www.epikinc.com
Issued by R3
About this certificate
This digital certificate with serial number 03:a0:e3:98:7e:5d:35:ec:73:fa:f7:ee:a9:5a:8e:08:94:02 was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.epikinc.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a0:e3:98:7e:5d:35:ec:73:fa:f7:ee:a9:5a:8e:08:94:02Serial Number (int): 316084563049765085024613050640902281270274
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 10:0b:50:4a:f3:86:5d:15:27:03:d7:62:3b:23:e7:a3:bb:7a:41:b8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 1c:54:75:ab:bf:1a:76:d4:3c:93:2a:35:7a:1c:f6:7c:14:a8:84:5f
Fingerprint (sha256): 86:37:76:e8:74:4c:ca:7e:9f:52:57:76:91:e5:25:63:89:6e:f8:9d:68:f2:a0:d4:b6:51:30:6f:90:b4:ea:10
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.epikinc.com
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.epikinc.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
healthyfootcoach.com
icecreamvendingcarts.com
medical-staffing.com
phelpscounty.com
rarecollectibleplates.com
sanantonioriverwalkdining.com
showbrokerage.com
www.epikinc.com
icecreamvendingcarts.com
medical-staffing.com
phelpscounty.com
rarecollectibleplates.com
sanantonioriverwalkdining.com
showbrokerage.com
www.epikinc.com
Other certificates including the domain name epikinc.com
(limited to 100 certificates)
matthewhyde.com
www.delhiselfdefense.com
marketingguatemala.com
creatingforall.org
www.neolistic.com
arbitrageur.vc
palmspringsca.com
cyberdouche.com
tablesante.ca
roshibrothers.com.unionjackenergy.co.uk
zkidsmusic.com
www.whole-bodywellness.com
epikinc.com
enerpactoolsgroup.co.za
www.throsh.com
www.organicmattresswholesale.com
www.polymode.com
epikinc.com
macauracing.com
mobilewebspace.com
021labs.org
japanforvip.com.clams4free.org
www.waterdepletion.org
orderofthestarsandbars.org
www.safeoffshore.com
accountabilitygroup.ca
bakhtos.one
www.epikinc.com
www.guaranteedweed.com
poisonivycure.org
wencam.com.dof22.com
www.snohomishhomewatch.com
adeenah.ca
blackpartydresses.com
60nine.love
berwyn-locksmith.com
simiyatchclub.com
virtual-banking.com
www.sistemasorveglianza.com
zhuhaioffice.com
railwaysociety.org
minerdrone.com
liveden.hilltophorizons.ca
japanforvip.com.clams4free.org
appcard.org
www.delhiselfdefense.com
marketingguatemala.com
creatingforall.org
www.neolistic.com
arbitrageur.vc
palmspringsca.com
cyberdouche.com
tablesante.ca
roshibrothers.com.unionjackenergy.co.uk
zkidsmusic.com
www.whole-bodywellness.com
epikinc.com
enerpactoolsgroup.co.za
www.throsh.com
www.organicmattresswholesale.com
www.polymode.com
epikinc.com
macauracing.com
mobilewebspace.com
021labs.org
japanforvip.com.clams4free.org
www.waterdepletion.org
orderofthestarsandbars.org
www.safeoffshore.com
accountabilitygroup.ca
bakhtos.one
www.epikinc.com
www.guaranteedweed.com
poisonivycure.org
wencam.com.dof22.com
www.snohomishhomewatch.com
adeenah.ca
blackpartydresses.com
60nine.love
berwyn-locksmith.com
simiyatchclub.com
virtual-banking.com
www.sistemasorveglianza.com
zhuhaioffice.com
railwaysociety.org
minerdrone.com
liveden.hilltophorizons.ca
japanforvip.com.clams4free.org
appcard.org
Certificate
The complete raw certificate details for www.epikinc.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISA6DjmH5dNexz+vfuqVqOCJQCMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMTMxMjQxNDRaFw0yNDA0MTIxMjQxNDNaMBoxGDAWBgNVBAMT D3d3dy5lcGlraW5jLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AL9PudG+US4eGwt8pgDAzFDps87MnDVAm77FbkNANBtgMfV32n7YHZtQyNWPdbBe K1M+nPyktIh43kPfqjQkVcelxwfZzgKnC1P4BMgpGYvmONJ57wKendR1RDFKSRhZ IT4YM7Ix6GupBbtYOzuz3IhCWQynu3/WjqfD/FOl2M0KYclmfWPdpXcrXrT93FE1 iBRs3R+V8Nk41kdWUnJycCKw4ZN/LQjNHs5ftEizrmAIWZOR3w7VFO3gCsVtaNR/ RmtDgSytoC4ggKKdvqNZ8TSyk4FQGtSWCGL9UWmwoVRPEpn69B9et3aQIiDBbH7B