tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ee:33:f1:9f:47:57:39:db:88:af:26:47:90:2a:c9:fc:b9 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:33:f1:9f:47:57:39:db:88:af:26:47:90:2a:c9:fc:b9
Serial Number (int): 342393106324347353507605603313812121451705
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0b:32:1a:83:29:d5:11:c7:21:bf:17:a8:1d:a7:4a:83:fb:25:20:7f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0a:1d:9e:db:80:b3:e5:cf:27:33:3c:53:7c:fa:de:df:e8:d6:fe:62
Fingerprint (sha256): f1:85:4c:79:24:e6:77:ff:21:ce:a5:07:ce:0f:54:bd:58:46:4b:71:5d:9d:6a:29:12:e2:c1:6b:65:c1:54:c5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cienaguaspta.org
cienmilpedaladas.com
cigene.no
cimassotherapiechambly.com
cimowrites.com
cincopalabras.com
cincyfitnessleague.com
cindywoodforcountyclerk.com
cinefilocronico.com
cinephilion.net
cinziacolman.com
ciphercanyon.com
circlesandsticks.com
circlesquarelife.com
circlesquarelife.org
circusvagabond.com
cisxiaohua.org
cithelpnow.com
citisci.org
citizenshipcyprus.com
city247.net
citymusiclive.com
cityskippergal.com
civilnomics.com
civilnomics.org
tls.automattic.com
www.cienaguaspta.org
www.cienmilpedaladas.com
www.cigene.no
www.cimassotherapiechambly.com
www.cimowrites.com
www.cincopalabras.com
www.cincyfitnessleague.com
www.cindywoodforcountyclerk.com
www.cinefilocronico.com
www.cinephilion.net
www.cinziacolman.com
www.ciphercanyon.com
www.circlesandsticks.com
www.circlesquarelife.com
www.circlesquarelife.org
www.circusvagabond.com
www.cisxiaohua.org
www.cithelpnow.com
www.citisci.org
www.citizenshipcyprus.com
www.city247.net
www.citymusiclive.com
www.cityskippergal.com
www.civilnomics.com
www.civilnomics.org

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJiTCCCHGgAwIBAgISA+4z8Z9HVznbiK8mR5Aqyfy5MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMzEwNTAwNDhaFw0y
MDAzMzAwNTAwNDhaMB0xGzAZBgNVBAMTEnRscy5hdXRvbWF0dGljLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKeqjnGWbiXZ8D62L2GrjEXZiV5W
MlWtFLyApLMNrzq7/b7pnq6/MaBczF/7VPTxQyhH1K9yQA5tiq5jVgwkvstGbgFg
Gvsvxu6iV7MNAOIcWlOfwjfx/oMvyyWsTgkJol2D4m9AWHRbg9iKcPr4SvNgCBSU
0w1vH6DwCoTEvM4uf0LjlrDMDJmXwCKZFBfeTatUOfAlfW9aoRIB9/O6ZKHofwwI
w7YzP6ybQCjPV+wltd2nn2c4pw2LoDxRO8Ba7SOadH/VsSgg2XwU1GnJ2mMZ0Y52
TqP5sbwbddtRzBsA5stvDx7i2/60fXzUEPhgcqEFj9OFL/5+lYSO8vfeOIsCAwEA
AaOCBpQwggaQMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUCzIagynVEcchvxeoHadK
g/slIH8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCBEcGA1UdEQSCBD4wggQ6ghBjaWVuYWd1YXNwdGEub3JnghRjaWVu
bWlscGVkYWxhZGFzLmNvbYIJY2lnZW5lLm5vghpjaW1hc3NvdGhlcmFwaWVjaGFt
Ymx5LmNvbYIOY2ltb3dyaXRlcy5jb22CEWNpbmNvcGFsYWJyYXMuY29tghZjaW5j
eWZpdG5lc3NsZWFndWUuY29tghtjaW5keXdvb2Rmb3Jjb3VudHljbGVyay5jb22C
E2NpbmVmaWxvY3Jvbmljby5jb22CD2NpbmVwaGlsaW9uLm5ldIIQY2luemlhY29s
bWFuLmNvbYIQY2lwaGVyY2FueW9uLmNvbYIUY2lyY2xlc2FuZHN0aWNrcy5jb22C
FGNpcmNsZXNxdWFyZWxpZmUuY29tghRjaXJjbGVzcXVhcmVsaWZlLm9yZ4ISY2ly
Y3VzdmFnYWJvbmQuY29tgg5jaXN4aWFvaHVhLm9yZ4IOY2l0aGVscG5vdy5jb22C
C2NpdGlzY2kub3JnghVjaXRpemVuc2hpcGN5cHJ1cy5jb22CC2NpdHkyNDcubmV0
ghFjaXR5bXVzaWNsaXZlLmNvbYISY2l0eXNraXBwZXJnYWwuY29tgg9jaXZpbG5v
bWljcy5jb22CD2Npdmlsbm9taWNzLm9yZ4ISdGxzLmF1dG9tYXR0aWMuY29tghR3
d3cuY2llbmFndWFzcHRhLm9yZ4IYd3d3LmNpZW5taWxwZWRhbGFkYXMuY29tgg13
d3cuY2lnZW5lLm5vgh53d3cuY2ltYXNzb3RoZXJhcGllY2hhbWJseS5jb22CEnd3
dy5jaW1vd3JpdGVzLmNvbYIVd3d3LmNpbmNvcGFsYWJyYXMuY29tghp3d3cuY2lu
Y3lmaXRuZXNzbGVhZ3VlLmNvbYIfd3d3LmNpbmR5d29vZGZvcmNvdW50eWNsZXJr
LmNvbYIXd3d3LmNpbmVmaWxvY3Jvbmljby5jb22CE3d3dy5jaW5lcGhpbGlvbi5u
