tls.automattic.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f1:41:28:94:df:1b:73:72:ea:a6:ed:be:ff:69:9d:19:b0 was issued on by Let's Encrypt.
With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=tls.automattic.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f1:41:28:94:df:1b:73:72:ea:a6:ed:be:ff:69:9d:19:b0Serial Number (int): 343431518754300267804929815244761231858096
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a0:4f:f4:ac:76:8e:c8:de:e5:7b:ce:c8:11:26:4b:e7:41:a7:cf:0c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c5:c9:e8:2b:e1:bc:06:eb:3e:c0:a8:e3:7a:e9:31:dc:84:ff:12:78
Fingerprint (sha256): d7:56:9f:80:80:96:29:47:a5:75:25:1f:29:fd:af:d5:10:58:b4:4c:bb:eb:d3:b1:31:ab:c4:d0:73:e8:a1:c6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate tls.automattic.com
51
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tls.automattic.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blog.splibrarian.com
blog.splitwise.com
splendidumpling.com
splendippity.com
spleniclymphoma.com
spli.org
splicedpersonality.com
splicenow.com
splicingropes.com
spliffmacgyver.com
splinteredkernels.com
splishsplashuk.com
splishsplish.com
split-screen-blog.com
splitboardnz.com
splitbutterfly.com
splitcrow.ca
splitdiopter.com
splitpeaksoup.com
splitriverllc.com
splitseas.com
splitterfasern.net
splittingtheadamblog.com
sploshart.com
splspokane.org
splteenmachine.com
tls.automattic.com
www.splendidumpling.com
www.splendippity.com
www.spleniclymphoma.com
www.spli.org
www.splicedpersonality.com
www.splicenow.com
www.splicingropes.com
www.spliffmacgyver.com
www.splinteredkernels.com
www.splishsplashuk.com
www.splishsplish.com
www.split-screen-blog.com
www.splitboardnz.com
www.splitbutterfly.com
www.splitcrow.ca
www.splitdiopter.com
www.splitpeaksoup.com
www.splitriverllc.com
www.splitseas.com
www.splitterfasern.net
www.splittingtheadamblog.com
www.sploshart.com
www.splspokane.org
www.splteenmachine.com
blog.splitwise.com
splendidumpling.com
splendippity.com
spleniclymphoma.com
spli.org
splicedpersonality.com
splicenow.com
splicingropes.com
spliffmacgyver.com
splinteredkernels.com
splishsplashuk.com
splishsplish.com
split-screen-blog.com
splitboardnz.com
splitbutterfly.com
splitcrow.ca
splitdiopter.com
splitpeaksoup.com
splitriverllc.com
splitseas.com
splitterfasern.net
splittingtheadamblog.com
sploshart.com
splspokane.org
splteenmachine.com
tls.automattic.com
www.splendidumpling.com
www.splendippity.com
www.spleniclymphoma.com
www.spli.org
www.splicedpersonality.com
www.splicenow.com
www.splicingropes.com
www.spliffmacgyver.com
www.splinteredkernels.com
www.splishsplashuk.com
www.splishsplish.com
www.split-screen-blog.com
www.splitboardnz.com
www.splitbutterfly.com
www.splitcrow.ca
www.splitdiopter.com
www.splitpeaksoup.com
www.splitriverllc.com
www.splitseas.com
www.splitterfasern.net
www.splittingtheadamblog.com
www.sploshart.com
www.splspokane.org
www.splteenmachine.com
Other certificates including the domain name automattic.com
(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
Certificate
The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJczCCCFugAwIBAgISA/FBKJTfG3Ny6qbtvv9pnRmwMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MzAwODUyMDNaFw0x OTEwMjgwODUyMDNaMB0xGzAZBgNVBAMTEnRscy5hdXRvbWF0dGljLmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALnmTmwm/OFhPwcMq0yWFiAuI9nj erTBo1CF1j4avNSAPyXte1BQXGDcu8jxKe0a3ZiUkj2gJs5AEF274OPM7769NbDL GFV0Qpu/F+pKhM0UOhfJ/djvIhi4gitIRW8OmFyYZACm3eTuD/bE24tsmUqYU+Y6 a7eEWdFVAfvDl80Ojj8Wpz64hicLt2WZSz+BznZITfUpREXMWBaKY23PiS+Cijlx 0x6sjcUxBdzmtFiCMcyg5U/W/mzEcMjgWNytqCSxGcVVxAsK/C7LUGDaBvk/RClv fqvAYKmBJ2E3Tvx+0rV/uMCe83C5uckef/fizy+PBLW7QmVoGMx+3FKRsO8CAwEA AaOCBn4wggZ6MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUoE/0rHaOyN7le87IESZL 50GnzwwwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzCCBDMGA1UdEQSCBCowggQmghRibG9nLnNwbGlicmFyaWFuLmNvbYIS YmxvZy5zcGxpdHdpc2UuY29tghNzcGxlbmRpZHVtcGxpbmcuY29tghBzcGxlbmRp cHBpdHkuY29tghNzcGxlbmljbHltcGhvbWEuY29tgghzcGxpLm9yZ4IWc3BsaWNl ZHBlcnNvbmFsaXR5LmNvbYINc3BsaWNlbm93LmNvbYIRc3BsaWNpbmdyb3Blcy5j b22CEnNwbGlmZm1hY2d5dmVyLmNvbYIVc3BsaW50ZXJlZGtlcm5lbHMuY29tghJz cGxpc2hzcGxhc2h1ay5jb22CEHNwbGlzaHNwbGlzaC5jb22CFXNwbGl0LXNjcmVl bi1ibG9nLmNvbYIQc3BsaXRib2FyZG56LmNvbYISc3BsaXRidXR0ZXJmbHkuY29t ggxzcGxpdGNyb3cuY2GCEHNwbGl0ZGlvcHRlci5jb22CEXNwbGl0cGVha3NvdXAu Y29tghFzcGxpdHJpdmVybGxjLmNvbYINc3BsaXRzZWFzLmNvbYISc3BsaXR0ZXJm YXNlcm4ubmV0ghhzcGxpdHRpbmd0aGVhZGFtYmxvZy5jb22CDXNwbG9zaGFydC5j b22CDnNwbHNwb2thbmUub3JnghJzcGx0ZWVubWFjaGluZS5jb22CEnRscy5hdXRv bWF0dGljLmNvbYIXd3d3LnNwbGVuZGlkdW1wbGluZy5jb22CFHd3dy5zcGxlbmRp cHBpdHkuY29tghd3d3cuc3BsZW5pY2x5bXBob21hLmNvbYIMd3d3LnNwbGkub3Jn ghp3d3cuc3BsaWNlZHBlcnNvbmFsaXR5LmNvbYIRd3d3LnNwbGljZW5vdy5jb22C FXd3dy5zcGxpY2luZ3JvcGVzLmNvbYIWd3d3LnNwbGlmZm1hY2d5dmVyLmNvbYIZ d3d3LnNwbGludGVyZWRrZXJuZWxzLmNvbYIWd3d3LnNwbGlzaHNwbGFzaHVrLmNv bYIUd3d3LnNwbGlzaHNwbGlzaC5jb22CGXd3dy5zcGxpdC1zY3JlZW4tYmxvZy5j b22CFHd3dy5zcGxpdGJvYXJkbnouY29tghZ3d3cuc3BsaXRidXR0ZXJmbHkuY29t ghB3d3cuc3BsaXRjcm93LmNhghR3d3cuc3BsaXRkaW9wdGVyLmNvbYIVd3d3LnNw bGl0cGVha3NvdXAuY29tghV3d3cuc3BsaXRyaXZlcmxsYy5jb22CEXd3dy5zcGxp dHNlYXMuY29tghZ3d3cuc3BsaXR0ZXJmYXNlcm4ubmV0ghx3d3cuc3BsaXR0aW5n dGhlYWRhbWJsb2cuY29tghF3d3cuc3Bsb3NoYXJ0LmNvbYISd3d3LnNwbHNwb2th bmUub3JnghZ3d3cuc3BsdGVlbm1hY2hpbmUuY29tMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA4mlLribo6UAJ 6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFsQktBJwAABAMARjBEAiAz4ByJo0eN MclBT8ya9D2oCEaO2344PGgJUEgoOyvOFQIgYcn2ExbWZN3eEVGUQMeVL4MJAB3Q 9K92Mqt8rYnXEZ0AdgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAA AWxCS0EWAAAEAwBHMEUCIESlSUqamj9QqQ8yT+CTDfe8VhWBVleUNV8eapgHP7S9 AiEA6S04OCaCsnaTFR0oPypqJUBCj19hwSc+vnTtyLznLFMwDQYJKoZIhvcNAQEL BQADggEBABWAgzF6oi3/2RtU53YZHdsUSAtsAf29CLlrOOTzTuEQ07R5Qlty9FWs JTR+0P65N7k4oDgogjOsx3zFA6KlELSgJQMNV816HM6mt30XZUBh9K/yPLaRylni ZJGUG0U3/mT5Yg0JpytODEQwqS3lCZ+n/0YmLScixn6kZH52wSZvEHx14GUEtNM4 cyITqMNlZg5yeOApwdRsPvMk4EL4Cr6zbpXx3LAEQ/HGTper95kHeCr4CICHZSUK XgXBrdHcMr+dDrmNwzSXYLEYoCcBCYf42+cRGb9E348AkPH8/ydyVV4NDSxGEf8y 6xQ1efn0MqiJOJnT5x6MLqDc3W6s0/Y= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueZObCb84WE/BwyrTJYW IC4j2eN6tMGjUIXWPhq81IA/Je17UFBcYNy7yPEp7RrdmJSSPaAmzkAQXbvg48zv vr01sMsYVXRCm78X6kqEzRQ6F8n92O8iGLiCK0hFbw6YXJhkAKbd5O4P9sTbi2yZ SphT5jprt4RZ0VUB+8OXzQ6OPxanPriGJwu3ZZlLP4HOdkhN9SlERcxYFopjbc+J L4KKOXHTHqyNxTEF3Oa0WIIxzKDlT9b+bMRwyOBY3K2oJLEZxVXECwr8LstQYNoG +T9EKW9+q8BgqYEnYTdO/H7StX+4wJ7zcLm5yR5/9+LPL48EtbtCZWgYzH7cUpGw 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 343431518754300267804929815244761231858096 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 08:52:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 08:52:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23467654706624803580115988126092992747506578877069159006646755212008789870262144879225989712279594398111526192396812982032823024812871712892048331121112889680485019073524955609318351785994446253670009255867068225558856723525720683234903035731476175512062778282109651952538563728455114748827794064613068817718914495704447242701810190992207438476511224413069992567968039275304227716242103308587262548338298583209985772036003107458953820292024261243792590619953148368032133882720486426801813326135740478076968699686849956634844123278508840380828009185204951723361128923548876196185100621530136059402677043627458340958447 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a04ff4ac768ec8dee57bcec811264be741a7cf0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1066 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.splibrarian.