registrar.epik.com
Issued by R3
About this certificate
This digital certificate with serial number 04:1d:e5:b3:af:80:5c:eb:95:73:d6:af:8e:ea:aa:ed:0d:8e was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=registrar.epik.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:1d:e5:b3:af:80:5c:eb:95:73:d6:af:8e:ea:aa:ed:0d:8eSerial Number (int): 358622658559512268361082724244657709845902
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 44:9e:73:92:33:62:bb:70:61:30:2b:e1:85:14:9d:58:2d:14:50:6e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 9a:60:d6:40:87:19:20:1d:a5:c2:c7:e4:fb:1b:42:f3:36:46:80:52
Fingerprint (sha256): 08:35:3c:f2:94:ac:8b:fc:91:98:59:00:b8:08:59:b1:20:de:9a:3c:61:f8:d3:e6:91:f5:75:92:59:7e:37:ee
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate registrar.epik.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for registrar.epik.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
registrar.epik.com
Other certificates including the domain name epik.com
(limited to 100 certificates)
id.epik.com
inbox-3.epik.com
tksimplex.org
id.epik.com
supportadflegal.org
tickets-staging.epik.com
registrar-staging-newidentity.epik.com
domainequity-staging.epik.com
kyc.epik.com
my.epik.com
monitoring.epik.com
domainequity-staging.epik.com
rdap-whois.epik.com
registrar-staging.epik.com
gamma.kc.epik.com
mobilev2.epik.com
2000.cool.brightideaspress.org
canadaslandtrust.ca
whmcs.epik.com
bfpjs.epik.com
epik.com
vwp-api.epik.com
dev.epik.com
registrar.epik.com
hosting.epik.com
fr.epik.com
os-1.epik.com
mobile-staging.epik.com
docs.userapi.epik.com
registrar.epik.com
solr.epik.com
pixel.epik.com
gamma1.kc.epik.com
thepowermachine.com
affiliate.epik.com
inbox-5.epik.com
whmcs.epik.com
marketplace-staging.epik.com
icann.usersapiv2-staging.epik.com
hostingtemp.epik.com
usersapiv2.epik.com
cmsdev.epik.com
btc.epik.com
admin-staging-newidentity.epik.com
masterbucks-api-staging.epik.com
metrics.delta.kc.epik.com
nameliquidate-staging-newidentity.epik.com
btc.epik.com
unstoppable.epik.com
datasovereignty.link
my.epik.com
registrar-staging-newidentity.epik.com
missiontraumahealing.bible
dev-www.epik.com
marketplace-staging-newidentity.epik.com
kylerittenhouseinnocent.com.138romacourt.com.collegealabama.com
federatedidentity-api-dev.epik.com
registrar-staging-newidentity.epik.com
userapi.epik.com
masterbucks-dev.epik.com
store.epik.com
nutripizza.com
whmcs.epik.com
btc.epik.com
whois-staging.epik.com
id.epik.com
whois-staging.epik.com
delta.kc.epik.com
monitoring.epik.com
thetruegospel.org
alpha.kc.epik.com
rdap-whois.epik.com
admin-staging.epik.com
secure.bitmigate-staging.epik.com
secure.bitmigate-staging.epik.com
admin-staging.epik.com
zabbix.epik.com
delta1.kc.epik.com
invincible.me
nameliquidate-staging-newidentity.epik.com
support.epik.com
dev.medabb.com
hta1.com
hosting11.epik.com
jng.epik.com
federatedidentity-dev.epik.com
whois-staging.epik.com
secure.bitmigate-staging.epik.com
mobile-staging.epik.com
registrar.epik.com
admin-staging-newidentity.epik.com
whmcs.epik.com
*.epik.com
my.epik.com
whmcs.epik.com
*.epik.com
affiliate.epik.com
delta.kc.epik.com
userapi.epik.com
cheaphdd.hosting.epik.com
inbox-3.epik.com
tksimplex.org