ZXSCFHd3dy5jaW56aWFjb2xtYW4uY29tghR3d3cuY2lwaGVyY2FueW9uLmNvbYIY
d3d3LmNpcmNsZXNhbmRzdGlja3MuY29tghh3d3cuY2lyY2xlc3F1YXJlbGlmZS5j
b22CGHd3dy5jaXJjbGVzcXVhcmVsaWZlLm9yZ4IWd3d3LmNpcmN1c3ZhZ2Fib25k
LmNvbYISd3d3LmNpc3hpYW9odWEub3JnghJ3d3cuY2l0aGVscG5vdy5jb22CD3d3
dy5jaXRpc2NpLm9yZ4IZd3d3LmNpdGl6ZW5zaGlwY3lwcnVzLmNvbYIPd3d3LmNp
dHkyNDcubmV0ghV3d3cuY2l0eW11c2ljbGl2ZS5jb22CFnd3dy5jaXR5c2tpcHBl
cmdhbC5jb22CE3d3dy5jaXZpbG5vbWljcy5jb22CE3d3dy5jaXZpbG5vbWljcy5v
cmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQC
BIH2BIHzAPEAdgAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAW9a
iuJUAAAEAwBHMEUCIDLBeaIUJlTVP3BIA+L3SjIHBF2ojfbyYejOYrJVZ65AAiEA
/LRlchzlhi55B1gqkPFDVHSwE3lfEu9UTisjwlUEhnwAdwBvU3asMfAxGdiZAKRR
Ff93FRwR2QLBACkGjbIImjfZEwAAAW9aiuLnAAAEAwBIMEYCIQDdm81UiOXMTjGS
+MPie3tptvdpEbhY347/UJwbISo1PgIhAKXI6atJjVI7F4W5jssa/2yRC/eF6ybB
3d+/UvjIbM+6MA0GCSqGSIb3DQEBCwUAA4IBAQAYimjN4PNHbICX/r17sR9T0KNo
juQT9SW2nQPAj8voXi1QPueHsrYLjJX7lKNra5P+EQfPiErRfM6R6Zc69qJD9+T8
vvsYUsgQHAvJqGQyA/zNHIDyzhFpYqETLYS5q7Uu0B8Bva6KjbAujgmOON2sRmPJ
/ZpuQgWaKHbzCasHKVFR/Uujt8e5v1UlBbHDyrKk66d7YAzZ5FqHUO/FvhmxSlVb
eIdNHYoeJU4SdAy5S5RozYGUS8fUxNn8yKrOWQCNLLKwnp6jJvn1ttAlDPl8cYNk
JI5oEZjS1dxEOxcJbUaMjrXeGerTOLxmpNoruSR54Eyyz+/iDbCXJIlzePhq
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6qOcZZuJdnwPrYvYauM
RdmJXlYyVa0UvICksw2vOrv9vumerr8xoFzMX/tU9PFDKEfUr3JADm2KrmNWDCS+
y0ZuAWAa+y/G7qJXsw0A4hxaU5/CN/H+gy/LJaxOCQmiXYPib0BYdFuD2Ipw+vhK
82AIFJTTDW8foPAKhMS8zi5/QuOWsMwMmZfAIpkUF95Nq1Q58CV9b1qhEgH387pk
oeh/DAjDtjM/rJtAKM9X7CW13aefZzinDYugPFE7wFrtI5p0f9WxKCDZfBTUacna
YxnRjnZOo/mxvBt121HMGwDmy28PHuLb/rR9fNQQ+GByoQWP04Uv/n6VhI7y9944
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342393106324347353507605603313812121451705
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 05:00:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 05:00:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21165901435001501198271685745932523597224327582265589871745106712726448447770364748216061582931015654887074296103113939600810857624083551069248480416724581485904696147081548681483817974766517034786805680121436905909059426620597450152746489230754487579089249556912365382270382824478665866909600841892590065977891397396692438542269277044676834284279829890618142159086842235390057921625944192621469331213569974398491568947062971852223684526334895360541905721391404073222233194816653708990737738647012117196034894460411456628151299720010520213383151758556049221563175293804584638036185983775864296351287540028224757971083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b321a8329d511c721bf17a81da74a83fb25207f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1086 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cienaguaspta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cienmilpedaladas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cigene.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimassotherapiechambly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimowrites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cincopalabras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cincyfitnessleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cindywoodforcountyclerk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinefilocronico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinephilion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinziacolman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciphercanyon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circlesandsticks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circlesquarelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circlesquarelife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circusvagabond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisxiaohua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cithelpnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citisci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizenshipcyprus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'city247.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citymusiclive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityskippergal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilnomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilnomics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cienaguaspta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cienmilpedaladas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cigene.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cimassotherapiechambly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cimowrites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cincopalabras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cincyfitnessleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cindywoodforcountyclerk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinefilocronico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinephilion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinziacolman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciphercanyon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circlesandsticks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circlesquarelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circlesquarelife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circusvagabond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cisxiaohua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cithelpnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citisci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citizenshipcyprus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.city247.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citymusiclive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityskippergal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilnomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilnomics.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f5a8ae2540000040300473045022032c179a2142654d53f704803e2f74a3207045da88df6f261e8ce62b25567ae40022100fcb465721ce5862e7907582a90f1435474b013795f12ef544e2b23c25504867c0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f5a8ae2e70000040300483046022100dd9bcd5488e5cc4e3192f8c3e27b7b69b6f76911b858df8eff509c1b212a353e022100a5c8e9ab498d523b1785b98ecb1aff6c910bf785eb26c1dddfbf52f8c86ccfba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00188a68cde0f3476c8097febd7bb11f53d0a3688ee413f525b69d03c08fcbe85e2d503ee787b2b60b8c95fb94a36b6b93fe1107cf884ad17cce91e9973af6a243f7e4fcbefb1852c8101c0bc9a8643203fccd1c80f2ce116962a1132d84b9abb52ed01f01bdae8a8db02e8e098e38ddac4663c9fd9a6e42059a2876f309ab07295151fd4ba3b7c7b9bf552505b1c3cab2a4eba77b600cd9e45a8750efc5be19b14a555b78874d1d8a1e254e12740cb94b9468cd81944bc7d4c4d9fcc8aace59008d2cb2b09e9ea326f9f5b6d0250cf97c718364248e681198d2d5dc443b17096d468c8eb5de19ead338bc66a4da2bb92479e04cb2cfefe20db09724897378f86a