tls.automattic.com

Issued by R3

About this certificate

This digital certificate with serial number 04:9d:c7:44:2c:09:ff:a5:f7:80:aa:d3:74:5b:48:23:30:5e was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:9d:c7:44:2c:09:ff:a5:f7:80:aa:d3:74:5b:48:23:30:5e
Serial Number (int): 402138345674194099319596579974403156291678
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: de:29:b0:5d:77:de:3a:4b:c8:90:07:93:a9:9e:91:43:ee:3f:f8:76
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a9:3e:09:05:f4:59:b3:29:61:53:a9:0a:9f:b4:27:ba:1d:67:68:7d
Fingerprint (sha256): fa:7e:68:84:ed:39:97:75:0c:1d:b6:c8:26:b2:56:0a:2c:5c:bb:cd:d6:d7:cf:56:b8:b7:62:a4:25:0d:b1:39

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bookishbrandi.com
breaking.water.blog
concept.poetry.blog
cultured.water.blog
dorasease14kxk.water.blog
end.water.blog
icen.water.blog
ipad.water.blog
noisenoise.online
outsideroutbox.com
photopreserve.org
royaltycons.com
seebagsgo.com
stallionsaustralasia.com
suaritmacihazi.water.blog
suliman.water.blog
tls.automattic.com
travel-ous.ca
twenty-something-wisdom.com
type1shine.com
underwater-asia.com
webdesprenoi.blog
weknowwhatworks.com
wenbrands.com
westernheartandhome.com
westmorelanddemolay.com
whatsyourjob.blog
windkisses.com
www.bookishbrandi.com
www.castor.water.blog
www.cultured.water.blog
www.emma.water.blog
www.icen.water.blog
www.nirvana-este-tic.com
www.nvvoiceprogress.water.blog
www.outsideroutbox.com
www.pentictonflyfishers.com
www.photopreserve.org
www.riverorsq284.water.blog
www.royaltycons.com
www.savewatersavelife.water.blog
www.seebagsgo.com
www.sonalitte.be
www.stallionsaustralasia.com
www.therobotworld.com
www.travel-ous.ca
www.waynehooper.blog
www.wenbrands.com
www.westernheartandhome.com
www.wiltshire.partners
www.wimperextensions-stadskanaal.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIiDCCB3CgAwIBAgISBJ3HRCwJ/6X3gKrTdFtIIzBeMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA2MDUxNDQ2NTRaFw0yNDA5MDMxNDQ2NTNaMB0xGzAZBgNVBAMT
EnRscy5hdXRvbWF0dGljLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABCDf
LO7p0Lbkh0kHhw34v0Qu6fcw6pA6LMTP8ljTFMbJitwopEEoWzXZdLQOKfJddWJx
IraKhcXfy56ylLsIB1KjggZ2MIIGcjAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFN4p
sF133jpLyJAHk6mekUPuP/h2MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52L
FMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVu
Y3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIEfAYD
VR0RBIIEczCCBG+CEWJvb2tpc2hicmFuZGkuY29tghNicmVha2luZy53YXRlci5i
bG9nghNjb25jZXB0LnBvZXRyeS5ibG9nghNjdWx0dXJlZC53YXRlci5ibG9nghlk
b3Jhc2Vhc2UxNGt4ay53YXRlci5ibG9ngg5lbmQud2F0ZXIuYmxvZ4IPaWNlbi53
YXRlci5ibG9ngg9pcGFkLndhdGVyLmJsb2eCEW5vaXNlbm9pc2Uub25saW5lghJv
dXRzaWRlcm91dGJveC5jb22CEXBob3RvcHJlc2VydmUub3Jngg9yb3lhbHR5Y29u
cy5jb22CDXNlZWJhZ3Nnby5jb22CGHN0YWxsaW9uc2F1c3RyYWxhc2lhLmNvbYIZ
c3Vhcml0bWFjaWhhemkud2F0ZXIuYmxvZ4ISc3VsaW1hbi53YXRlci5ibG9nghJ0
bHMuYXV0b21hdHRpYy5jb22CDXRyYXZlbC1vdXMuY2GCG3R3ZW50eS1zb21ldGhp
bmctd2lzZG9tLmNvbYIOdHlwZTFzaGluZS5jb22CE3VuZGVyd2F0ZXItYXNpYS5j
b22CEXdlYmRlc3ByZW5vaS5ibG9nghN3ZWtub3d3aGF0d29ya3MuY29tgg13ZW5i
cmFuZHMuY29tghd3ZXN0ZXJuaGVhcnRhbmRob21lLmNvbYIXd2VzdG1vcmVsYW5k
ZGVtb2xheS5jb22CEXdoYXRzeW91cmpvYi5ibG9ngg53aW5ka2lzc2VzLmNvbYIV
d3d3LmJvb2tpc2hicmFuZGkuY29tghV3d3cuY2FzdG9yLndhdGVyLmJsb2eCF3d3
dy5jdWx0dXJlZC53YXRlci5ibG9nghN3d3cuZW1tYS53YXRlci5ibG9nghN3d3cu
aWNlbi53YXRlci5ibG9nghh3d3cubmlydmFuYS1lc3RlLXRpYy5jb22CHnd3dy5u
dnZvaWNlcHJvZ3Jlc3Mud2F0ZXIuYmxvZ4IWd3d3Lm91dHNpZGVyb3V0Ym94LmNv
bYIbd3d3LnBlbnRpY3RvbmZseWZpc2hlcnMuY29tghV3d3cucGhvdG9wcmVzZXJ2
ZS5vcmeCG3d3dy5yaXZlcm9yc3EyODQud2F0ZXIuYmxvZ4ITd3d3LnJveWFsdHlj
b25zLmNvbYIgd3d3LnNhdmV3YXRlcnNhdmVsaWZlLndhdGVyLmJsb2eCEXd3dy5z
ZWViYWdzZ28uY29tghB3d3cuc29uYWxpdHRlLmJlghx3d3cuc3RhbGxpb25zYXVz
dHJhbGFzaWEuY29tghV3d3cudGhlcm9ib3R3b3JsZC5jb22CEXd3dy50cmF2ZWwt
b3VzLmNhghR3d3cud2F5bmVob29wZXIuYmxvZ4IRd3d3LndlbmJyYW5kcy5jb22C
G3d3dy53ZXN0ZXJuaGVhcnRhbmRob21lLmNvbYIWd3d3LndpbHRzaGlyZS5wYXJ0
bmVyc4Ikd3d3LndpbXBlcmV4dGVuc2lvbnMtc3RhZHNrYW5hYWwuY29tMBMGA1Ud
IAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAGZgQcQnw
1lIuMIDSnj9ku4NuKMz5D1KO7t/OSj8WtMoAAAGP6RTy7gAABAMARzBFAiAZUt+s
e5vccZ44ZW+HvpxKAhi/k7PnsHHOrwhd8D+z5AIhAL75PEqXAlwYDAqPv0AcAyVQ
vXFILg9CgtO2DMYbJiKVAHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xa
OnQAAAGP6RTy+AAABAMASDBGAiEAnc9pd9kpVLgxG/YauIv9h0x9F0hXj0lh0IwL
kmS70Z0CIQC1IxjG/nuEMR8gUlYjdvfX5sLuXHwHlS9n8GtpsgndizANBgkqhkiG
9w0BAQsFAAOCAQEAVH3HJnInoNbIyEKLpA1cSK6wqqHRZX2iZ+F5E+MC153djM3A
aI498HxBYFwRC3912uSDkSJQT3Yt+dhc3zHq/WGUNeFsAsZfy5hYM1m8PgP0e4+s
MjtQz1uKKB7koEc397do7Sz5CSm4X5PqvhaUGCEQUI6jBxCYrWVYjl/Z/rEJJmxx