id.epik.com
supportadflegal.org
tickets-staging.epik.com
registrar-staging-newidentity.epik.com
domainequity-staging.epik.com
kyc.epik.com
my.epik.com
monitoring.epik.com
domainequity-staging.epik.com
rdap-whois.epik.com
registrar-staging.epik.com
gamma.kc.epik.com
mobilev2.epik.com
2000.cool.brightideaspress.org
canadaslandtrust.ca
whmcs.epik.com
bfpjs.epik.com
epik.com
vwp-api.epik.com
dev.epik.com
registrar.epik.com
hosting.epik.com
fr.epik.com
os-1.epik.com
mobile-staging.epik.com
docs.userapi.epik.com
registrar.epik.com
solr.epik.com
pixel.epik.com
gamma1.kc.epik.com
thepowermachine.com
affiliate.epik.com
inbox-5.epik.com
whmcs.epik.com
marketplace-staging.epik.com
icann.usersapiv2-staging.epik.com
hostingtemp.epik.com
usersapiv2.epik.com
cmsdev.epik.com
btc.epik.com
admin-staging-newidentity.epik.com
masterbucks-api-staging.epik.com
metrics.delta.kc.epik.com
nameliquidate-staging-newidentity.epik.com
btc.epik.com
unstoppable.epik.com
datasovereignty.link
my.epik.com
registrar-staging-newidentity.epik.com
missiontraumahealing.bible
dev-www.epik.com
marketplace-staging-newidentity.epik.com
kylerittenhouseinnocent.com.138romacourt.com.collegealabama.com
federatedidentity-api-dev.epik.com
registrar-staging-newidentity.epik.com
userapi.epik.com
masterbucks-dev.epik.com
store.epik.com
nutripizza.com
whmcs.epik.com
btc.epik.com
whois-staging.epik.com
id.epik.com
whois-staging.epik.com
delta.kc.epik.com
monitoring.epik.com
thetruegospel.org
alpha.kc.epik.com
rdap-whois.epik.com
admin-staging.epik.com
secure.bitmigate-staging.epik.com
secure.bitmigate-staging.epik.com
admin-staging.epik.com
zabbix.epik.com
delta1.kc.epik.com
invincible.me
nameliquidate-staging-newidentity.epik.com
support.epik.com
dev.medabb.com
hta1.com
hosting11.epik.com
jng.epik.com
federatedidentity-dev.epik.com
whois-staging.epik.com
secure.bitmigate-staging.epik.com
mobile-staging.epik.com
registrar.epik.com
admin-staging-newidentity.epik.com
whmcs.epik.com
*.epik.com
my.epik.com
whmcs.epik.com
*.epik.com
affiliate.epik.com
delta.kc.epik.com
userapi.epik.com
cheaphdd.hosting.epik.com
Certificate
The complete raw certificate details for registrar.epik.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISBB3ls6+AXOuVc9avjuqq7Q2OMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTA1MTAwOTUxMjFaFw0yMTA4MDgwOTUxMjFaMB0xGzAZBgNVBAMT EnJlZ2lzdHJhci5lcGlrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC ggIBAMJkzXwIc6rfBy63zU82lV9q6wSzV12UD6KzkViw+FcbPDNhPk3TQH39A7qQ xQabnoGigCSFEsoWZlAcrKu2TloxH18x3P8HihkDyUl1NMfVRjlFonCbhzogSLkW 8EyFfNlqHpvJrRAaBPr3aErKYVOFWsrhtMQgsO/S+0k4ga5F5iVerP/z0X5c7Wt2 rF0VpU2oonZD4/dndZQlXd05UwE51EJ32W8Bk2g0vb9Dh7aHA6+nBQsISLMNzhs+ pBkmr3fEywjhv7FwKZgazvUYLHZ1mcIbAEscf1GDcCwxDxF0a04rzgMjc5fnmpuv uoIfKL0MvM74GACKN2B83+JeJyni0rqKJrBN1gWIySIvWqBIaHcfa8QqDgw1apwq BSLQpeYlPoC183WtaW1UOVpYkj+9OMGKfF+TVV1FwZTk9rmKQjYDDZd+hH8snPdL fEvAMOgz5keHWFsyaEEEWfekd3ozmwljVlktbp4Y0WmrbGPPP92v07ik/zxwfh9F lqTZKKerr1SFRBjmGbrauhjkryWiJHK5gKDAZ8rLiMJVxzE6bsutCRDNBjKtXwDp z94sEU6ozFug5/A5i15k2S1Lb4ie88uvrG5KAMduezCGEAKOo8a8sfrDoxIzKa7S GaP7JpC9A54P8cVJK4upybyaeXiVEqzVuQOXeRbvszUzDKp/AgMBAAGjggFaMIIB VjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFESec5IzYrtwYTAr4YUUnVgtFFBuMB8G