tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ef:65:54:26:ed:fc:a6:82:3a:be:94:ea:6b:c3:85:09:be was issued on by Let's Encrypt.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ef:65:54:26:ed:fc:a6:82:3a:be:94:ea:6b:c3:85:09:be
Serial Number (int): 342799032459482257110098756652239023311294
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 68:c2:04:e4:23:42:a2:19:cd:c6:d8:5b:68:97:59:1f:6d:e2:ec:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cd:90:4a:d0:98:88:88:2e:30:76:8e:10:56:18:23:78:3b:e7:71:73
Fingerprint (sha256): 9f:ad:fb:a8:12:1d:3c:8a:0c:50:b4:e7:3b:95:44:7c:6a:7f:ca:57:09:cb:fd:e5:1c:16:63:53:5c:b3:c7:0b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate tls.automattic.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tls.automattic.com
www.swaddlingresearch.org
www.swadeyoga.com
www.swagdad80nyc.com
www.swagdadscorner.com
www.swaggergirl2121katy.com
www.swaggerless.org
www.swaggerstalker.com
www.swaggiescapes.com
www.swaggingitup.com
www.swaggingsobad.com
www.swagjewellery.com
www.swagmoviereviews.com
www.swagproject.org
www.swagsdsu.org
www.swagstory.com
www.swagtrout.com
www.swahilidishesathome.com
www.swahilimillionaire.com
www.swahilionline.tv
www.swahiliprof.com
www.swaimusic.com
www.swainsborofarmersmarket.com
www.swake.org
www.swaledaleestate.org
www.swalesrevivalconf.org
www.swalfcast.com
www.swalkerandco.co
www.swalkerandco.com
www.swalkerco.co
www.swalkerco.com
www.swallastudio.com
www.swallowedinthesea.com
www.swalloweroflives.com
www.swallowfilm.com
www.swallowgolondrina.com
www.swallowinglab.com
www.swallowinglab.net
www.swallowinglab.org
www.swallowingthecamel.me
www.swallownocamels.com
www.swallows-and-amazons.co
www.swallowsfrommykitchenwindow.com
www.swallowsnestblog.com
www.swallowtailbirdingtours.com
www.swallowtailflowers.com
www.swallowwinery.com
www.swambold.com
www.swamicode.com
www.swamidevanand.org
www.swamigirijananda.com
www.swamimommi.com
www.swamiofmalgudi.com
www.swampcabbagemovie.com
www.swampcrop.com
www.swampette.com
www.swampflix.com
www.swampgravy.com
www.swamphibiscusdesign.com
www.swamphockey.com
www.swampnights.com
www.swampnotes.com
www.swampofboredom.com
www.swampscottartassociation.com
www.swampscottartsassociation.org
www.swampscottchurchofspiritualism.org
www.swampscottfarmersmarket.org
www.swampstomping.com
www.swamptalksports.com
www.swampyankee1.com
www.swampyankeeforgeandmercantile.com
www.swampyankeeworkshop.com
www.swamysvaasthushastra.com
www.swan-entrepreneur.com
www.swanagebayfish.com
www.swanamity.com
www.swanboroughprints.com
www.swanbykwan.com
www.swancakemovie.com
www.swancomms.com
www.swandrives.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMnjCCC4agAwIBAgISA+9lVCbt/KaCOr6U6mvDhQm+MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA0MDQxMDM5MDBaFw0x
NjA3MDMxMDM5MDBaMB0xGzAZBgNVBAMTEnRscy5hdXRvbWF0dGljLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJyEjsWFPQ+yQca7dwYsKRbxO+sK
4F20w6SjQK6dr1xkVdKuyDswNPwsHcczdS/SkqNEK0yiywY8yZARvZjYvhC6jmBZ
O1b3PR3KqVg7Q5g3yMR0LaRBC2GF45/9WZPcHiWkgCIlM3Z7Kvy0xM0RbFRrV4cc
jHiCOGB2LyqwzBzyEy3D/uYiw5DnN++vxUmzeUjNyq43VPu5sIbafe5Dk9qImHwR
yGZxMWwsxlPy4KZpI38jS9i1HdzIzWnwWPj5NdnvKdBcV9lAvXhKy058cxgIonm0
EYQht4/RgLlqF4OCKcODbb0vCod/RoCWO6CtT5ZRmyTEOvG4BUNNPxZlE80CAwEA
AaOCCakwggmlMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUaMIE5CNCohnNxthbaJdZ
H23i7FMwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYBBQUH
AQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZy8wggexBgNVHREEggeoMIIHpIISdGxzLmF1dG9tYXR0aWMuY29tghl3