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.splitwise.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splendidumpling.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splendippity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spleniclymphoma.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spli.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splicedpersonality.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splicenow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splicingropes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spliffmacgyver.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splinteredkernels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splishsplashuk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splishsplish.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'split-screen-blog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitboardnz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitbutterfly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitcrow.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitdiopter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitpeaksoup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitriverllc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitseas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitterfasern.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splittingtheadamblog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sploshart.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splspokane.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splteenmachine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splendidumpling.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splendippity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spleniclymphoma.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spli.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splicedpersonality.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splicenow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splicingropes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spliffmacgyver.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splinteredkernels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splishsplashuk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splishsplish.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.split-screen-blog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitboardnz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitbutterfly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitcrow.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitdiopter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitpeaksoup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitriverllc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitseas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitterfasern.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splittingtheadamblog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sploshart.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splspokane.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splteenmachine.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c424b41270000040300463044022033e01c89a3478d31c9414fcc9af43da808468edb7e383c68095048283b2bce15022061c9f61316d664ddde11519440c7952f8309001dd0f4af7632ab7cad89d7119d00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c424b41160000040300473045022044a5494a9a9a3f50a90f324fe0930df7bc561581565794355f1e6a98073fb4bd022100e92d38382682b27693151d283f2a6a2540428f5f61c1273ebe74edc8bce72c53 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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