tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:84:86:80:87:e9:91:db:7a:7b:5f:35:f5:83:19:09:c5:ce was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:84:86:80:87:e9:91:db:7a:7b:5f:35:f5:83:19:09:c5:ce
Serial Number (int): 306432914150908287320324918359841883932110
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:bc:b3:e5:17:51:4e:72:f6:56:61:5d:a3:c2:29:c1:2e:12:b4:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 21:45:08:c5:53:82:11:80:cb:a3:b2:1e:f7:a3:05:66:6c:be:6b:92
Fingerprint (sha256): b0:c2:12:7d:78:44:9d:25:55:df:27:fc:07:37:53:1a:6f:22:1b:98:a6:32:8a:e4:25:56:eb:93:5d:e5:d1:10

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.historichotels.org
historicaltruthproject.com
historicalwilliamsburg.com
historicathenaeum.com
historicbarnssanjuanislands.com
historiccitiesrules.com
historicclubcastrovillari.com
historicdc.com
historicdc.org
historiclittleswitzerland.com
historicmarcosregister.com
historicmichiganroad.org
historicnewyorktours.com
historicobarakaldocf.com
historicoccasions.com
historicophiles.com
historicparkavenue.org
historicparkview.org
historicplaceswellington.org
historicsantabarbara.com
historicslot.com
historicslotcars.com
historicslotcarschallenge.com
historicsocialcirclega.com
historicsocialcirclega.org
tls.automattic.com
www.historicalthinkingmissionscanada.net
www.historicaltruthproject.com
www.historicalwilliamsburg.com
www.historicathenaeum.com
www.historicbarnssanjuanislands.com
www.historiccitiesrules.com
www.historicclubcastrovillari.com
www.historicdc.com
www.historicdc.org
www.historiclittleswitzerland.com
www.historicmarcosregister.com
www.historicmichiganroad.org
www.historicnewyorktours.com
www.historicobarakaldocf.com
www.historicoccasions.com
www.historicophiles.com
www.historicparkavenue.org
www.historicparkview.org
www.historicplaceswellington.org
www.historicsantabarbara.com
www.historicslot.com
www.historicslotcars.com
www.historicslotcarschallenge.com
www.historicsocialcirclega.com
www.historicsocialcirclega.org

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKyzCCCbOgAwIBAgISA4SGgIfpkdt6e1819YMZCcXOMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTIyMzA4MjhaFw0x
OTEyMTEyMzA4MjhaMB0xGzAZBgNVBAMTEnRscy5hdXRvbWF0dGljLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALoiJGGLieIabMfmyLQOAnKGOh2m
yeG7wxkXBJl+QcfV+RoNfFrH0l/9iLRvzlUijz5ueOOJZsoZkGHLqKQjxmV35dzL
+dVusR6UXj6DE3fmcp/PFtYinOlJPoNgHBP1eB1lDxKxAg0C+tr8EzSx5/aqdrV4
v752qqZ2a5i28TRLPwB0mSgbmYJdUyfDC6B1ZNDZbJeGdJRfhhiZg1Qs0c2biRtq
u7HYDYxFFdVKKdzJ5hXQQk4LjAoJDvQzYMFmdreydDI7rnG2nvgZPNouovH2eOGO
iRR/3NqY3iB+gX9O/SI8QiAzauACDxDf/BQ1MEUUx9oyxskVxZOEXLWD/jkCAwEA
AaOCB9YwggfSMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU6Lyz5RdRTnL2VmFdo8Ip
wS4StPcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCBYgGA1UdEQSCBX8wggV7ghdibG9nLmhpc3RvcmljaG90ZWxzLm9y
Z4IaaGlzdG9yaWNhbHRydXRocHJvamVjdC5jb22CGmhpc3RvcmljYWx3aWxsaWFt
c2J1cmcuY29tghVoaXN0b3JpY2F0aGVuYWV1bS5jb22CH2hpc3RvcmljYmFybnNz
YW5qdWFuaXNsYW5kcy5jb22CF2hpc3RvcmljY2l0aWVzcnVsZXMuY29tgh1oaXN0
b3JpY2NsdWJjYXN0cm92aWxsYXJpLmNvbYIOaGlzdG9yaWNkYy5jb22CDmhpc3Rv
cmljZGMub3Jngh1oaXN0b3JpY2xpdHRsZXN3aXR6ZXJsYW5kLmNvbYIaaGlzdG9y
aWNtYXJjb3NyZWdpc3Rlci5jb22CGGhpc3RvcmljbWljaGlnYW5yb2FkLm9yZ4IY
aGlzdG9yaWNuZXd5b3JrdG91cnMuY29tghhoaXN0b3JpY29iYXJha2FsZG9jZi5j
b22CFWhpc3Rvcmljb2NjYXNpb25zLmNvbYITaGlzdG9yaWNvcGhpbGVzLmNvbYIW
aGlzdG9yaWNwYXJrYXZlbnVlLm9yZ4IUaGlzdG9yaWNwYXJrdmlldy5vcmeCHGhp
c3RvcmljcGxhY2Vzd2VsbGluZ3Rvbi5vcmeCGGhpc3Rvcmljc2FudGFiYXJiYXJh
LmNvbYIQaGlzdG9yaWNzbG90LmNvbYIUaGlzdG9yaWNzbG90Y2Fycy5jb22CHWhp