d3cuc3dhZGRsaW5ncmVzZWFyY2gub3JnghF3d3cuc3dhZGV5b2dhLmNvbYIUd3d3
LnN3YWdkYWQ4MG55Yy5jb22CFnd3dy5zd2FnZGFkc2Nvcm5lci5jb22CG3d3dy5z
d2FnZ2VyZ2lybDIxMjFrYXR5LmNvbYITd3d3LnN3YWdnZXJsZXNzLm9yZ4IWd3d3
LnN3YWdnZXJzdGFsa2VyLmNvbYIVd3d3LnN3YWdnaWVzY2FwZXMuY29tghR3d3cu
c3dhZ2dpbmdpdHVwLmNvbYIVd3d3LnN3YWdnaW5nc29iYWQuY29tghV3d3cuc3dh
Z2pld2VsbGVyeS5jb22CGHd3dy5zd2FnbW92aWVyZXZpZXdzLmNvbYITd3d3LnN3
YWdwcm9qZWN0Lm9yZ4IQd3d3LnN3YWdzZHN1Lm9yZ4IRd3d3LnN3YWdzdG9yeS5j
b22CEXd3dy5zd2FndHJvdXQuY29tght3d3cuc3dhaGlsaWRpc2hlc2F0aG9tZS5j
b22CGnd3dy5zd2FoaWxpbWlsbGlvbmFpcmUuY29tghR3d3cuc3dhaGlsaW9ubGlu
ZS50doITd3d3LnN3YWhpbGlwcm9mLmNvbYIRd3d3LnN3YWltdXNpYy5jb22CH3d3
dy5zd2FpbnNib3JvZmFybWVyc21hcmtldC5jb22CDXd3dy5zd2FrZS5vcmeCF3d3
dy5zd2FsZWRhbGVlc3RhdGUub3Jnghl3d3cuc3dhbGVzcmV2aXZhbGNvbmYub3Jn
ghF3d3cuc3dhbGZjYXN0LmNvbYITd3d3LnN3YWxrZXJhbmRjby5jb4IUd3d3LnN3
YWxrZXJhbmRjby5jb22CEHd3dy5zd2Fsa2VyY28uY2+CEXd3dy5zd2Fsa2VyY28u
Y29tghR3d3cuc3dhbGxhc3R1ZGlvLmNvbYIZd3d3LnN3YWxsb3dlZGludGhlc2Vh
LmNvbYIYd3d3LnN3YWxsb3dlcm9mbGl2ZXMuY29tghN3d3cuc3dhbGxvd2ZpbG0u
Y29tghl3d3cuc3dhbGxvd2dvbG9uZHJpbmEuY29tghV3d3cuc3dhbGxvd2luZ2xh
Yi5jb22CFXd3dy5zd2FsbG93aW5nbGFiLm5ldIIVd3d3LnN3YWxsb3dpbmdsYWIu
b3Jnghl3d3cuc3dhbGxvd2luZ3RoZWNhbWVsLm1lghd3d3cuc3dhbGxvd25vY2Ft
ZWxzLmNvbYIbd3d3LnN3YWxsb3dzLWFuZC1hbWF6b25zLmNvgiN3d3cuc3dhbGxv
d3Nmcm9tbXlraXRjaGVud2luZG93LmNvbYIYd3d3LnN3YWxsb3dzbmVzdGJsb2cu
Y29tgh93d3cuc3dhbGxvd3RhaWxiaXJkaW5ndG91cnMuY29tghp3d3cuc3dhbGxv
d3RhaWxmbG93ZXJzLmNvbYIVd3d3LnN3YWxsb3d3aW5lcnkuY29tghB3d3cuc3dh
bWJvbGQuY29tghF3d3cuc3dhbWljb2RlLmNvbYIVd3d3LnN3YW1pZGV2YW5hbmQu
b3Jnghh3d3cuc3dhbWlnaXJpamFuYW5kYS5jb22CEnd3dy5zd2FtaW1vbW1pLmNv
bYIWd3d3LnN3YW1pb2ZtYWxndWRpLmNvbYIZd3d3LnN3YW1wY2FiYmFnZW1vdmll
LmNvbYIRd3d3LnN3YW1wY3JvcC5jb22CEXd3dy5zd2FtcGV0dGUuY29tghF3d3cu
c3dhbXBmbGl4LmNvbYISd3d3LnN3YW1wZ3JhdnkuY29tght3d3cuc3dhbXBoaWJp
c2N1c2Rlc2lnbi5jb22CE3d3dy5zd2FtcGhvY2tleS5jb22CE3d3dy5zd2FtcG5p
Z2h0cy5jb22CEnd3dy5zd2FtcG5vdGVzLmNvbYIWd3d3LnN3YW1wb2Zib3JlZG9t
LmNvbYIgd3d3LnN3YW1wc2NvdHRhcnRhc3NvY2lhdGlvbi5jb22CIXd3dy5zd2Ft
cHNjb3R0YXJ0c2Fzc29jaWF0aW9uLm9yZ4Imd3d3LnN3YW1wc2NvdHRjaHVyY2hv
ZnNwaXJpdHVhbGlzbS5vcmeCH3d3dy5zd2FtcHNjb3R0ZmFybWVyc21hcmtldC5v
cmeCFXd3dy5zd2FtcHN0b21waW5nLmNvbYIXd3d3LnN3YW1wdGFsa3Nwb3J0cy5j
b22CFHd3dy5zd2FtcHlhbmtlZTEuY29tgiV3d3cuc3dhbXB5YW5rZWVmb3JnZWFu
ZG1lcmNhbnRpbGUuY29tght3d3cuc3dhbXB5YW5rZWV3b3Jrc2hvcC5jb22CHHd3
dy5zd2FteXN2YWFzdGh1c2hhc3RyYS5jb22CGXd3dy5zd2FuLWVudHJlcHJlbmV1
ci5jb22CFnd3dy5zd2FuYWdlYmF5ZmlzaC5jb22CEXd3dy5zd2FuYW1pdHkuY29t
ghl3d3cuc3dhbmJvcm91Z2hwcmludHMuY29tghJ3d3cuc3dhbmJ5a3dhbi5jb22C
FXd3dy5zd2FuY2FrZW1vdmllLmNvbYIRd3d3LnN3YW5jb21tcy5jb22CEnd3dy5z
d2FuZHJpdmVzLmNvbTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC
3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUg
cmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29y
ZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBz
Oi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IB
AQAUr+oWrIDo8GVrOSfT0XiRYKKlMnCjuRRFtxf4J4iNGbODVJonAR4Lwfjz0cNI
Ayavp0Qe8SB7uOkdHAPr9TuemGo6cb56VM+pD7GPlAen2iTbTQPkv4XmrKQ7pT7N
xHqto3JhDi75/ha9DiKHTOJbOCtrlg3ZBDUI+pNOpUx8TBmzDSdJfMVvtMUruV/6
/bdzgWxXB/KwSQAWyxPBNHtzUpjFbcIN5n9/8BX4VdYwtOPHkI5uua7jkSdt+ZSL
vZCeQAtMtvH0c1LH4kl7nQnepOEUfI691efbK6CBX6+NcdCGJYNstx4zdC7VtOSy
rnLR7lTYi+yGZyi0qjQS9Tdr
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnISOxYU9D7JBxrt3Biwp
FvE76wrgXbTDpKNArp2vXGRV0q7IOzA0/CwdxzN1L9KSo0QrTKLLBjzJkBG9mNi+
ELqOYFk7Vvc9HcqpWDtDmDfIxHQtpEELYYXjn/1Zk9weJaSAIiUzdnsq/LTEzRFs
VGtXhxyMeII4YHYvKrDMHPITLcP+5iLDkOc376/FSbN5SM3KrjdU+7mwhtp97kOT
