os-1.epik.com
Issued by R3
About this certificate
This digital certificate with serial number 03:ba:0c:6d:17:fb:b6:3f:0e:bb:5b:1b:cc:4b:c6:3e:d6:0e was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=os-1.epik.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ba:0c:6d:17:fb:b6:3f:0e:bb:5b:1b:cc:4b:c6:3e:d6:0eSerial Number (int): 324645895225320385609497856977108713002510
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 65:ee:48:ac:c9:96:2a:f3:35:b6:be:15:2a:91:34:60:be:1a:fe:10
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 83:27:9b:84:9e:29:cb:3b:db:08:fa:af:9e:53:40:69:03:c3:23:59
Fingerprint (sha256): 09:0c:37:cf:ee:78:b7:5e:3f:f9:01:81:bb:66:6b:49:61:b4:83:8e:b4:7f:46:d2:a0:5a:fc:61:3b:f1:0e:cd
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate os-1.epik.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for os-1.epik.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
os-1.epik.com
Other certificates including the domain name epik.com
(limited to 100 certificates)
id.epik.com
inbox-3.epik.com
tksimplex.org
id.epik.com
supportadflegal.org
tickets-staging.epik.com
registrar-staging-newidentity.epik.com
domainequity-staging.epik.com
kyc.epik.com
my.epik.com
monitoring.epik.com
domainequity-staging.epik.com
rdap-whois.epik.com
registrar-staging.epik.com
gamma.kc.epik.com
mobilev2.epik.com
2000.cool.brightideaspress.org
canadaslandtrust.ca
whmcs.epik.com
bfpjs.epik.com
epik.com
vwp-api.epik.com
dev.epik.com
registrar.epik.com
hosting.epik.com
fr.epik.com
os-1.epik.com
mobile-staging.epik.com
docs.userapi.epik.com
registrar.epik.com
solr.epik.com
pixel.epik.com
gamma1.kc.epik.com
thepowermachine.com
affiliate.epik.com
inbox-5.epik.com
whmcs.epik.com
marketplace-staging.epik.com
icann.usersapiv2-staging.epik.com
hostingtemp.epik.com
usersapiv2.epik.com
cmsdev.epik.com
btc.epik.com
admin-staging-newidentity.epik.com
masterbucks-api-staging.epik.com
metrics.delta.kc.epik.com
nameliquidate-staging-newidentity.epik.com
btc.epik.com
unstoppable.epik.com
datasovereignty.link
my.epik.com
registrar-staging-newidentity.epik.com
missiontraumahealing.bible
dev-www.epik.com
marketplace-staging-newidentity.epik.com
kylerittenhouseinnocent.com.138romacourt.com.collegealabama.com
federatedidentity-api-dev.epik.com
registrar-staging-newidentity.epik.com
userapi.epik.com
masterbucks-dev.epik.com
store.epik.com
nutripizza.com
whmcs.epik.com
btc.epik.com
whois-staging.epik.com
id.epik.com
whois-staging.epik.com
delta.kc.epik.com
monitoring.epik.com
thetruegospel.org
alpha.kc.epik.com
rdap-whois.epik.com
admin-staging.epik.com
secure.bitmigate-staging.epik.com
secure.bitmigate-staging.epik.com
admin-staging.epik.com
zabbix.epik.com
delta1.kc.epik.com
invincible.me
nameliquidate-staging-newidentity.epik.com
support.epik.com
dev.medabb.com
hta1.com
hosting11.epik.com
jng.epik.com
federatedidentity-dev.epik.com
whois-staging.epik.com
secure.bitmigate-staging.epik.com
mobile-staging.epik.com
registrar.epik.com
admin-staging-newidentity.epik.com
whmcs.epik.com
*.epik.com
my.epik.com
whmcs.epik.com
*.epik.com
affiliate.epik.com
delta.kc.epik.com
userapi.epik.com
cheaphdd.hosting.epik.com
inbox-3.epik.com
tksimplex.org
id.epik.com
supportadflegal.org
tickets-staging.epik.com
registrar-staging-newidentity.epik.com
domainequity-staging.epik.com
kyc.epik.com
my.epik.com
monitoring.epik.com
domainequity-staging.epik.com
rdap-whois.epik.com
registrar-staging.epik.com
