www.epikinc.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a0:e3:98:7e:5d:35:ec:73:fa:f7:ee:a9:5a:8e:08:94:02 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.epikinc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a0:e3:98:7e:5d:35:ec:73:fa:f7:ee:a9:5a:8e:08:94:02
Serial Number (int): 316084563049765085024613050640902281270274
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 10:0b:50:4a:f3:86:5d:15:27:03:d7:62:3b:23:e7:a3:bb:7a:41:b8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1c:54:75:ab:bf:1a:76:d4:3c:93:2a:35:7a:1c:f6:7c:14:a8:84:5f
Fingerprint (sha256): 86:37:76:e8:74:4c:ca:7e:9f:52:57:76:91:e5:25:63:89:6e:f8:9d:68:f2:a0:d4:b6:51:30:6f:90:b4:ea:10

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.epikinc.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.epikinc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

healthyfootcoach.com
icecreamvendingcarts.com
medical-staffing.com
phelpscounty.com
rarecollectibleplates.com
sanantonioriverwalkdining.com
showbrokerage.com
www.epikinc.com

Other certificates including the domain name epikinc.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.epikinc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0+50b5RLh4bC3ymAMDM
UOmzzsycNUCbvsVuQ0A0G2Ax9Xfaftgdm1DI1Y91sF4rUz6c/KS0iHjeQ9+qNCRV
x6XHB9nOAqcLU/gEyCkZi+Y40nnvAp6d1HVEMUpJGFkhPhgzsjHoa6kFu1g7O7Pc
iEJZDKe7f9aOp8P8U6XYzQphyWZ9Y92ldytetP3cUTWIFGzdH5Xw2TjWR1ZScnJw
IrDhk38tCM0ezl+0SLOuYAhZk5HfDtUU7eAKxW1o1H9Ga0OBLK2gLiCAop2+o1nx
NLKTgVAa1JYIYv1RabChVE8Smfr0H163dpAiIMFsfsHLNeUxOFX8+HKmzXYh0AvW
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316084563049765085024613050640902281270274
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 12:41:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 12:41:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.epikinc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24150830533709924238136674244221871620565111702557307364091561156991938875284464873719438217639011927172204746598175556457413383260141628034434714315237749449335137261071989778704387393795877389723079218689661292064750312283626271978466869996858476508856451409784353470104105727133552701086100326807052691619704721437384458262949289198104490145052165975856256542327483766415973739839092818438165143502903554742116584821044289734322478584063141703519774876456417996445934778143765834614407990216697394016094297003902331083404676026676788592458122250963122941529214294092438993729837236030682373317476718892694394099307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							100b504af3865d152703d7623b23e7a3bb7a41b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfootcoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icecreamvendingcarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medical-staffing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phelpscounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rarecollectibleplates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantonioriverwalkdining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showbrokerage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epikinc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d030e98bf00000403004730450220588002519bae3b36018a54727b0667276768decb8e15b8cde95002339c96490302210080c4e227deaa119e260dde9b0c54cc7170ace83db2e76cab1208a5b69c6e073600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d030e9957000004030047304502200e26c1b9b50526e0cef1ee8a418d0b4683a554eb364cecb91bcdedde2c75c3f1022100f27c4bd6ec631cb0f171b2ec227bb1c0374885e04a85fd2c06d42ee006bd39f6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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