2oiYfBHIZnExbCzGU/LgpmkjfyNL2LUd3MjNafBY+Pk12e8p0FxX2UC9eErLTnxz
GAiiebQRhCG3j9GAuWoXg4Ipw4NtvS8Kh39GgJY7oK1PllGbJMQ68bgFQ00/FmUT
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342799032459482257110098756652239023311294
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-04 10:39:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-03 10:39:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19758542213524858033465151531444661760508185186496922971794196100732330729253302044258796095192828535205278670186193643591735140796281988226857090192567120423397077849309233427794598438370509380871689850055344927835885816237491390453473677854358629630498451787651545069980060862776093523326047248309033445229999628228429839805089871315688302178736579358078434248846926385738122869240135670976404916243372746557411128050410258395676045050247176491322589822404842020412986102054665558649877192320850436045043493001856152567966584005056336314677263643056296689101097323947087475251771275851458688083449573755158360560589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68c204e42342a219cdc6d85b6897591f6de2ec53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1960 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swaddlingresearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swadeyoga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swagdad80nyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swagdadscorner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swaggergirl2121katy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swaggerless.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swaggerstalker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swaggiescapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swaggingitup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swaggingsobad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swagjewellery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swagmoviereviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swagproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swagsdsu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swagstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swagtrout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swahilidishesathome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swahilimillionaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swahilionline.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swahiliprof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swaimusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swainsborofarmersmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swaledaleestate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swalesrevivalconf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swalfcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swalkerandco.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swalkerandco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swalkerco.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swalkerco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swallastudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swallowedinthesea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swalloweroflives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swallowfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swallowgolondrina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swallowinglab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swallowinglab.