tls.automattic.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:7f:0e:93:4d:09:a7:43:eb:e8:b1:0e:35:89:68:99:2a:10 was issued on by Let's Encrypt.
With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=tls.automattic.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:7f:0e:93:4d:09:a7:43:eb:e8:b1:0e:35:89:68:99:2a:10Serial Number (int): 304572092416329477294127927715274767804944
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 10:2e:2b:48:7e:5d:8d:6e:41:f5:35:7c:05:38:6f:55:79:35:00:30
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 51:e3:2f:c5:f4:d6:9d:b7:f5:9f:88:ad:ef:9e:01:d4:db:42:a9:f1
Fingerprint (sha256): 8e:ae:df:5b:c6:35:b5:9b:bd:23:35:be:0c:57:db:ba:19:91:ba:3b:87:78:f9:b9:eb:47:cb:56:20:04:71:66
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate tls.automattic.com
51
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tls.automattic.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blog.splitwise.com
splitboardshopnews.com
splitbrainwitch.com
splitbutterfly.com
splitbysplit.com
splitcitysonics.com
splitcrow.ca
splitdecisionmmauk.com
splitdiopter.com
splitegg.net
splitjigger.com
splitpeaksoup.com
splitrivergrowers.com
splitrockofpawlet.com
splitseas.com
splitsecndteam.com
splitterfasern.net
splittingelm.com
splittingtheadamblog.com
splitxscreens.com
splogblog.com
sploshart.com
splotchesofink.com
splspokane.org
splstaff.org
splteenmachine.com
tls.automattic.com
www.splitboardshopnews.com
www.splitbrainwitch.com
www.splitbutterfly.com
www.splitbysplit.com
www.splitcitysonics.com
www.splitcrow.ca
www.splitdecisionmmauk.com
www.splitdiopter.com
www.splitegg.net
www.splitjigger.com
www.splitpeaksoup.com
www.splitrivergrowers.com
www.splitrockofpawlet.com
www.splitseas.com
www.splitsecndteam.com
www.splitterfasern.net
www.splittingelm.com
www.splittingtheadamblog.com
www.splitxscreens.com
www.splogblog.com
www.sploshart.com
www.splotchesofink.com
www.splspokane.org
www.splstaff.org
splitboardshopnews.com
splitbrainwitch.com
splitbutterfly.com
splitbysplit.com
splitcitysonics.com
splitcrow.ca
splitdecisionmmauk.com
splitdiopter.com
splitegg.net
splitjigger.com
splitpeaksoup.com
splitrivergrowers.com
splitrockofpawlet.com
splitseas.com
splitsecndteam.com
splitterfasern.net
splittingelm.com
splittingtheadamblog.com
splitxscreens.com
splogblog.com
sploshart.com
splotchesofink.com
splspokane.org
splstaff.org
splteenmachine.com
tls.automattic.com
www.splitboardshopnews.com
www.splitbrainwitch.com
www.splitbutterfly.com
www.splitbysplit.com
www.splitcitysonics.com
www.splitcrow.ca
www.splitdecisionmmauk.com
www.splitdiopter.com
www.splitegg.net
www.splitjigger.com
www.splitpeaksoup.com
www.splitrivergrowers.com
www.splitrockofpawlet.com
www.splitseas.com
www.splitsecndteam.com
www.splitterfasern.net
www.splittingelm.com
www.splittingtheadamblog.com
www.splitxscreens.com
www.splogblog.com
www.sploshart.com
www.splotchesofink.com
www.splspokane.org
www.splstaff.org
Other certificates including the domain name automattic.com
(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
Certificate
The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJIjCCCAqgAwIBAgISA38Ok00Jp0Pr6LEONYlomSoQMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzAzMDYxMTM5MDBaFw0x NzA2MDQxMTM5MDBaMB0xGzAZBgNVBAMTEnRscy5hdXRvbWF0dGljLmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANhXzKwE9XFT5IzAi+E3X10CGWY1 vafc5ZAm3U4zn3tChGDgEQlh++OBb3TMAb42Ou7ftaC4qEzFp6FuaXjCMhUD4syn nqCZtvKCnRtM7yMSaKxCrYLcWGroh1Qlg62P2UfepDZf/GoZUuCbxP8np/ObJjy2 12zkjFjx4lZKXk893yO+STkDhGuSKSlGOOaqrVyEPHXzO/Kx208/Kd8lvPfjaqYW sPiaJmlOY1XrfWbS9rfEkvEEUAcdzJWq19IfI0nfccwIPU/xl4vll0ZF+bF5FLwz a4ffvne8aXLe2ThyO4fDEL9UJLTM2IaeKBiqpNYO3fSZfrCT5h26FiArHNsCAwEA