A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo dHRwOi8vcjMuaS5sZW5jci5vcmcvMB0GA1UdEQQWMBSCEnJlZ2lzdHJhci5lcGlr LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzATBgorBgEEAdZ5AgQD AQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcxT1mKN+wGz1kJmZI50aj56em2M JZBtrHNPc4o4iusln2ePZGvy0S9wNUHv+Jjitr3dk2gqqWCmxrcS7eykrRRkHQUd 62HTNqCkLJivZAPAkhQTv+SFKkweZBrYc47c4IZz2kNFmMJ6mzLUPL1QiwjMVxIR rWXFE8Zin6DuTuDk0Q+L6ftrlyeP0Je0TQSqeSc7QBOCRROLp4RpXWgUW0jPnRcN CZ6NW7qZvbqAaaObx6mVVbVWdxydbvYTFmcS6IANE+e79Vp7N+THgnTE0T1z8Iwq jcmwAk3Ek/jFoS3PCbw58Wru3Tgo1B/AbB3dcJAu2+mT7YrBZ0qyuHXnxQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwmTNfAhzqt8HLrfNTzaV X2rrBLNXXZQPorORWLD4Vxs8M2E+TdNAff0DupDFBpuegaKAJIUSyhZmUBysq7ZO WjEfXzHc/weKGQPJSXU0x9VGOUWicJuHOiBIuRbwTIV82Woem8mtEBoE+vdoSsph U4VayuG0xCCw79L7STiBrkXmJV6s//PRflzta3asXRWlTaiidkPj92d1lCVd3TlT ATnUQnfZbwGTaDS9v0OHtocDr6cFCwhIsw3OGz6kGSavd8TLCOG/sXApmBrO9Rgs dnWZwhsASxx/UYNwLDEPEXRrTivOAyNzl+eam6+6gh8ovQy8zvgYAIo3YHzf4l4n KeLSuoomsE3WBYjJIi9aoEhodx9rxCoODDVqnCoFItCl5iU+gLXzda1pbVQ5WliS P704wYp8X5NVXUXBlOT2uYpCNgMNl36Efyyc90t8S8Aw6DPmR4dYWzJoQQRZ96R3 ejObCWNWWS1unhjRaatsY88/3a/TuKT/PHB+H0WWpNkop6uvVIVEGOYZutq6GOSv JaIkcrmAoMBnysuIwlXHMTpuy60JEM0GMq1fAOnP3iwRTqjMW6Dn8DmLXmTZLUtv iJ7zy6+sbkoAx257MIYQAo6jxryx+sOjEjMprtIZo/smkL0Dng/xxUkri6nJvJp5 eJUSrNW5A5d5Fu+zNTMMqn8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 358622658559512268361082724244657709845902 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-10 09:51:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-08 09:51:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'registrar.epik.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793057351658352519331567678614670967259611952582428305865248665972436575479243934584328623869836469918425256885244467888131331531341691624249467507074982086398531609090188373008875615894690657030499924763432991109271430230394251934657993010892933540522051361646722681565693522115830878007876709103773796250683356880356226358469868417652967558851063495699556598869618960570163374845235628131710112026778379687978995916927798996245833014492539238685631894539851217544979587322829673627154207067480388639973233687008002939927372869785537016793770431621497327586299733685951590013380072131912746871596867963652811957427846869923726417159582692356895494538431759384998756224204443069285108864359313815381862956458913628625724312252795501098021556198009486756336820932275763710828913083701083947693652827344126312006665368474043112554981820964727048474871592151236372245328266209608685226832489240283592418039488890965370163561754720710158295896104062773742334816686680780602124271921173192463760308061054840758504428815531002758644101726503596909181219243866874431388789774919647009191328498534094834222758045521826572223870300981360328394407315726491708068776520902495101425259137266736756754499145628251501512855422669870927669271243391 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 449e73923362bb7061302be185149d582d14506e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registrar.epik.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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