tls.automattic.com

Issued by R3

About this certificate

This digital certificate with serial number 03:45:47:b2:8a:58:22:b6:cd:18:81:5b:f8:77:46:ea:6e:9a was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:45:47:b2:8a:58:22:b6:cd:18:81:5b:f8:77:46:ea:6e:9a
Serial Number (int): 284911643335322389233694643120906728795802
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:64:4f:d1:4f:d8:69:dc:cc:25:47:da:5e:1c:98:6a:92:a3:4b:12
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 33:25:2b:b1:ff:03:73:05:43:86:ee:eb:92:ed:64:f8:c1:8a:ec:00
Fingerprint (sha256): b7:31:51:0e:99:54:70:e2:6c:b9:2c:17:4a:d1:ec:e3:cf:e7:53:e1:6a:c9:b4:80:fe:d3:49:e9:e7:95:f1:91

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arabelamexicooficial.code.blog
clairdunlap.com
constructionportfolio.ca
creatives.works
crimei.law.blog
eten.sport.blog
goodgirlgonetech.com
hausthomaswerfenweng.com
incestsurvivorladyinblack.com
litxchange.com
newellscarajo.com
obligations.com
ordinarygirldoesfinance.blog
ouronlyhope.blog
paintertainment.com
petuniacityquiltguild.com
sarahjaneholisticfitness.uk
semplice81.com
servings.com
skellig.com
supermato.ca
the-world-is-my-playground.ca
tijuanapress.com
tilburyhouse.de
tileartwork.com
tillepepermans.com
tillithompson.com
tillja.com
tls.automattic.com
www.alivenedstyle.fashion.blog
www.arabelamexicooficial.code.blog
www.clairdunlap.com
www.constructionportfolio.ca
www.creatives.works
www.cyberneticsfiction.science.blog
www.goodgirlgonetech.com
www.incestsurvivorladyinblack.com
www.litxchange.com
www.obligations.com
www.ouronlyhope.blog
www.petuniacityquiltguild.com
www.sarahjaneholisticfitness.uk
www.semplice81.com
www.servings.com
www.stagezoneyouththeatre.com
www.supermato.ca
www.the-world-is-my-playground.ca
www.tijdschriftfons.be
www.tijuanapress.com
www.tikaisev.com
www.tileartwork.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIpDCCB4ygAwIBAgISA0VHsopYIrbNGIFb+HdG6m6aMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMjkxNzMyMDJaFw0yNDAzMjgxNzMyMDFaMB0xGzAZBgNVBAMT
EnRscy5hdXRvbWF0dGljLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABIDF
15nq5P0AHszT13tTBmBbDmRG2EL7806dx5+QEF2vhZG1pqoUV/UxPb8SqHR3/AfM
75kRQkZlA7tpFvAi6iKjggaSMIIGjjAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMVk
T9FP2GnczCVH2l4cmGqSo0sSMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52L
FMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVu
Y3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIEmgYD
VR0RBIIEkTCCBI2CHmFyYWJlbGFtZXhpY29vZmljaWFsLmNvZGUuYmxvZ4IPY2xh
aXJkdW5sYXAuY29tghhjb25zdHJ1Y3Rpb25wb3J0Zm9saW8uY2GCD2NyZWF0aXZl
cy53b3Jrc4IPY3JpbWVpLmxhdy5ibG9ngg9ldGVuLnNwb3J0LmJsb2eCFGdvb2Rn
aXJsZ29uZXRlY2guY29tghhoYXVzdGhvbWFzd2VyZmVud2VuZy5jb22CHWluY2Vz
dHN1cnZpdm9ybGFkeWluYmxhY2suY29tgg5saXR4Y2hhbmdlLmNvbYIRbmV3ZWxs
c2NhcmFqby5jb22CD29ibGlnYXRpb25zLmNvbYIcb3JkaW5hcnlnaXJsZG9lc2Zp
bmFuY2UuYmxvZ4IQb3Vyb25seWhvcGUuYmxvZ4ITcGFpbnRlcnRhaW5tZW50LmNv
bYIZcGV0dW5pYWNpdHlxdWlsdGd1aWxkLmNvbYIbc2FyYWhqYW5laG9saXN0aWNm
aXRuZXNzLnVrgg5zZW1wbGljZTgxLmNvbYIMc2VydmluZ3MuY29tggtza2VsbGln
LmNvbYIMc3VwZXJtYXRvLmNhgh10aGUtd29ybGQtaXMtbXktcGxheWdyb3VuZC5j
YYIQdGlqdWFuYXByZXNzLmNvbYIPdGlsYnVyeWhvdXNlLmRlgg90aWxlYXJ0d29y
ay5jb22CEnRpbGxlcGVwZXJtYW5zLmNvbYIRdGlsbGl0aG9tcHNvbi5jb22CCnRp
bGxqYS5jb22CEnRscy5hdXRvbWF0dGljLmNvbYIed3d3LmFsaXZlbmVkc3R5bGUu
ZmFzaGlvbi5ibG9ngiJ3d3cuYXJhYmVsYW1leGljb29maWNpYWwuY29kZS5ibG9n
ghN3d3cuY2xhaXJkdW5sYXAuY29tghx3d3cuY29uc3RydWN0aW9ucG9ydGZvbGlv
LmNhghN3d3cuY3JlYXRpdmVzLndvcmtzgiN3d3cuY3liZXJuZXRpY3NmaWN0aW9u
LnNjaWVuY2UuYmxvZ4IYd3d3Lmdvb2RnaXJsZ29uZXRlY2guY29tgiF3d3cuaW5j
ZXN0c3Vydml2b3JsYWR5aW5ibGFjay5jb22CEnd3dy5saXR4Y2hhbmdlLmNvbYIT
d3d3Lm9ibGlnYXRpb25zLmNvbYIUd3d3Lm91cm9ubHlob3BlLmJsb2eCHXd3dy5w
ZXR1bmlhY2l0eXF1aWx0Z3VpbGQuY29tgh93d3cuc2FyYWhqYW5laG9saXN0aWNm
aXRuZXNzLnVrghJ3d3cuc2VtcGxpY2U4MS5jb22CEHd3dy5zZXJ2aW5ncy5jb22C
HXd3dy5zdGFnZXpvbmV5b3V0aHRoZWF0cmUuY29tghB3d3cuc3VwZXJtYXRvLmNh
giF3d3cudGhlLXdvcmxkLWlzLW15LXBsYXlncm91bmQuY2GCFnd3dy50aWpkc2No
cmlmdGZvbnMuYmWCFHd3dy50aWp1YW5hcHJlc3MuY29tghB3d3cudGlrYWlzZXYu
Y29tghN3d3cudGlsZWFydHdvcmsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB
AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70A
DS1yb+H61BcAAAGMttj8JwAABAMARzBFAiEAt+BF5BRFMEFQYZTa3cKv5QpYOWFt
UUpAHUdwf7jk0swCIHY5UR05fWb47W2L2JP5hF79tAInJV+5WjVVbQpQR+dUAHUA
dv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGMttj8bgAABAMARjBE
AiANpyZvQPhMOkyVYFIxF8Kzm52VUZI1Vq4yw0roi2C+twIgF7M6OW1sQh2BFERJ
LJtYd0E6nXT+USKkMEPmZRPdMIMwDQYJKoZIhvcNAQELBQADggEBAHUDfdA6wxjn
CoRUyc4sRsGmFinyCe+xAkqFD6ZeGQD5YTr9zH5owGeA77Qwzy+E5t8uSHXa3w48
9Fgsmhq5Q5nvjuGB2lr+6+dO4+xMsIUbZP9/eIvnATijQpswvU1sV0nN+2G/Tpk/
4sg280t1L1cDKdCZWRcG3xbbfG6AW15uGWAAejKhoucXZaxRBw1/WQQsIVHeDnip
4oylfGlvaEbtL5KTgBYtWGxgDZlEjdI8HncXouHHi4urKreEEMgNveJ2aj39lQHY
VoBWSNnsJQ8EN0KLVwIlcTSIGouiAywIE8jILVEs8pnBZ1y5PpnnvMVvLHTauj/0
