ssl-zq51a.epik.to

Issued by R3

About this certificate

This digital certificate with serial number 04:5d:68:31:ea:78:ec:10:3f:da:d9:62:6a:78:f8:0a:32:7c was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl-zq51a.epik.to

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5d:68:31:ea:78:ec:10:3f:da:d9:62:6a:78:f8:0a:32:7c
Serial Number (int): 380233902740460248008804924243420367172220
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 25:f1:23:58:a3:d5:ed:97:cd:e6:a6:65:bc:e2:2d:17:0f:6f:a8:9c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1f:c2:8f:13:4c:35:3c:32:fd:79:d6:d5:f7:e2:e1:40:9b:61:a8:87
Fingerprint (sha256): 68:98:5e:b7:3d:a5:24:53:63:2d:51:7e:78:67:6e:0a:e6:42:70:23:20:7e:0e:2f:11:f4:79:5e:57:62:49:ff

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl-zq51a.epik.to

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl-zq51a.epik.to

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

49ers.love
absolutelegal.com
adgagolf.com
appliedanthropology.com
beijing4vip.com
bidmarketplace.com
bookingforvip.com
brokeninjas.com
cervatos.com
charlottemodular.com
charlottereferral.com
chiropracticsportsmedicine.com
comassi.com
constantinegarbage.com
createtruckbusiness.com
customercaresupportdesk.com
dropoffulvic.com
emmetcounty.com
enerpactoolsgroup.uk.com
estellmanor.com
eternalimaging.com
firstforlions.org
forsaledomain1.com
freespeecharchives.com
frisul.com
greengrey.com
househackingusa.com
juliomartinez.com
kiowacounty.com
knottedoak.com
lbbsb-pms.staybridgelubbock.com
middletownsprings.com
mosquitio.com
neopearls.com
newyorkdietdoctor.com
ofwizard.com
plafu.com
pornkittens.com
radioactive-financial.com
saeatsout.com
savelogo.com
showcatalog.com
smallbusinessisbetterbusiness.com
southtexascoast.com
ssl-zq51a.epik.to
teatrocentrale.com
topsoilorlando.com
venetoevento.com
western-japan.com

Other certificates including the domain name epik.to

(limited to 100 certificates)
ssl-lp5qx.epik.to
ssl-ya1lh.epik.to
ssl-bhs8u.epik.to
ssl-ycoca.epik.to
ssl-npif9.epik.to
ssl-wzrcr.epik.to
ssl-h7hbj.epik.to
ssl-66ert.epik.to
ssl-f7cwp.epik.to
ssl-67bdl.epik.to
ssl-i87rx.epik.to
ssl-0co1e.epik.to
ssl-ors36.epik.to
ssl-yybay.epik.to
ssl-05srt.epik.to
ssl-9vnnh.epik.to
ssl-u4cs0.epik.to
ssl-56d80.epik.to
ssl-uxvmb.epik.to
ssl-bfbw9.epik.to
ssl-7x3jc.epik.to
ssl-cc510.epik.to
ssl-7pvkq.epik.to
ssl-ukmwf.epik.to
ssl-of0zm.epik.to
ssl-pyfrd.epik.to
ssl-sqarl.epik.to
ssl-87gk0.epik.to
ssl-ff3i4.epik.to
ssl-bhs8u.epik.to
ssl-bsrzy.epik.to
ssl-5zl9y.epik.to
ssl-jisou.epik.to
ssl-jctpg.epik.to
ssl-zq51a.epik.to
ssl-cxlmf.epik.to
ssl-bo025.epik.to
ssl-7pvkq.epik.to
ssl-jgtym.epik.to
ssl-snvwl.epik.to
ssl-i87rx.epik.to
ssl-a9hev.epik.to
ssl-ou53h.epik.to
ssl-jhvrc.epik.to
ssl-au9g7.epik.to
ssl-bvhbo.epik.to
ssl-rhqhe.epik.to
ssl-is1v2.epik.to
ssl-jixju.epik.to
ssl-0co1e.epik.to
ssl-5ddox.epik.to
ssl-lvcck.epik.to
ssl-y6t2h.epik.to
ssl-xhv8v.epik.to
ssl-jhvrc.epik.to
ssl-lozda.epik.to
ssl-np5sh.epik.to
ssl-9s54k.epik.to
ssl-rhqhe.epik.to
ssl-jgtym.epik.to
ssl-1leka.epik.to
ssl-0qkk0.epik.to
ssl-na3zn.epik.to
ssl-lsplg.epik.to
ssl-3dxsi.epik.to
ssl-egt9q.epik.to
ssl-ycoca.epik.to
ssl-tlbto.epik.to
epik.to
ssl-2tmgo.epik.to
ssl-2a4ob.epik.to
ssl-rctc9.epik.to
ssl-9vnnh.epik.to
ssl-judg4.epik.to
ssl-odl4l.epik.to
ssl-5zl9y.epik.to
ssl-zmeya.epik.to
ssl-a3mgk.epik.to
ssl-5lu51.epik.to
ssl-ors36.epik.to
ssl-3dxsi.epik.to
ssl-1en2l.epik.to
ssl-24qde.epik.to
ssl-sewt0.epik.to
ssl-np5sh.epik.to
ssl-67bdl.epik.to
ssl-h7hbj.epik.to
ssl-wsyg2.epik.to
ssl-mh21w.epik.to
ssl-zidpe.epik.to
ssl-psdzy.epik.to
ssl-a1x9a.epik.to
ssl-6r4hl.epik.to
ssl-1p30q.epik.to
ssl-psdzy.epik.to
ssl-87gk0.epik.to

