userapi.epik.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0d:b3:55:dd:95:4f:cf:eb:25:93:21:dc:41:79:04:e0:8b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=userapi.epik.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0d:b3:55:dd:95:4f:cf:eb:25:93:21:dc:41:79:04:e0:8b
Serial Number (int): 265998906215973634662008126444903590060171
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c1:44:90:af:99:b4:13:21:08:cf:11:16:7c:7f:3f:d2:8b:fd:bc:99
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 29:32:a8:65:25:bd:bc:ce:4a:01:6f:84:c6:83:d9:0e:d8:30:ea:bf
Fingerprint (sha256): 23:ae:4d:a4:0c:f6:14:ff:5b:a9:4a:73:2d:fb:41:4e:35:f5:8b:b7:b4:b9:e3:1a:d1:fa:05:ab:80:77:6d:a1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate userapi.epik.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for userapi.epik.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

userapi.epik.com

Other certificates including the domain name epik.com

(limited to 100 certificates)
id.epik.com
inbox-3.epik.com
tksimplex.org
id.epik.com
supportadflegal.org
tickets-staging.epik.com
registrar-staging-newidentity.epik.com
domainequity-staging.epik.com
kyc.epik.com
my.epik.com
monitoring.epik.com
domainequity-staging.epik.com
rdap-whois.epik.com
registrar-staging.epik.com
gamma.kc.epik.com
mobilev2.epik.com
2000.cool.brightideaspress.org
canadaslandtrust.ca
whmcs.epik.com
bfpjs.epik.com
epik.com
vwp-api.epik.com
dev.epik.com
registrar.epik.com
hosting.epik.com
fr.epik.com
os-1.epik.com
mobile-staging.epik.com
docs.userapi.epik.com
registrar.epik.com
solr.epik.com
pixel.epik.com
gamma1.kc.epik.com
thepowermachine.com
affiliate.epik.com
inbox-5.epik.com
whmcs.epik.com
marketplace-staging.epik.com
icann.usersapiv2-staging.epik.com
hostingtemp.epik.com
usersapiv2.epik.com
cmsdev.epik.com
btc.epik.com
admin-staging-newidentity.epik.com
masterbucks-api-staging.epik.com
metrics.delta.kc.epik.com
nameliquidate-staging-newidentity.epik.com
btc.epik.com
unstoppable.epik.com
datasovereignty.link
my.epik.com
registrar-staging-newidentity.epik.com
missiontraumahealing.bible
dev-www.epik.com
marketplace-staging-newidentity.epik.com
kylerittenhouseinnocent.com.138romacourt.com.collegealabama.com
federatedidentity-api-dev.epik.com
registrar-staging-newidentity.epik.com
userapi.epik.com
masterbucks-dev.epik.com
store.epik.com
nutripizza.com
whmcs.epik.com
btc.epik.com
whois-staging.epik.com
id.epik.com
whois-staging.epik.com
delta.kc.epik.com
monitoring.epik.com
thetruegospel.org
alpha.kc.epik.com
rdap-whois.epik.com
admin-staging.epik.com
secure.bitmigate-staging.epik.com
secure.bitmigate-staging.epik.com
admin-staging.epik.com
zabbix.epik.com
delta1.kc.epik.com
invincible.me
nameliquidate-staging-newidentity.epik.com
support.epik.com
dev.medabb.com
hta1.com
hosting11.epik.com
jng.epik.com
federatedidentity-dev.epik.com
whois-staging.epik.com
secure.bitmigate-staging.epik.com
mobile-staging.epik.com
registrar.epik.com
admin-staging-newidentity.epik.com
whmcs.epik.com
*.epik.com
my.epik.com
whmcs.epik.com
*.epik.com
affiliate.epik.com
delta.kc.epik.com
userapi.epik.com
cheaphdd.hosting.epik.com