c3Rvcmljc2xvdGNhcnNjaGFsbGVuZ2UuY29tghpoaXN0b3JpY3NvY2lhbGNpcmNs
ZWdhLmNvbYIaaGlzdG9yaWNzb2NpYWxjaXJjbGVnYS5vcmeCEnRscy5hdXRvbWF0
dGljLmNvbYIod3d3Lmhpc3RvcmljYWx0aGlua2luZ21pc3Npb25zY2FuYWRhLm5l
dIIed3d3Lmhpc3RvcmljYWx0cnV0aHByb2plY3QuY29tgh53d3cuaGlzdG9yaWNh
bHdpbGxpYW1zYnVyZy5jb22CGXd3dy5oaXN0b3JpY2F0aGVuYWV1bS5jb22CI3d3
dy5oaXN0b3JpY2Jhcm5zc2FuanVhbmlzbGFuZHMuY29tght3d3cuaGlzdG9yaWNj
aXRpZXNydWxlcy5jb22CIXd3dy5oaXN0b3JpY2NsdWJjYXN0cm92aWxsYXJpLmNv
bYISd3d3Lmhpc3RvcmljZGMuY29tghJ3d3cuaGlzdG9yaWNkYy5vcmeCIXd3dy5o
aXN0b3JpY2xpdHRsZXN3aXR6ZXJsYW5kLmNvbYIed3d3Lmhpc3RvcmljbWFyY29z
cmVnaXN0ZXIuY29tghx3d3cuaGlzdG9yaWNtaWNoaWdhbnJvYWQub3Jnghx3d3cu
aGlzdG9yaWNuZXd5b3JrdG91cnMuY29tghx3d3cuaGlzdG9yaWNvYmFyYWthbGRv
Y2YuY29tghl3d3cuaGlzdG9yaWNvY2Nhc2lvbnMuY29tghd3d3cuaGlzdG9yaWNv
cGhpbGVzLmNvbYIad3d3Lmhpc3RvcmljcGFya2F2ZW51ZS5vcmeCGHd3dy5oaXN0
b3JpY3Bhcmt2aWV3Lm9yZ4Igd3d3Lmhpc3RvcmljcGxhY2Vzd2VsbGluZ3Rvbi5v
cmeCHHd3dy5oaXN0b3JpY3NhbnRhYmFyYmFyYS5jb22CFHd3dy5oaXN0b3JpY3Ns
b3QuY29tghh3d3cuaGlzdG9yaWNzbG90Y2Fycy5jb22CIXd3dy5oaXN0b3JpY3Ns
b3RjYXJzY2hhbGxlbmdlLmNvbYIed3d3Lmhpc3Rvcmljc29jaWFsY2lyY2xlZ2Eu
Y29tgh53d3cuaGlzdG9yaWNzb2NpYWxjaXJjbGVnYS5vcmcwTAYDVR0gBEUwQzAI
BgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nw
cy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwDiaUuu
JujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAW0n8ySgAAAEAwBIMEYCIQCN
R4oHY+AWEkOcAi0QGpjpDsGdmpE0qsevP3LjLx2qZgIhAJI20BNam3V5oFVwMhdN
vuY5NX4pay1hz7d9Vgwansk3AHcAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHH
aFRL2I0AAAFtJ/MkxQAABAMASDBGAiEArdYJxIrILmYpw10sM2xVxxBLB7ArM9kL
TwVK0hWwNQICIQDWllmfWLr1rz/rTTNT0GdzZMa9pah1T9cl5Usva0IlHDANBgkq
hkiG9w0BAQsFAAOCAQEAU2LN5w8ACbnQDXDXXYM6dgupfqne7aAj2KyJrlhXftuS
0joZbXebcQPyGAmTsfaqQk45NuodXlnqNUe8YL+sjT6hpgUGaXJg7L0TdQFnKwb3
OvH2UWT2QuWgqRblwdKplbK8ypxAOLCdIPctmJvcggaam1sjWlbrJsNoAn7T+MRe
RFRlSn8BSFB6NxW06vRceuXeqO200ugidUOx2g2UFXlXiYigkxP/CJhbgoyX4fxn
ua2t7OIC9P0X3f/YQVIX9xyAgSAKwMqckqvk+aeED4cmFDmwe4A3XbevohhNh0PH
0BwUKDGOkjm6wtANYSs/dHKvVn3MI9VpmmD4iE8fmQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiIkYYuJ4hpsx+bItA4C
coY6HabJ4bvDGRcEmX5Bx9X5Gg18WsfSX/2ItG/OVSKPPm5444lmyhmQYcuopCPG
ZXfl3Mv51W6xHpRePoMTd+Zyn88W1iKc6Uk+g2AcE/V4HWUPErECDQL62vwTNLHn
9qp2tXi/vnaqpnZrmLbxNEs/AHSZKBuZgl1TJ8MLoHVk0Nlsl4Z0lF+GGJmDVCzR
zZuJG2q7sdgNjEUV1Uop3MnmFdBCTguMCgkO9DNgwWZ2t7J0Mjuucbae+Bk82i6i
8fZ44Y6JFH/c2pjeIH6Bf079IjxCIDNq4AIPEN/8FDUwRRTH2jLGyRXFk4RctYP+
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306432914150908287320324918359841883932110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-12 23:08:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 23:08:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23497160827304326992129825297728598251647401744188283816523420654323302219145311700507919805301520019909999790923615669563661644771038121213460495269748867007237834292084570034365412693344811981648628023186523238185404348261074503375315015667958194417540272062172478108839266787051895500606399666810041006859084492353358932915667840316578374928149565961706250591287529390736645263330279310580309335299312097001674108803602840286127701818495820390729216086214182071491709147074763575765426174229477105126553064449525988588130970081400050073385358949749432486892582069429299004447187968924816770619512556802841048776249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8bcb3e517514e72f656615da3c229c12e12b4f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1407 