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swallowinglab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swallowingthecamel.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swallownocamels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swallows-and-amazons.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swallowsfrommykitchenwindow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swallowsnestblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swallowtailbirdingtours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swallowtailflowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swallowwinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swambold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swamicode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swamidevanand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swamigirijananda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swamimommi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swamiofmalgudi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swampcabbagemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swampcrop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swampette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swampflix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swampgravy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swamphibiscusdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swamphockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swampnights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swampnotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swampofboredom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swampscottartassociation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swampscottartsassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swampscottchurchofspiritualism.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swampscottfarmersmarket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swampstomping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swamptalksports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swampyankee1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swampyankeeforgeandmercantile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swampyankeeworkshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swamysvaasthushastra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swan-entrepreneur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swanagebayfish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swanamity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swanboroughprints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swanbykwan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swancakemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swancomms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swandrives.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0014afea16ac80e8f0656b3927d3d1789160a2a53270a3b91445b717f827888d19b383549a27011e0bc1f8f3d1c3480326afa7441ef1207bb8e91d1c03ebf53b9e986a3a71be7a54cfa90fb18f9407a7da24db4d03e4bf85e6aca43ba53ecdc47aada372610e2ef9fe16bd0e22874ce25b382b6b960dd9043508fa934ea54c7c4c19b30d27497cc56fb4c52bb95ffafdb773816c5707f2b0490016cb13c1347b735298c56dc20de67f7ff015f855d630b4e3c7908e6eb9aee391276df9948bbd909e400b4cb6f1f47352c7e2497b9d09dea4e1147c8ebdd5e7db2ba0815faf8d71d08625836cb71e33742ed5b4e4b2ae72d1ee54d88bec866728b4aa3412f5376b