Certificate

The complete raw certificate details for ssl-zq51a.epik.to in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIpTCCB42gAwIBAgISBF1oMep47BA/2tlianj4CjJ8MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMjUxNjE2MjNaFw0yNDA0MjQxNjE2MjJaMBwxGjAYBgNVBAMT
EXNzbC16cTUxYS5lcGlrLnRvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3GdHWRZScdv/aRQH1vRnenJ0vUX3mbry+BN7V9JMXpmrGhiCItApjE+gpfYB
lADJwAWBSGC3BeG1wf44IyZpFp1b3xfIlx/6cpf+N7oASccKwjyAwaujXEsgMBGW
TZJafIH4XHzzUKHqyfuneT785Oxm5WW8/Ot+HBXyHePR52EN4IKVQpqDx4+7a6po
OJsETWKHT+pa343j2xyrE6ESCmy7nZ98rziyHRO/PvXxJDdBNismVGjnH50h2NNf
GsqjbaUYgdu7Beedb9O/v52YHvSQ5GhmNjgUmbA9MbZTe3hho0LLQDMEthgWlnIc
6stI1n90GZ8X6VFjd7AU5b0YRwIDAQABo4IFyTCCBcUwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBQl8SNYo9Xtl83mpmW84i0XD2+onDAfBgNVHSMEGDAWgBQULrMXt1hW
y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6
Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu
b3JnLzCCA88GA1UdEQSCA8YwggPCggo0OWVycy5sb3ZlghFhYnNvbHV0ZWxlZ2Fs
LmNvbYIMYWRnYWdvbGYuY29tghdhcHBsaWVkYW50aHJvcG9sb2d5LmNvbYIPYmVp
amluZzR2aXAuY29tghJiaWRtYXJrZXRwbGFjZS5jb22CEWJvb2tpbmdmb3J2aXAu
Y29tgg9icm9rZW5pbmphcy5jb22CDGNlcnZhdG9zLmNvbYIUY2hhcmxvdHRlbW9k
dWxhci5jb22CFWNoYXJsb3R0ZXJlZmVycmFsLmNvbYIeY2hpcm9wcmFjdGljc3Bv
cnRzbWVkaWNpbmUuY29tggtjb21hc3NpLmNvbYIWY29uc3RhbnRpbmVnYXJiYWdl
LmNvbYIXY3JlYXRldHJ1Y2tidXNpbmVzcy5jb22CG2N1c3RvbWVyY2FyZXN1cHBv
cnRkZXNrLmNvbYIQZHJvcG9mZnVsdmljLmNvbYIPZW1tZXRjb3VudHkuY29tghhl
bmVycGFjdG9vbHNncm91cC51ay5jb22CD2VzdGVsbG1hbm9yLmNvbYISZXRlcm5h
bGltYWdpbmcuY29tghFmaXJzdGZvcmxpb25zLm9yZ4ISZm9yc2FsZWRvbWFpbjEu
Y29tghZmcmVlc3BlZWNoYXJjaGl2ZXMuY29tggpmcmlzdWwuY29tgg1ncmVlbmdy
ZXkuY29tghNob3VzZWhhY2tpbmd1c2EuY29tghFqdWxpb21hcnRpbmV6LmNvbYIP
a2lvd2Fjb3VudHkuY29tgg5rbm90dGVkb2FrLmNvbYIfbGJic2ItcG1zLnN0YXli
cmlkZ2VsdWJib2NrLmNvbYIVbWlkZGxldG93bnNwcmluZ3MuY29tgg1tb3NxdWl0
aW8uY29tgg1uZW9wZWFybHMuY29tghVuZXd5b3JrZGlldGRvY3Rvci5jb22CDG9m
d2l6YXJkLmNvbYIJcGxhZnUuY29tgg9wb3Jua2l0dGVucy5jb22CGXJhZGlvYWN0
aXZlLWZpbmFuY2lhbC5jb22CDXNhZWF0c291dC5jb22CDHNhdmVsb2dvLmNvbYIP
c2hvd2NhdGFsb2cuY29tgiFzbWFsbGJ1c2luZXNzaXNiZXR0ZXJidXNpbmVzcy5j
b22CE3NvdXRodGV4YXNjb2FzdC5jb22CEXNzbC16cTUxYS5lcGlrLnRvghJ0ZWF0
cm9jZW50cmFsZS5jb22CEnRvcHNvaWxvcmxhbmRvLmNvbYIQdmVuZXRvZXZlbnRv
LmNvbYIRd2VzdGVybi1qYXBhbi5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEF
BgorBgEEAdZ5AgQCBIH2BIHzAPEAdwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZ
u7+rOdiEcwAAAY1Bn2y6AAAEAwBIMEYCIQC9BWYiGymURJSMlrw9cioywnIbntsW
+eJLQVM7gTiQHgIhAN07exBC185Ykgrs4W77SUxymkPb3ByDq68UW8r1BAs+AHYA
O1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGNQZ9uqAAABAMARzBF
AiBb7WeCdbtQvDRZpUqSAoAJ+6KP9xWNIIhwT7PGNlAT7wIhAKwo+GYNY8hfqOmh
acneYOHnGrBm8mwL0wUJxqOCwLInMA0GCSqGSIb3DQEBCwUAA4IBAQA3Dv4o7Y+8
7iaZk8aQtQKgImQ37mpNJD90CbGtXnbS+KiAUsujtsx2kZWLBrLJTBGdmGERK4sx
PRCZ8x1dPklYR8Q0aMHifUV9IHRHnBuf0ABKlNV0tSJuRLRKvfDntkSUmCiMaL+c
oxkj5kPuUd6aB1FR/AiKwFkXI3RFDg4YIMgd91/OMAKhhp/m3N2vBH+VXfKxfVh0
d7Khgrj+FYdkuwmMYhVW3YER46QFv9tsXivn12ksKHHfxvtge1amt5757WWSChqk
H0WrJ0+pvsy2WvH9fHqW4ZqwN4KLqSS4Z3rJhv75+3kzQr1gV5XvjfYfTQKidhMd
LKm4XNT3g1iK
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GdHWRZScdv/aRQH1vRn
enJ0vUX3mbry+BN7V9JMXpmrGhiCItApjE+gpfYBlADJwAWBSGC3BeG1wf44IyZp
Fp1b3xfIlx/6cpf+N7oASccKwjyAwaujXEsgMBGWTZJafIH4XHzzUKHqyfuneT78
5Oxm5WW8/Ot+HBXyHePR52EN4IKVQpqDx4+7a6poOJsETWKHT+pa343j2xyrE6ES
Cmy7nZ98rziyHRO/PvXxJDdBNismVGjnH50h2NNfGsqjbaUYgdu7Beedb9O/v52Y
HvSQ5GhmNjgUmbA9MbZTe3hho0LLQDMEthgWlnIc6stI1n90GZ8X6VFjd7AU5b0Y
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380233902740460248008804924243420367172220
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 16:16:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 16:16:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl-zq51a.epik.to'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27823355719173690385716181010176928251556830097515795131173979147501878485803201430986191323329129728858196911972238349258275105528253963644208579657510332003712268074530296645570956068170462952115383522506108255255476330548614155058222576912227387103968109271958435059260366223528493580946490721936545201741686021869575437353960913638140749129736323165348885522673214681332865853126000007975471889304243185928419522109773661339694756553383580747061948685798694550583388205504904771755344097656865902844075897915640974224526905029670035973916448116810660055801918118327128247995448931571023350512361832748438293125191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25f12358a3d5ed97cde6a665bce22d170f6fa89c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (966 