gamma.kc.epik.com
mobilev2.epik.com
2000.cool.brightideaspress.org
canadaslandtrust.ca
whmcs.epik.com
bfpjs.epik.com
epik.com
vwp-api.epik.com
dev.epik.com
registrar.epik.com
hosting.epik.com
fr.epik.com
os-1.epik.com
mobile-staging.epik.com
docs.userapi.epik.com
registrar.epik.com
solr.epik.com
pixel.epik.com
gamma1.kc.epik.com
thepowermachine.com
affiliate.epik.com
inbox-5.epik.com
whmcs.epik.com
marketplace-staging.epik.com
icann.usersapiv2-staging.epik.com
hostingtemp.epik.com
usersapiv2.epik.com
cmsdev.epik.com
btc.epik.com
admin-staging-newidentity.epik.com
masterbucks-api-staging.epik.com
metrics.delta.kc.epik.com
nameliquidate-staging-newidentity.epik.com
btc.epik.com
unstoppable.epik.com
datasovereignty.link
my.epik.com
registrar-staging-newidentity.epik.com
missiontraumahealing.bible
dev-www.epik.com
marketplace-staging-newidentity.epik.com
kylerittenhouseinnocent.com.138romacourt.com.collegealabama.com
federatedidentity-api-dev.epik.com
registrar-staging-newidentity.epik.com
userapi.epik.com
masterbucks-dev.epik.com
store.epik.com
nutripizza.com
whmcs.epik.com
btc.epik.com
whois-staging.epik.com
id.epik.com
whois-staging.epik.com
delta.kc.epik.com
monitoring.epik.com
thetruegospel.org
alpha.kc.epik.com
rdap-whois.epik.com
admin-staging.epik.com
secure.bitmigate-staging.epik.com
secure.bitmigate-staging.epik.com
admin-staging.epik.com
zabbix.epik.com
delta1.kc.epik.com
invincible.me
nameliquidate-staging-newidentity.epik.com
support.epik.com
dev.medabb.com
hta1.com
hosting11.epik.com
jng.epik.com
federatedidentity-dev.epik.com
whois-staging.epik.com
secure.bitmigate-staging.epik.com
mobile-staging.epik.com
registrar.epik.com
admin-staging-newidentity.epik.com
whmcs.epik.com
*.epik.com
my.epik.com
whmcs.epik.com
*.epik.com
affiliate.epik.com
delta.kc.epik.com
userapi.epik.com
cheaphdd.hosting.epik.com
Certificate
The complete raw certificate details for os-1.epik.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgISA7oMbRf7tj8Ou1sbzEvGPtYOMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTA5MjYxOTEzMjRaFw0yMTEyMjUxOTEzMjNaMBgxFjAUBgNVBAMT DW9zLTEuZXBpay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDU aqZD9C2nmk/WipfFOUHUUm7mR4i/n4bgACXV8hZwv/NBkPxrcnSBnY4AWbjxfUMa TQ6I2FVQJRw4C2yDEBj47fYzyDylTlD5xvsjtFajfm63Dj27LCLpyW8LxA+XHj8V cxDx/1cI0vLMRd/Wo4uRBRNnRLTOrKD4Ypc6EU6jrUetVYova7i3wSmPQqskMadJ 94JB7kNL6Yy5kPq4qwXM4xg5syDuf3uoFZX0kpJKbsn1g9NolP1Ir/jVQTYRUiYW ozqdb4DwBBmtX0cmIS6BEMRBUNLQJRTUaW4e1f3NN4seYCMHiR1JhOODC/OMJbyD L35zeIVUxK6bH07yLNUDSttCo74/7fqpJJsmndh/MWAT7Jkfu9nbikklDVmkElIE BtWkooiwGx5N8uKKd3/wlIm3HS5ZRxpxaiui2ZstyiWZNW56hAEGeE3y8m+Oeo7g VohJwcrlnclbd9nKbq7JN9KPKDBOVc9Kp/VqQ8SgoQZwIMzjdtWplBaxzexgRpyw Nl+5jC0HwtGZifioPj0dYdfMFdoqZVMosqMijOjAkSXfY+P31viHiXPJOct/OdFa zawKRKXGjHDBHVvhAuEvNWZIALcRXb0FurZr7fFPJvlIN+Tm3plfFEeGnDe/Q86S 6hbFNx2sAaEwBeH3VSe8VGI+niNAY+V4sx9b+xw80wIDAQABo4ICSDCCAkQwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBRl7kisyZYq8zW2vhUqkTRgvhr+EDAfBgNVHSME GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov L3IzLmkubGVuY3Iub3JnLzAYBgNVHREEETAPgg1vcy0xLmVwaWsuY29tMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw AHcAXNxDkv7mq0VEsV6a1FbmEDf71fpH3KFzlLJe5vbHDsoAAAF8I72nxQAABAMA SDBGAiEAzCP3HXouekg2cNWsv35RST/+kDoQ9u+uzDDqVhj0TC4CIQCLO9DB8mkV nocrG7IZj00XpIvMkyrQlQXdhNcYA1bu8wB1APZclC/RdzAiFFQYCDCUVo7jTRMZ M7/fDC8gC8xO8WTjAAABfCO9p74AAAQDAEYwRAIgHZJTrW3OtoOTvg7BLCdzv4S/ YglX/MAgaX2DU+iCUDMCIH/NNVhoPVud9hqvKVFxuJ2per2ouu7xGKCwndoDXjFj