pLMQML30DOg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEgMXXmerk/QAezNPXe1MGYFsOZEbY
QvvzTp3Hn5AQXa+FkbWmqhRX9TE9vxKodHf8B8zvmRFCRmUDu2kW8CLqIg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284911643335322389233694643120906728795802
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-29 17:32:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 17:32:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000480c5d799eae4fd001eccd3d77b5306605b0e6446d842fbf34e9dc79f90105daf8591b5a6aa1457f5313dbf12a87477fc07ccef991142466503bb6916f022ea22
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5644fd14fd869dccc2547da5e1c986a92a34b12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arabelamexicooficial.code.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clairdunlap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constructionportfolio.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creatives.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crimei.law.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eten.sport.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodgirlgonetech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hausthomaswerfenweng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incestsurvivorladyinblack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newellscarajo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obligations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordinarygirldoesfinance.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouronlyhope.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paintertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petuniacityquiltguild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarahjaneholisticfitness.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semplice81.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skellig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supermato.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-world-is-my-playground.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tijuanapress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tilburyhouse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tileartwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tillepepermans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tillithompson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tillja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alivenedstyle.fashion.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arabelamexicooficial.code.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clairdunlap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.constructionportfolio.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creatives.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyberneticsfiction.science.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodgirlgonetech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.incestsurvivorladyinblack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.litxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obligations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouronlyhope.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petuniacityquiltguild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarahjaneholisticfitness.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semplice81.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stagezoneyouththeatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supermato.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-world-is-my-playground.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tijdschriftfons.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tijuanapress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tikaisev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tileartwork.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cb6d8fc270000040300473045022100b7e045e414453041506194daddc2afe50a5839616d514a401d47707fb8e4d2cc02207639511d397d66f8ed6d8bd893f9845efdb40227255fb95a35556d0a5047e75400750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cb6d8fc6e000004030046304402200da7266f40f84c3a4c9560523117c2b39b9d9551923556ae32c34ae88b60beb7022017b33a396d6c421d811444492c9b5877413a9d74fe5122a43043e66513dd3083
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0075037dd03ac318e70a8454c9ce2c46c1a61629f209efb1024a850fa65e1900f9613afdcc7e68c06780efb430cf2f84e6df2e4875dadf0e3cf4582c9a1ab94399ef8ee181da5afeebe74ee3ec4cb0851b64ff7f788be70138a3429b30bd4d6c5749cdfb61bf4e993fe2c836f34b752f570329d099591706df16db7c6e805b5e6e1960007a32a1a2e71765ac51070d7f59042c2151de0e78a9e28ca57c696f6846ed2f929380162d586c600d99448dd23c1e7717a2e1c78b8bab2ab78410c80dbde2766a3dfd9501d856805648d9ec250f0437428b5702257134881a8ba2032c0813c8c82d512cf299c1675cb93e99e7bcc56f2c74daba3ff4a4b31030bdf40ce8