AaOCBi0wggYpMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUEC4rSH5djW5B9TV8BThv VXk1ADAwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYBBQUH AQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wggQ1BgNVHREEggQsMIIEKIISYmxvZy5zcGxpdHdpc2UuY29tghZz cGxpdGJvYXJkc2hvcG5ld3MuY29tghNzcGxpdGJyYWlud2l0Y2guY29tghJzcGxp dGJ1dHRlcmZseS5jb22CEHNwbGl0YnlzcGxpdC5jb22CE3NwbGl0Y2l0eXNvbmlj cy5jb22CDHNwbGl0Y3Jvdy5jYYIWc3BsaXRkZWNpc2lvbm1tYXVrLmNvbYIQc3Bs aXRkaW9wdGVyLmNvbYIMc3BsaXRlZ2cubmV0gg9zcGxpdGppZ2dlci5jb22CEXNw bGl0cGVha3NvdXAuY29tghVzcGxpdHJpdmVyZ3Jvd2Vycy5jb22CFXNwbGl0cm9j a29mcGF3bGV0LmNvbYINc3BsaXRzZWFzLmNvbYISc3BsaXRzZWNuZHRlYW0uY29t ghJzcGxpdHRlcmZhc2Vybi5uZXSCEHNwbGl0dGluZ2VsbS5jb22CGHNwbGl0dGlu Z3RoZWFkYW1ibG9nLmNvbYIRc3BsaXR4c2NyZWVucy5jb22CDXNwbG9nYmxvZy5j b22CDXNwbG9zaGFydC5jb22CEnNwbG90Y2hlc29maW5rLmNvbYIOc3Bsc3Bva2Fu ZS5vcmeCDHNwbHN0YWZmLm9yZ4ISc3BsdGVlbm1hY2hpbmUuY29tghJ0bHMuYXV0 b21hdHRpYy5jb22CGnd3dy5zcGxpdGJvYXJkc2hvcG5ld3MuY29tghd3d3cuc3Bs aXRicmFpbndpdGNoLmNvbYIWd3d3LnNwbGl0YnV0dGVyZmx5LmNvbYIUd3d3LnNw bGl0YnlzcGxpdC5jb22CF3d3dy5zcGxpdGNpdHlzb25pY3MuY29tghB3d3cuc3Bs aXRjcm93LmNhghp3d3cuc3BsaXRkZWNpc2lvbm1tYXVrLmNvbYIUd3d3LnNwbGl0 ZGlvcHRlci5jb22CEHd3dy5zcGxpdGVnZy5uZXSCE3d3dy5zcGxpdGppZ2dlci5j b22CFXd3dy5zcGxpdHBlYWtzb3VwLmNvbYIZd3d3LnNwbGl0cml2ZXJncm93ZXJz LmNvbYIZd3d3LnNwbGl0cm9ja29mcGF3bGV0LmNvbYIRd3d3LnNwbGl0c2Vhcy5j b22CFnd3dy5zcGxpdHNlY25kdGVhbS5jb22CFnd3dy5zcGxpdHRlcmZhc2Vybi5u ZXSCFHd3dy5zcGxpdHRpbmdlbG0uY29tghx3d3cuc3BsaXR0aW5ndGhlYWRhbWJs b2cuY29tghV3d3cuc3BsaXR4c2NyZWVucy5jb22CEXd3dy5zcGxvZ2Jsb2cuY29t ghF3d3cuc3Bsb3NoYXJ0LmNvbYIWd3d3LnNwbG90Y2hlc29maW5rLmNvbYISd3d3 LnNwbHNwb2thbmUub3JnghB3d3cuc3Bsc3RhZmYub3JnMIH+BgNVHSAEgfYwgfMw CAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0 aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRp ZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQ b2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9y eS8wDQYJKoZIhvcNAQELBQADggEBAE2hYgKUyPacXHHQnyqHH49GInWjr6h7/ImG g/aR7Ic+kfFjysWhSDtN2vMZnl7AnxhzrjoT97mci1GND/2o5NhnM8a9cdbLZKDi iVvyLFqseFn7BPGcJH0yVL7+LU5wrXbMGu+N5+R/wdN/TjaSt7KPcUp5NrcP/de9 LjgVIQeCnK0P/WDE/jcubVmt4KgyHRLxpSa49nTtHpA08j9M96X8qFzZWvWe9K20 kXwchHYsTJnls2uzgmYxg7OUbXSgl2Vllh6zaQrGRPiiTbrXr5B8BmRX57lAYfNr nTVNsPutUn6EPJYSiBnZMd87bwA+XmX9+lDEDwor7IFK+mDagSs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FfMrAT1cVPkjMCL4Tdf XQIZZjW9p9zlkCbdTjOfe0KEYOARCWH744FvdMwBvjY67t+1oLioTMWnoW5peMIy FQPizKeeoJm28oKdG0zvIxJorEKtgtxYauiHVCWDrY/ZR96kNl/8ahlS4JvE/yen 85smPLbXbOSMWPHiVkpeTz3fI75JOQOEa5IpKUY45qqtXIQ8dfM78rHbTz8p3yW8 9+Nqphaw+JomaU5jVet9ZtL2t8SS8QRQBx3MlarX0h8jSd9xzAg9T/GXi+WXRkX5 sXkUvDNrh9++d7xpct7ZOHI7h8MQv1QktMzYhp4oGKqk1g7d9Jl+sJPmHboWICsc 2wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 304572092416329477294127927715274767804944 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-06 11:39:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-04 11:39:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27310769419670769094274700549951255586054652822436780274053014973955091523280963591586199636297438000119542266880035944627639773972657785778566996547325111373424793381497072640417048584547060175988554217754938801689929768187281520861518754414496414901748164120606152405813279028927731579454465497919571469068955459023938865401945622164132305690133583954279350667469666540143878367694494528557962563041543786816578809693497268077567722027982563565112560782965391537394150493061131476732150592333685039922615075453812685987326245768308418856625337479339912683052266738657043504327865231465391436981176964428395755281627 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 102e2b487e5d8d6e41f5357c05386f5579350030 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1068 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.splitwise.