fr.epik.com

Issued by R3

About this certificate

This digital certificate with serial number 03:e7:dd:7f:7f:1a:11:b2:39:5d:a4:5e:97:ed:33:b0:d8:25 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fr.epik.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e7:dd:7f:7f:1a:11:b2:39:5d:a4:5e:97:ed:33:b0:d8:25
Serial Number (int): 340236505940718453924929949240126512093221
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:04:ac:91:12:a5:9c:47:55:cf:2a:5c:03:32:9e:1f:e5:b7:cb:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c8:84:39:d5:c6:04:7e:35:bb:cf:a9:94:ee:49:93:1e:a4:30:87:01
Fingerprint (sha256): 08:d8:1a:d3:7e:9c:29:ce:53:01:c2:f0:2a:bd:d9:11:ab:1b:f2:1d:be:0e:c1:7e:46:cd:b4:3f:cd:04:6e:58

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fr.epik.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fr.epik.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fr.epik.com

Other certificates including the domain name epik.com

(limited to 100 certificates)
id.epik.com
inbox-3.epik.com
tksimplex.org
id.epik.com
supportadflegal.org
tickets-staging.epik.com
registrar-staging-newidentity.epik.com
domainequity-staging.epik.com
kyc.epik.com
my.epik.com
monitoring.epik.com
domainequity-staging.epik.com
rdap-whois.epik.com
registrar-staging.epik.com
gamma.kc.epik.com
mobilev2.epik.com
2000.cool.brightideaspress.org
canadaslandtrust.ca
whmcs.epik.com
bfpjs.epik.com
epik.com
vwp-api.epik.com
dev.epik.com
registrar.epik.com
hosting.epik.com
fr.epik.com
os-1.epik.com
mobile-staging.epik.com
docs.userapi.epik.com
registrar.epik.com
solr.epik.com
pixel.epik.com
gamma1.kc.epik.com
thepowermachine.com
affiliate.epik.com
inbox-5.epik.com
whmcs.epik.com
marketplace-staging.epik.com
icann.usersapiv2-staging.epik.com
hostingtemp.epik.com
usersapiv2.epik.com
cmsdev.epik.com
btc.epik.com
admin-staging-newidentity.epik.com
masterbucks-api-staging.epik.com
metrics.delta.kc.epik.com
nameliquidate-staging-newidentity.epik.com
btc.epik.com
unstoppable.epik.com
datasovereignty.link
my.epik.com
registrar-staging-newidentity.epik.com
missiontraumahealing.bible
dev-www.epik.com
marketplace-staging-newidentity.epik.com
kylerittenhouseinnocent.com.138romacourt.com.collegealabama.com
federatedidentity-api-dev.epik.com
registrar-staging-newidentity.epik.com
userapi.epik.com
masterbucks-dev.epik.com
store.epik.com
nutripizza.com
whmcs.epik.com
btc.epik.com
whois-staging.epik.com
id.epik.com
whois-staging.epik.com
delta.kc.epik.com
monitoring.epik.com
thetruegospel.org
alpha.kc.epik.com
rdap-whois.epik.com
admin-staging.epik.com
secure.bitmigate-staging.epik.com
secure.bitmigate-staging.epik.com
admin-staging.epik.com
zabbix.epik.com
delta1.kc.epik.com
invincible.me
nameliquidate-staging-newidentity.epik.com
support.epik.com
dev.medabb.com
hta1.com
hosting11.epik.com
jng.epik.com
federatedidentity-dev.epik.com
whois-staging.epik.com
secure.bitmigate-staging.epik.com
mobile-staging.epik.com
registrar.epik.com
admin-staging-newidentity.epik.com
whmcs.epik.com
*.epik.com
my.epik.com
whmcs.epik.com
*.epik.com
affiliate.epik.com
delta.kc.epik.com
userapi.epik.com
cheaphdd.hosting.epik.com

Certificate

The complete raw certificate details for fr.epik.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArbrMFkeclEyQFslGWJHb
azsXedJULlfx9BedHu7ceWpWNTCMUU/gYKHaEKBBkC/nYjYk1vD8Wvdu0B5gdnz9
J4XhumyIpFpbhaJSBdz5lZunlQhdxRgRnf/xKwZRZdM5K2WClLDkPaqCCCp9uHGo
bt2II6+XxEXk9JpLu1KzX0e5vZi1/V7OQF0PnkxTS5lArTuFSZT9NOrx0emYepQf
CyJ9FEjGuIuy5xNNfPil7p3vzQFOjulTsIWD6JS/hwA+OC+zbNXC2nfrKfIz5xCD
VvMQ2t3PCW9P4xDIkVVENID7coz8dktB1oug6v4Vsf/45hBUJp0lbqQ4cwMhFD9j
haLMTbT0XSYI5/151eb852oFPRxt/HqlugYiby5KMCl9Ud291lePH36cgJXmVfzK
7cIe9zRIman5vZQtYN/R2A6smDvgM6pSuEZaQsCWr+pJZgZMnN0zkSfg+J6PhMrv
XBdfjsuIuYAxzjOT+v4+A/5HUPPT47eNzdRTMz4c7v43qQXUSd09W1Y7dqUWLMru
uER72GBHGGsVkSRB7oEEfet4GW1FnJc4qcdWsssbjHv8B5QvkQUeszbx4LVaImDq
k4nvQsPNaaTxlglPdgyaWZre98n1Q08iB9TPEACKi3F3QPZzhYQ3JO/OPv3TNdW3
ubj7Z009XETBY5noZb98NpcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340236505940718453924929949240126512093221
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-04 00:46:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-02 00:46:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fr.epik.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708755244665690428331949441213722821352982084191168121780819475841867900578783172650995132485827753810900244191089867717640302437064627837913493461454672712914328976063878383371052826644968944784923106969962503956517767861724762502795121713570571677364916974766160856049459760791252353992592953229738492565935961171493149022337854758988443835546252126525921185883840012270009142386337780259751516316501144897562332110437678811302613100910006979535788126798290693541311227746525473207779586866723638166754719861174208386525067486687236956144381731791331027029456371060993055749366982830856274617391108879493463483722924947186372006656653994111273923048514355446095758912314583793938123268680505152356627156825347546240904641702384666314672789761353579698531303742572107813190956822872243461607699312167477283726189823968328480351857434159011349770230675483445778763460811533907168584006189597329381001217108983306834380822186886419779499818024462100368503794909678053227743193182544294361832193649291109222330628604976360385559254709893553445682502060747676696608203380629959237278577507824266903961905751396678683953542611261303029859826729314130460838241427646791898755497572247059972858670714414481590019006279292153397491579762327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8604ac9112a59c4755cf2a5c03329e1fe5b7cb14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.epik.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017a6f3262ab00000403004630440220108fcc06fe3adb94e91e32c972f25d50add2eda2dcce5655df5a59e198903e0d02200353bbfbb63b43b69698bc4c1c15d912d18c5dc65d8552df2bad3638dd3289920076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017a6f3263d50000040300473045022013baf3ad381b4b403fb77e0d5ebbb0a7629f032bdcf6869c3f87600419e0da9002210094df5d03c6a3a57485d240cb4b8018bcc2b617b2c993991c3fa66354e755606a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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