cT7qdHbDDOESTdVXkJReKtfkHNIFG+T4yCmU8slfdFcynD5OCYkFMgbInYagct5n
p14MON30RhAnHthX/5Ov8jmA6uZQnqBP1e4EfR1GxYovxBpFGebM4ruG2CfE9cUu
6dOMQ1x91vIUfRnIz0x5iSToV2JavIDvYBLZrw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEIN8s7unQtuSHSQeHDfi/RC7p9zDq
kDosxM/yWNMUxsmK3CikQShbNdl0tA4p8l11YnEitoqFxd/LnrKUuwgHUg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402138345674194099319596579974403156291678
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 14:46:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-03 14:46:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000420df2ceee9d0b6e4874907870df8bf442ee9f730ea903a2cc4cff258d314c6c98adc28a441285b35d974b40e29f25d75627122b68a85c5dfcb9eb294bb080752
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de29b05d77de3a4bc8900793a99e9143ee3ff876
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1139 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookishbrandi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breaking.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concept.poetry.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cultured.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dorasease14kxk.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'end.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icen.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipad.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noisenoise.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outsideroutbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photopreserve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaltycons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seebagsgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stallionsaustralasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suaritmacihazi.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suliman.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel-ous.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twenty-something-wisdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'type1shine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'underwater-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdesprenoi.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weknowwhatworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wenbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernheartandhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westmorelanddemolay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsyourjob.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windkisses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookishbrandi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.castor.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cultured.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emma.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icen.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nirvana-este-tic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nvvoiceprogress.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outsideroutbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pentictonflyfishers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photopreserve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverorsq284.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaltycons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savewatersavelife.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seebagsgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonalitte.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stallionsaustralasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.therobotworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travel-ous.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waynehooper.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wenbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westernheartandhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiltshire.partners'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wimperextensions-stadskanaal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018fe914f2ee000004030047304502201952dfac7b9bdc719e38656f87be9c4a0218bf93b3e7b071ceaf085df03fb3e4022100bef93c4a97025c180c0a8fbf401c032550bd71482e0f4282d3b60cc61b26229500770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fe914f2f800000403004830460221009dcf6977d92954b8311bf61ab88bfd874c7d1748578f4961d08c0b9264bbd19d022100b52318c6fe7b84311f2052562376f7d7e6c2ee5c7c07952f67f06b69b209dd8b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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