Certificate

The complete raw certificate details for userapi.epik.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgISAw2zVd2VT8/rJZMh3EF5BOCLMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDEwMDQyMzQwMzhaFw0y
MTAxMDIyMzQwMzhaMBsxGTAXBgNVBAMTEHVzZXJhcGkuZXBpay5jb20wggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCUNfViEXouVPxxWrHxPGrGtbQmgTq0
yEg5aSJCeNy8mfzOIk7sAHGRXf3nnGyOpMHE2Bk6rhmWhL8APVxUDrWj/mGNCiUk
YuI/3ro9+SQJRtjAJdx6yiPazPL35pom45wIhFHl7yQr6Y5Z6Wo5XCWnoRt26dCG
LD7U9KLB8xaxcUZ21kzT6g+n+ga3lOXXGhp1FXiHYAp3tfvExQ5bYAo4MvfVi9ZB
H56haRfW9EPnuQPmR7CS64ER+TbwVz3/7sfr+0kg183uWONvKxYPvEH4wfpynx2k
mFaM1t0rHssMQg+3+G9p/32tFSk/Ny7k/rMPkfRmDqLGf/iia8fWN64iM+MUbz2W
NgzcRlwlydz5usNlSu+fYxebC2fwriWQkQwsfoNSF4uGvdz8zjJW5fw+cQkCpfG0
zokiPMNPdpjtrkmE7u1eBVeyF4Xit6WNH8xh4MYGVRgVMHgbmXnvmVGtkGc2a2b5
l5HPeSPrCg6wbAy+vW+sMGEYOgE0bzUFQgWTj4A2eRk6rz4VVQibsg31CWU+87+c
177IvGgHGLem3+VFSnni2xm6J7XaetEAR28H32b0Jzqd1VYujcaYnXdp2xUKMnsx
TjbUCdW4bhomhUymCHDpLeew+TOz39zfZF0YtWGOXztNz+tsfMacq4eks4YdJnLS
V7pq7w2pYC3ShwIDAQABo4IBcjCCAW4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTB
RJCvmbQTIQjPERZ8fz/Si/28mTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHVzZXJhcGkuZXBpay5j
b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwEwYKKwYBBAHWeQIEAwEB
/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAG50TU+dgkq4W/CwW+OQorbvSVewULA3
Y6077WgGCpsCQ0f5a7/I1Rt1kZW2n2gmoDf8AdsdZ4L218V6JFgbFcHvc182ffVw
vUFDTqUQx6mYLWHut0u9xAjqm91FREZV6zPD4C8sqkjigD+gpc5sYlGoJX2CDwQJ
h6/csNWMLCRoDbDt6NtOVvH14sx6TC+Iuj4w9FjQlEWuatPbyq5aTk7Zwt94HWRV
tKlpcX9ZBaUaghRGUxjChSLHCWXUMGca8oeLHPNuDgIddFduh1kr3rSOPyH11nAh
kAIHG0ghzDf/w75Bt7/ubi9v2jsOHc4M2bHeuZ1uHHMXpqb9E+cjO5I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265998906215973634662008126444903590060171
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-04 23:40:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-02 23:40:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'userapi.epik.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 604647211079708808688208319442824743999971885589535691714537660238186321535847591617661293201342104277345844905417325190945945171197510347634063756616443147056511012603233865807586550280121179305980043159377862831864718822403390685239384727388476914148619117702813717712566349775826020296964404305298993816252966111387216653719533294599053232880712139682762141772809785403508743484986757198923706152669462324928223857309193661018383588229714753104080983764105872695976509918902368390931226804084519505972932666886256163458806799275758900713183230069347235231826636501868789770329433343811657592165658894851989591043662374550681470355992284825478339037944070358404021854087309634067883342802837068913449116443199978476021157003636104856181838849109602507426993556575158588585412701080229854947718962186780123106139370921149581655516652833282746986151615004040040941859857972632480316235495852950545297906653338340352671645817538991049006239639974373759515474470724359080243194853353266106850820779117758823237084606976516367972223531040767565396768879430260172081030496961630011825086757997870270357969664149313997665820073867546493958953035575449969648566230649330694312224120703854022258997270174581865344449437038034198686207955591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c14490af99b4132108cf11167c7f3fd28bfdbc99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userapi.epik.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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