tls.automattic.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:97:38:b5:78:51:0b:ad:72:e3:2c:b0:7e:ec:08:1a:86:4b was issued on by Let's Encrypt.
With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=tls.automattic.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:97:38:b5:78:51:0b:ad:72:e3:2c:b0:7e:ec:08:1a:86:4bSerial Number (int): 312794874214148045639195741955514091341387
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d7:71:c5:a9:c6:a6:e7:f9:28:29:e2:48:a9:84:01:e0:27:c7:37:68
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 59:55:39:50:04:2e:ac:62:ea:79:e2:e2:c5:1d:81:24:a3:f1:49:25
Fingerprint (sha256): f5:7f:ad:bb:5b:7b:84:5c:fd:c2:c2:d0:47:2f:35:5d:40:37:57:81:28:e5:05:5c:66:70:34:34:62:0f:a5:81
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate tls.automattic.com
51
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tls.automattic.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rumpusbrain.com
rumpusonflr.com
rumpusparable.com
rumpusparableart.com
rumpydog.com
rumrazor.com
rumrmarketing.nl
rumrockandgrogs.com
rumrunnerfestival.com
rumrunnerkitty.com
rumsaway.com
rumsennews.org
rumsonfairhavenhome.com
rumtreiben.at
rumtumtiger.com
rumvictoria.com
rumytaulu.com
run-a-day-challenge.com
run-becca-run.com
run-in-progress.com
run-mary-run.com
run-mommy-run.com
run-right.ca
run-sew-read.com
run-that.com
tls.automattic.com
www.rumpusonflr.com
www.rumpusparable.com
www.rumpusparableart.com
www.rumpydog.com
www.rumrazor.com
www.rumrmarketing.nl
www.rumrockandgrogs.com
www.rumrunnerfestival.com
www.rumrunnerkitty.com
www.rumsaway.com
www.rumsennews.org
www.rumsonfairhavenhome.com
www.rumtreiben.at
www.rumtumtiger.com
www.rumvictoria.com
www.rumytaulu.com
www.run-a-day-challenge.com
www.run-becca-run.com
www.run-in-progress.com
www.run-mary-run.com
www.run-mommy-run.com
www.run-right.ca
www.run-sew-read.com
www.run-that.com
www.run-the-streets.com
rumpusonflr.com
rumpusparable.com
rumpusparableart.com
rumpydog.com
rumrazor.com
rumrmarketing.nl
rumrockandgrogs.com
rumrunnerfestival.com
rumrunnerkitty.com
rumsaway.com
rumsennews.org
rumsonfairhavenhome.com
rumtreiben.at
rumtumtiger.com
rumvictoria.com
rumytaulu.com
run-a-day-challenge.com
run-becca-run.com
run-in-progress.com
run-mary-run.com
run-mommy-run.com
run-right.ca
run-sew-read.com
run-that.com
tls.automattic.com
www.rumpusonflr.com
www.rumpusparable.com
www.rumpusparableart.com
www.rumpydog.com
www.rumrazor.com
www.rumrmarketing.nl
www.rumrockandgrogs.com
www.rumrunnerfestival.com
www.rumrunnerkitty.com
www.rumsaway.com
www.rumsennews.org
www.rumsonfairhavenhome.com
www.rumtreiben.at
www.rumtumtiger.com
www.rumvictoria.com
www.rumytaulu.com
www.run-a-day-challenge.com
www.run-becca-run.com
www.run-in-progress.com
www.run-mary-run.com
www.run-mommy-run.com
www.run-right.ca
www.run-sew-read.com
www.run-that.com
www.run-the-streets.com
Other certificates including the domain name automattic.com
(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
Certificate
The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIII/jCCB+agAwIBAgISA5c4tXhRC61y4yywfuwIGoZLMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA2MTQxMDEzMDBaFw0x NjA5MTIxMDEzMDBaMB0xGzAZBgNVBAMTEnRscy5hdXRvbWF0dGljLmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALTdTOMUuln/9YMlVe+zW6TC/IPW OY1HntocbzBQZ2Kg66aoZ+B5TAhZYzEy4cKlMrhtWG2vwbqxadHAVJoeD+88IDy7 Kx6C8K2zpl35tru2ij6BF2xgUMKODu3yvXu3BGbW91Vp44iLd1DJOzzwQyilurIl dQk5tYOATij4HVSkLOIvOElR0IBRdJNZaGzaieza+0GHouHCZ4AIFsZANfIu0xhY NLomiybnFvmPi7lgTblckne6dJa55eZl3a6kw741SAO0c8eaRiT8KbS672eMJZe5 