www.epiktest.id

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:94:f5:90:b7:49:2d:c8:8a:50:8a:d6:38:77:7e:0a:ca:17 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.epiktest.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:94:f5:90:b7:49:2d:c8:8a:50:8a:d6:38:77:7e:0a:ca:17
Serial Number (int): 312025060366773348532066267616958944561687
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 64:9f:e4:84:8f:27:d2:d9:bd:07:f8:73:84:c0:71:f4:c2:90:9a:f2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a4:cc:7c:ab:91:55:28:f7:c2:46:84:e1:42:2a:e3:5c:7e:eb:29:f8
Fingerprint (sha256): 25:63:bc:63:0e:ec:ce:6f:a1:0f:00:e9:c9:0f:15:3f:fe:e2:b0:91:4e:b2:d7:1c:29:7d:df:08:a2:b8:60:fa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.epiktest.id

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.epiktest.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

altabitcoin.com
bigyaya.com
blaboshi.com
caligambling.com
carignane.com
charlottemower.com
clinidoc.com
dd.coach
demingdentist.com
ecocheques.com
epiktest.id
facetrampling.com
friedhemp.com
fryer-basket.com
fured.com
germanymarihuana.com
gonorthbound.com
herbalgreentea.com
hobartrealestate.mobi
huntingtonchristmaslightingestimate.com
isagoras.com
jacksonstemcelltreatmentcenter.com
kentuckystemcells.com
lechateaustaging.com
misfitfightclub.com
mypapatoldme.com
od5ya.com
oleum.org
om.id
onlineatms.com
poisonivysmart.com
powermarketersclubhouse.com
qa.id
qx.id
rid.id
sb.id
shipwreckcasino.com
sixwelike.com
sj.id
skinychic.com
smach.com
smokingdamage.com
taiwancharts.com
temporary.id
terbang.click
twooaksplanning.com
tx.id
ventureduel.com
wheelbots.com
word.id
www.altabitcoin.com
www.bigyaya.com
www.blaboshi.com
www.caligambling.com
www.carignane.com
www.charlottemower.com
www.clinidoc.com
www.dd.coach
www.demingdentist.com
www.ecocheques.com
www.epiktest.id
www.facetrampling.com
www.friedhemp.com
www.fryer-basket.com
www.fured.com
www.germanymarihuana.com
www.gonorthbound.com
www.herbalgreentea.com
www.hobartrealestate.mobi
www.huntingtonchristmaslightingestimate.com
www.isagoras.com
www.jacksonstemcelltreatmentcenter.com
www.kentuckystemcells.com
www.lechateaustaging.com
www.misfitfightclub.com
www.mypapatoldme.com
www.od5ya.com
www.oleum.org
www.om.id
www.onlineatms.com
www.poisonivysmart.com
www.powermarketersclubhouse.com
www.qa.id
www.qx.id
www.rid.id
www.sb.id
www.shipwreckcasino.com
www.sixwelike.com
www.sj.id
www.skinychic.com
www.smach.com
www.smokingdamage.com
www.taiwancharts.com
www.temporary.id
www.terbang.click
www.twooaksplanning.com
www.tx.id
www.ventureduel.com
www.wheelbots.com
www.word.id

Other certificates including the domain name epiktest.id

(limited to 100 certificates)
www.epiktest.id
misfitfightclub.com
www.twooaksplanning.com
www.45sec.com
www.fured.com
www.myrtlemississippi.com
www.verdaderevelada.com
ferments.org
www.mariachi-music.com