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitboardshopnews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitbrainwitch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitbutterfly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitbysplit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitcitysonics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitcrow.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitdecisionmmauk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitdiopter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitegg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitjigger.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitpeaksoup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitrivergrowers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitrockofpawlet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitseas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitsecndteam.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitterfasern.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splittingelm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splittingtheadamblog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitxscreens.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splogblog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sploshart.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splotchesofink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splspokane.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splstaff.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splteenmachine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitboardshopnews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitbrainwitch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitbutterfly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitbysplit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitcitysonics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitcrow.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitdecisionmmauk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitdiopter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitegg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitjigger.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitpeaksoup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitrivergrowers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitrockofpawlet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitseas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitsecndteam.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitterfasern.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splittingelm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splittingtheadamblog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitxscreens.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splogblog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sploshart.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splotchesofink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splspokane.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splstaff.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004da1620294c8f69c5c71d09f2a871f8f462275a3afa87bfc898683f691ec873e91f163cac5a1483b4ddaf3199e5ec09f1873ae3a13f7b99c8b518d0ffda8e4d86733c6bd71d6cb64a0e2895bf22c5aac7859fb04f19c247d3254befe2d4e70ad76cc1aef8de7e47fc1d37f4e3692b7b28f714a7936b70ffdd7bd2e38152107829cad0ffd60c4fe372e6d59ade0a8321d12f1a526b8f674ed1e9034f23f4cf7a5fca85cd95af59ef4adb4917c1c84762c4c99e5b36bb382663183b3946d74a0976565961eb3690ac644f8a24dbad7af907c066457e7b94061f36b9d354db0fbad527e843c96128819d931df3b6f003e5e65fdfa50c40f0a2bec814afa60da812b