoZIhvcNAQELBQADggEBAGUz+JsdMf9vNEKY
2NR+CYaNw+pvEoFiXEul1d8hSwcjJZ6rmSk/StKOGZd4DzC7VzNiRnfr8s3ZPzyc
G1Suu9voAzIz/OXN0tATd77CwrsyNRBLC1/xQ6l7sre/++roj17Ahg/Ovu1bh3bO
cjQmPa7kyQuiMKayrkq2/dRPmTQ0z8fkJiL4EFeANQdTqrJBXpJkgcWx7N9766lm
9LvviGjOJUmJqw321Nz2MjygXcNI+iDmy5YKbBmXnlfS5RTrNcDanEiJE/QocxJk
JyzZYR1axryW7hvlMkNEpBTBLrWx0jKKLWQRAUJjpUJoFT/6hd4DZopzYsd4/FHk
8xn5yGo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAlzI3wlfJ5+OaOLYVRp
Lure1lBXrC1ofT82jKJKBI/6Uw626MVVIBXzYwpI7BsMITTpzEe00E3zVWtKB2ug
/Vgc6GTSYuUm4RvSaDtBDemsYoB/ehko6wfeKM9F9brytoz6pNMjnrUqBMjZIPAT
YJZAXU1vd0fmVeZDuzTp/iTmlOTzmsBmwn1uYWF1HyaM9WMmP8ChxskRnZt4LQvC
R8UiYvPSV9qP5xCaZdfuv6cmCBoZ5UX+D9JUFi/ZtdgTaaV/JJN9Ps0T6GBGlX59
PhKMaCgfMfJXrpraareT0kouRlrLH0UVxXMaGUDOmo3z36tO5mboaCGtm4c5vhBQ
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265844865581318910456638513807341796949739
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 17:39:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 17:39:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22727554744323786151873683415438333615517636529337335311551451491615936253812298496097933716522437181463460791841857623308993907530652615811398590802240415473080224554463729307087959622450045495904790479844005548812925676268992964928207026832863589541102808833452163173024243840511297714480377997986527415895559911663299166164494916754347437063879298609598335646663129907211165233863386728058767520175256776913005747318942867271048793214407633256493427553755820642817185261646548670418933064933908224512607089652422153251034482788000517799188168448637080404134925865690845203078367882614385676171815830131058146300097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22b161378f5989f30d1a542a3a8c5e2da8ec8437
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1095 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenafitness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenaintegralidade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenamj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenamkaiman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenasdreamhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenasobhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenasverige.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenessadesignsllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atheniensis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athensartbookfair.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athensprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atheoryforyoutodisregard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atheoryof.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atherapistsdiary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athiefcalledgrief.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athinaisnega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athinkingkid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athirsty.fish'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athlerec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleteglobal.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athletephysics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athletesecond.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athletic-choice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepillar.athenian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenafit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenafitness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenaintegralidade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenamj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenamkaiman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenasdreamhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenasobhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenasverige.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenessadesignsllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atheniensis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athensartbookfair.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athensprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atheoryforyoutodisregard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atheoryof.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atherapistsdiary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athiefcalledgrief.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athinaisnega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athinkingkid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athirsty.fish'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athlerec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athleteglobal.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athletephysics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athletesecond.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athletic-choice.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a1b1f4e40000040300473045022100ef7041e38e28687a86c2293d8298b95ddc8d41edc3218e3c145f49db6ad6885902202ca888c170febc71a0129f5dcfac80849faa9f6a806303de1df33dfdc0b611190076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170a1b1f615000004030047304502204d4b88f2616bb2671bf41518c9b431a06a5df281d1f1200ee6e04174284bfe89022100a19078794defda263d5acb617569a1b19fce2048b16c6a684644ad88b2a09fe4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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