CqVIaT6WmzJGBR+0wNU7oOVBEdpWXJdrSO+Zf9RHWNCi5wFeX1pKfg9KVckCAwEA AaOCBgkwggYFMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU13HFqcam5/koKeJIqYQB 4CfHN2gwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYBBQUH AQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wggQRBgNVHREEggQIMIIEBIIPcnVtcHVzYnJhaW4uY29tgg9ydW1w dXNvbmZsci5jb22CEXJ1bXB1c3BhcmFibGUuY29tghRydW1wdXNwYXJhYmxlYXJ0 LmNvbYIMcnVtcHlkb2cuY29tggxydW1yYXpvci5jb22CEHJ1bXJtYXJrZXRpbmcu bmyCE3J1bXJvY2thbmRncm9ncy5jb22CFXJ1bXJ1bm5lcmZlc3RpdmFsLmNvbYIS cnVtcnVubmVya2l0dHkuY29tggxydW1zYXdheS5jb22CDnJ1bXNlbm5ld3Mub3Jn ghdydW1zb25mYWlyaGF2ZW5ob21lLmNvbYINcnVtdHJlaWJlbi5hdIIPcnVtdHVt dGlnZXIuY29tgg9ydW12aWN0b3JpYS5jb22CDXJ1bXl0YXVsdS5jb22CF3J1bi1h LWRheS1jaGFsbGVuZ2UuY29tghFydW4tYmVjY2EtcnVuLmNvbYITcnVuLWluLXBy b2dyZXNzLmNvbYIQcnVuLW1hcnktcnVuLmNvbYIRcnVuLW1vbW15LXJ1bi5jb22C DHJ1bi1yaWdodC5jYYIQcnVuLXNldy1yZWFkLmNvbYIMcnVuLXRoYXQuY29tghJ0 bHMuYXV0b21hdHRpYy5jb22CE3d3dy5ydW1wdXNvbmZsci5jb22CFXd3dy5ydW1w dXNwYXJhYmxlLmNvbYIYd3d3LnJ1bXB1c3BhcmFibGVhcnQuY29tghB3d3cucnVt cHlkb2cuY29tghB3d3cucnVtcmF6b3IuY29tghR3d3cucnVtcm1hcmtldGluZy5u bIIXd3d3LnJ1bXJvY2thbmRncm9ncy5jb22CGXd3dy5ydW1ydW5uZXJmZXN0aXZh bC5jb22CFnd3dy5ydW1ydW5uZXJraXR0eS5jb22CEHd3dy5ydW1zYXdheS5jb22C End3dy5ydW1zZW5uZXdzLm9yZ4Ibd3d3LnJ1bXNvbmZhaXJoYXZlbmhvbWUuY29t ghF3d3cucnVtdHJlaWJlbi5hdIITd3d3LnJ1bXR1bXRpZ2VyLmNvbYITd3d3LnJ1 bXZpY3RvcmlhLmNvbYIRd3d3LnJ1bXl0YXVsdS5jb22CG3d3dy5ydW4tYS1kYXkt Y2hhbGxlbmdlLmNvbYIVd3d3LnJ1bi1iZWNjYS1ydW4uY29tghd3d3cucnVuLWlu LXByb2dyZXNzLmNvbYIUd3d3LnJ1bi1tYXJ5LXJ1bi5jb22CFXd3dy5ydW4tbW9t bXktcnVuLmNvbYIQd3d3LnJ1bi1yaWdodC5jYYIUd3d3LnJ1bi1zZXctcmVhZC5j b22CEHd3dy5ydW4tdGhhdC5jb22CF3d3dy5ydW4tdGhlLXN0cmVldHMuY29tMIH+ BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGe DIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBS ZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBD ZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5v cmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAGfNUjdkw2x/NPyGTAuj m5jKhPI8nBH6aNtoqcFKhvEa1P+RHL7qj52EZm/UPYaZKRaaC5X9usxb5bTQKQOx bVklSb8VfcXyIFZoRGUuzcvqWKruNlj/g4tzYDcRZc/cYb+Sw4PhYVJI/0HdsdRa +SVkbbl3pPDNgTOcuIuPN0Rz0aKui7Xq/qXSzYZneTkLYPVqRVdsuoparEjZZg9z 3M1RWUtRppVI77pBhZLmlZOpjPWDPJSWABAJ8GRHE8bPWHCVfbjTDXTHLgfIfGMc nR4eqZ5czf8TjOE3TJtb+54a83dTnH7nGX4a693uL4yQDKN1UwD2EBKxSFGw+XHu puY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN1M4xS6Wf/1gyVV77Nb pML8g9Y5jUee2hxvMFBnYqDrpqhn4HlMCFljMTLhwqUyuG1Yba/BurFp0cBUmh4P 7zwgPLsrHoLwrbOmXfm2u7aKPoEXbGBQwo4O7fK9e7cEZtb3VWnjiIt3UMk7PPBD KKW6siV1CTm1g4BOKPgdVKQs4i84SVHQgFF0k1lobNqJ7Nr7QYei4cJngAgWxkA1 8i7TGFg0uiaLJucW+Y+LuWBNuVySd7p0lrnl5mXdrqTDvjVIA7Rzx5pGJPwptLrv Z4wll7kKpUhpPpabMkYFH7TA1Tug5UER2lZcl2tI75l/1EdY0KLnAV5fWkp+D0pV yQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 312794874214148045639195741955514091341387 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-14 10:13:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-12 10:13:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22832022158763845919074448209866138571995493187377050990299597118367444105671032068535393171657642099609722759929926034184752557212265899632719881160594586413513451502943889382058977627766519089724427001080868561952971674527746959473950430357913738886665568000181533370564426888051094047259394634254725303175066733131275244014145902321483059993372785681291136708915470246667075865330656779797751298284304896824175994452888721578104003192707139208387027441583712348604139957843521390060127776835360300108311384178490401347279330623257715953256473494340488711924683642924937893470408565830723863077797483477834931000777 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d771c5a9c6a6e7f92829e248a98401e027c73768 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1032 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumpusbrain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumpusonflr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumpusparable.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumpusparableart.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumpydog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumrazor.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumrmarketing.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumrockandgrogs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumrunnerfestival.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumrunnerkitty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumsaway.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumsennews.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumsonfairhavenhome.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumtreiben.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumtumtiger.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumvictoria.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumytaulu.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'run-a-day-challenge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'run-becca-run.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'run-in-progress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'run-mary-run.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'run-mommy-run.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'run-right.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'run-sew-read.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'run-that.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumpusonflr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumpusparable.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumpusparableart.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumpydog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumrazor.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumrmarketing.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumrockandgrogs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumrunnerfestival.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumrunnerkitty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumsaway.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumsennews.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumsonfairhavenhome.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumtreiben.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumtumtiger.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumvictoria.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumytaulu.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-a-day-challenge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-becca-run.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-in-progress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-mary-run.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-mommy-run.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-right.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-sew-read.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-that.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run-the-streets.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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