yzXlMThV/Phyps12IdAL1msCAwEAAaOCArkwggK1MA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUEAtQSvOGXRUnA9diOyPno7t6QbgwHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wgcEGA1UdEQSBuTCBtoIUaGVhbHRoeWZvb3Rjb2FjaC5jb22CGGljZWNyZWFt dmVuZGluZ2NhcnRzLmNvbYIUbWVkaWNhbC1zdGFmZmluZy5jb22CEHBoZWxwc2Nv dW50eS5jb22CGXJhcmVjb2xsZWN0aWJsZXBsYXRlcy5jb22CHXNhbmFudG9uaW9y aXZlcndhbGtkaW5pbmcuY29tghFzaG93YnJva2VyYWdlLmNvbYIPd3d3LmVwaWtp bmMuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB 8gDwAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGNAw6YvwAA BAMARzBFAiBYgAJRm647NgGKVHJ7BmcnZ2jey44VuM3pUAIznJZJAwIhAIDE4ife qhGeJg3emwxUzHFwrOg9sudsqxIIpbacbgc2AHYAdv+IPwq2+5VRwmHM9Ye6NLSk zbsp3GhCCp/mZ0xaOnQAAAGNAw6ZVwAABAMARzBFAiAOJsG5tQUm4M7x7opBjQtG g6VU6zZM7Lkbze3eLHXD8QIhAPJ8S9bsYxyw8XGy7CJ7scA3SIXgSoX9LAbULuAG vTn2MA0GCSqGSIb3DQEBCwUAA4IBAQCx024V1/xnboqt09DvkJ5jnB/QMJnbiGhE psLRuWDsuIzi0CtSPLMuE3LjQnYo90AD9f6k4dVxoKPcOa0bMPfkHd/6r4yBdnW3 Y49lXddC3OV7JDDSThlY/7r46x0x9TiApiNRUJCypyGfBx5iaiZRt/FBDCUt0HjL 8JlFQJI4sZKjuXYcUPHOL0E6CVeBz3iM7tX905SK2tIxJZc4YiYueFblLlqVbHNa Cb/qthF8/kacAiP2X+Bk0qxsj7j4SM5jpIJjHMMukfYqlU8pKvKwY53bu0SPspDX li+LL7d9/H2GfmaNYZpL7KEFnysBm1LcFdO6kpCxttSAbeT0sM/N -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0+50b5RLh4bC3ymAMDM UOmzzsycNUCbvsVuQ0A0G2Ax9Xfaftgdm1DI1Y91sF4rUz6c/KS0iHjeQ9+qNCRV x6XHB9nOAqcLU/gEyCkZi+Y40nnvAp6d1HVEMUpJGFkhPhgzsjHoa6kFu1g7O7Pc iEJZDKe7f9aOp8P8U6XYzQphyWZ9Y92ldytetP3cUTWIFGzdH5Xw2TjWR1ZScnJw IrDhk38tCM0ezl+0SLOuYAhZk5HfDtUU7eAKxW1o1H9Ga0OBLK2gLiCAop2+o1nx NLKTgVAa1JYIYv1RabChVE8Smfr0H163dpAiIMFsfsHLNeUxOFX8+HKmzXYh0AvW awIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316084563049765085024613050640902281270274 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 12:41:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 12:41:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.epikinc.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24150830533709924238136674244221871620565111702557307364091561156991938875284464873719438217639011927172204746598175556457413383260141628034434714315237749449335137261071989778704387393795877389723079218689661292064750312283626271978466869996858476508856451409784353470104105727133552701086100326807052691619704721437384458262949289198104490145052165975856256542327483766415973739839092818438165143502903554742116584821044289734322478584063141703519774876456417996445934778143765834614407990216697394016094297003902331083404676026676788592458122250963122941529214294092438993729837236030682373317476718892694394099307 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 100b504af3865d152703d7623b23e7a3bb7a41b8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfootcoach.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icecreamvendingcarts.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medical-staffing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phelpscounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rarecollectibleplates.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantonioriverwalkdining.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showbrokerage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epikinc.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d030e98bf00000403004730450220588002519bae3b36018a54727b0667276768decb8e15b8cde95002339c96490302210080c4e227deaa119e260dde9b0c54cc7170ace83db2e76cab1208a5b69c6e073600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d030e9957000004030047304502200e26c1b9b50526e0cef1ee8a418d0b4683a554eb364cecb91bcdedde2c75c3f1022100f27c4bd6ec631cb0f171b2ec227bb1c0374885e04a85fd2c06d42ee006bd39f6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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