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '49ers.love'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absolutelegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adgagolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appliedanthropology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beijing4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidmarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookingforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokeninjas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cervatos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottemodular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottereferral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiropracticsportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comassi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constantinegarbage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'createtruckbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customercaresupportdesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dropoffulvic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emmetcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerpactoolsgroup.uk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estellmanor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eternalimaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstforlions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forsaledomain1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freespeecharchives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frisul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greengrey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'househackingusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juliomartinez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiowacounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knottedoak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbbsb-pms.staybridgelubbock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middletownsprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosquitio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neopearls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkdietdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofwizard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plafu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornkittens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radioactive-financial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saeatsout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savelogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showcatalog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallbusinessisbetterbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southtexascoast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-zq51a.epik.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teatrocentrale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsoilorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venetoevento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'western-japan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d419f6cba0000040300483046022100bd0566221b299444948c96bc3d722a32c2721b9edb16f9e24b41533b8138901e022100dd3b7b1042d7ce58920aece16efb494c729a43dbdc1c83abaf145bcaf5040b3e0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d419f6ea8000004030047304502205bed678275bb50bc3459a54a92028009fba28ff7158d2088704fb3c6365013ef022100ac28f8660d63c85fa8e9a169c9de60e1e71ab066f26c0bd30509c6a382c0b227
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00370efe28ed8fbcee269993c690b502a0226437ee6a4d243f7409b1ad5e76d2f8a88052cba3b6cc7691958b06b2c94c119d9861112b8b313d1099f31d5d3e495847c43468c1e27d457d2074479c1b9fd0004a94d574b5226e44b44abdf0e7b6449498288c68bf9ca31923e643ee51de9a075151fc088ac059172374450e0e1820c81df75fce3002a1869fe6dcddaf047f955df2b17d587477b2a182b8fe158764bb098c621556dd8111e3a405bfdb6c5e2be7d7692c2871dfc6fb607b56a6b79ef9ed65920a1aa41f45ab274fa9beccb65af1fd7c7a96e19ab037828ba924b8677ac986fef9fb793342bd605795ef8df61f4d02a276131d2ca9b85cd4f783588a