MA0GCSqGSIb3DQEBCwUAA4IBAQAsl3JkGDUSDDBEONCWB7Qc8Ov+okoHL0U+FFCJ XszFN3Yw3ZAnQAVxdc1lUPPio5Kq7JcKYrl4MKHjA3zZ2+yIK1lWOCIS0G4KPoti FD5SfKC9r0ldjV98xS+PV1mDi02cIGWAIjhsM83q1sQI/8+AnffWV8vPEiHladEG FSFVV3M66p3AFIaPOv8jPbOCeDlglzFvgJP2hYd8C94ed4qCdS4Nsqn2tFX6xNzG F0mWlgDk+cCo87hZq+nY9ODkLKuHvrmZXjUiVgJTc5kC/Gn0dgUoJpZF2GwGVl+2 3tRH4NP0Hg8SkFOPt/YBp1yZ/rmaTzv2vguQ/RlDI7HJL7XG -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1GqmQ/Qtp5pP1oqXxTlB 1FJu5keIv5+G4AAl1fIWcL/zQZD8a3J0gZ2OAFm48X1DGk0OiNhVUCUcOAtsgxAY +O32M8g8pU5Q+cb7I7RWo35utw49uywi6clvC8QPlx4/FXMQ8f9XCNLyzEXf1qOL kQUTZ0S0zqyg+GKXOhFOo61HrVWKL2u4t8Epj0KrJDGnSfeCQe5DS+mMuZD6uKsF zOMYObMg7n97qBWV9JKSSm7J9YPTaJT9SK/41UE2EVImFqM6nW+A8AQZrV9HJiEu gRDEQVDS0CUU1GluHtX9zTeLHmAjB4kdSYTjgwvzjCW8gy9+c3iFVMSumx9O8izV A0rbQqO+P+36qSSbJp3YfzFgE+yZH7vZ24pJJQ1ZpBJSBAbVpKKIsBseTfLiind/ 8JSJtx0uWUcacWorotmbLcolmTVueoQBBnhN8vJvjnqO4FaIScHK5Z3JW3fZym6u yTfSjygwTlXPSqf1akPEoKEGcCDM43bVqZQWsc3sYEacsDZfuYwtB8LRmYn4qD49 HWHXzBXaKmVTKLKjIozowJEl32Pj99b4h4lzyTnLfznRWs2sCkSlxoxwwR1b4QLh LzVmSAC3EV29Bbq2a+3xTyb5SDfk5t6ZXxRHhpw3v0POkuoWxTcdrAGhMAXh91Un vFRiPp4jQGPleLMfW/scPNMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 324645895225320385609497856977108713002510 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-26 19:13:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-25 19:13:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'os-1.epik.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866584120137317664134315539797139562990812806635320155417039045871290627301170451115775336544820062929302474951592412606738426856049232445867260830306543063862787035923152165617409250671067485753965010642225546671724864961156735521108842586006150333012441947645296427978420996250537006083402568697261417262563549951019753431277173172915693601051145284224043572831287283965968348040252271302625300980336514043799958570097035625717246059893700418874533657901513759825713623273572042769206618188323301795388975652945117814912771899260382583087098490034556645979994056011756469828549556260802340273952400582288669363204290954487170680185883755781005404222271174844214183224513139370406675152759378953215208058060024582466442662004992706928020585544546548099452486978044472958879540203978395796915115643720253295217667948065059016851205325890787105259374477066099080577654063694119270940980260772514583542569661291362692599753341220282614369813743304114946501722358163057898330471566923587855833754588819386754511825323165607737153708639643510046186777495323524050502447528948512885310574099109892886872226070702517385784043719144047468102707402783776667480066798573978038052100018511066185491565532344167358190016248393214947061120384211 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 65ee48acc9962af335b6be152a913460be1afe10 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'os-1.epik.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017c23bda7c50000040300483046022100cc23f71d7a2e7a483670d5acbf7e51493ffe903a10f6efaecc30ea5618f44c2e0221008b3bd0c1f269159e872b1bb2198f4d17a48bcc932ad09505dd84d7180356eef3007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017c23bda7be000004030046304402201d9253ad6dceb68393be0ec12c2773bf84bf620957fcc020697d8353e882503302207fcd3558683d5b9df61aaf295171b89da97abda8baeef118a0b09dda035e3163 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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