Certificate

The complete raw certificate details for www.epiktest.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5c7fzEV04Qi1Zof7Bpd5
ru4rY1DH6G6kOT7DYElUodjIG1G7Ene3yKeJyu3W/O5vedlc5Svd8ItNP0v5sKcZ
rEuHSdU9MD9xkonnVdHRU169M+FW/cGJFjZzgsz4q4v7UMscjz+/r4Yz25924CGS
lCBdlAFkjCH8yuLmgXaKBM+zM2Of0VvfmaSZ5DAgwCTa66U92NcOmjDXVJZakfmJ
eH4661Iiq95lOtjfitmBhEtcB83dSEAClk0NFhsuOG1MkuDQ+6VzLTnC781yM729
KdGvdt46AmfazXxn+zcJJVl3ms07nO4NcuP9C596V+sGlWpnSuCU48r5kDYw4rMI
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312025060366773348532066267616958944561687
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 19:07:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-27 19:07:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.epiktest.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29010585312609459180068047854254025446961433124666552736583824475581609599617485128112540758578063734802686146238708493797516370809886002944477045256206011922336419806827806162960682431459504742925335224246994715543030823209628277050488408223275875983907199794119981501799267128863009400998666494459488475709565322420004693155082194464821291443103220916884989238449707533077732262520669917018564587415670839281455200393991679397460001866744888722881397668901334664388472260048152673603640798071010323952525256274082968973245476018494576961328819703148421777179605251206600181046227890718472671358330268961218130807033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							649fe4848f27d2d9bd07f87384c071f4c2909af2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1838 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altabitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigyaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaboshi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caligambling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carignane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottemower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinidoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dd.coach'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demingdentist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecocheques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epiktest.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facetrampling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friedhemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fryer-basket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fured.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'germanymarihuana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonorthbound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herbalgreentea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hobartrealestate.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntingtonchristmaslightingestimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isagoras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacksonstemcelltreatmentcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentuckystemcells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lechateaustaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misfitfightclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypapatoldme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'od5ya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oleum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'om.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineatms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivysmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powermarketersclubhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qx.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rid.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sb.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipwreckcasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sixwelike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sj.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skinychic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smokingdamage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taiwancharts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporary.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terbang.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twooaksplanning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tx.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventureduel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheelbots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'word.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altabitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigyaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blaboshi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caligambling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carignane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charlottemower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clinidoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dd.coach'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demingdentist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecocheques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epiktest.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facetrampling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friedhemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fryer-basket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fured.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.germanymarihuana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gonorthbound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herbalgreentea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hobartrealestate.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huntingtonchristmaslightingestimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isagoras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jacksonstemcelltreatmentcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kentuckystemcells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lechateaustaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.misfitfightclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypapatoldme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.od5ya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oleum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.om.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlineatms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poisonivysmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.powermarketersclubhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qx.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rid.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sb.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shipwreckcasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sixwelike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sj.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skinychic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smokingdamage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taiwancharts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temporary.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terbang.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twooaksplanning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tx.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ventureduel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wheelbots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.word.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fedc3dfe80000040300463044022040263a55721cbd027221584532d46bf23bbb4b8ffbf6ebdeafac8c7de3611ed4022027f5b6f79623354df377027a8dfeed1587aa7e5d505d3b8cce2ef578a44f156f00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fedc3e04a0000040300483046022100c5a29b551c556f9b5c74d19eb65996b8795bd25056f369eaeadb98b864aa8870022100b5eaee14c1f10158df13abe356932730b16e64c5d26ea96a73b8be2cfbd89237
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002b854d44ad9afb4fc33ab9f31db315082ce36e3a3f5996be3f11b99de9d89c1409ce04f3db63eae5ad55f1c6c03479c0016000902e176f6ca5c285d905df340667d434a2d27ddc68ac146d5912bdd41eda2698735826771189098de9e9f6bc8339ab336ecb54d3f631140ae528b7636ac1bdc4ec3b8a7dc3b52855b6741e30ae310ec5757b947843e9639162c05564ef007b36defe654641b505c101b4bbf055ec32b3121a1955e3dea4595e6f6a1905e9bb1e0d8bd89d4f3414c56912242bcaeb9c611283f1b03cc4d533702d3a424d37bb20baa8c681837d6d2d09631b57efc6344e41c0336bee34769cbd73bd072458beddfc4ea8160f4d3819ff04f78fe3