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.historichotels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicaltruthproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicalwilliamsburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicathenaeum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicbarnssanjuanislands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historiccitiesrules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicclubcastrovillari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historiclittleswitzerland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicmarcosregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicmichiganroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicnewyorktours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicobarakaldocf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicoccasions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicophiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicparkavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicparkview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicplaceswellington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicsantabarbara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicslot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicslotcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicslotcarschallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicsocialcirclega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicsocialcirclega.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalthinkingmissionscanada.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicaltruthproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicalwilliamsburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicathenaeum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicbarnssanjuanislands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historiccitiesrules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicclubcastrovillari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historiclittleswitzerland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicmarcosregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicmichiganroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicnewyorktours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicobarakaldocf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicoccasions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicophiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicparkavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicparkview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicplaceswellington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicsantabarbara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicslot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicslotcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicslotcarschallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicsocialcirclega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historicsocialcirclega.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d27f324a000000403004830460221008d478a0763e01612439c022d101a98e90ec19d9a9134aac7af3f72e32f1daa660221009236d0135a9b7579a0557032174dbee639357e296b2d61cfb77d560c1a9ec93700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d27f324c50000040300483046022100add609c48ac82e6629c35d2c336c55c7104b07b02b33d90b4f054ad215b03502022100d696599f58baf5af3feb4d3353d0677364c6bda5a8754fd725e54b2f6b42251c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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