ssl-lozda.epik.to
Issued by R3
About this certificate
This digital certificate with serial number 04:70:f0:a5:1a:36:db:4d:56:11:c7:d5:02:f6:51:09:14:77 was issued on by Let's Encrypt.
With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ssl-lozda.epik.to
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:70:f0:a5:1a:36:db:4d:56:11:c7:d5:02:f6:51:09:14:77Serial Number (int): 386880640801844973732053377012710460953719
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 35:e6:fd:1f:9b:90:b3:8f:2d:ec:71:e3:63:3f:86:20:41:bf:ab:5f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): fe:6d:fe:6f:a3:ad:ef:41:f4:24:b3:cd:57:0e:4e:a6:11:9e:b1:81
Fingerprint (sha256): a6:45:7e:fa:65:1d:77:03:e7:b1:11:29:ff:62:37:b5:2c:49:85:1f:06:59:6b:34:a8:0b:cd:85:e4:9c:76:66
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ssl-lozda.epik.to
49
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ssl-lozda.epik.to
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
allenblock.co.uk
ashevillelawyer.com
beauregardparish.com
bibletheologyministries.com
blueskysland.com
careerforvip.com
channelsheetmetal.com
chopperstories.org
christianmuseumtour.com
clintonmikel.com
effectionsfx.com
empirestateroofing.com
eraserewind.com
exotic8k.com
friendsnbuddies.com
gadget4vip.com
homerepairtalk.com
howtoselfcustodybitcoin.com
inspirestrong.com
jaredcummingsphoto.com
launchpayments.com
leasingforvip.com
lovingfans.com
magnifing.com
markjohnstonllc.com
medicalresearchcenter.com
michigandisposal.com
nebucare.org
newagentcareers.com
newcovenantcommunioncups.com
numedia.net
robertfugate.com
roosterspur.com
shaadilove.in
smartpad.shop
ssl-lozda.epik.to
stopghostguns.org
technocrasea.com
teknoral.com
textmessagingads.com
theyoffendme.org
timbergrovemanor.com
turntableneedles.info
uscoinsandstamps.com
utmost24.com
videoiswhereitsat.com
viewpointdiversityscores.org
vrj.co.in
wishforvip.com
ashevillelawyer.com
beauregardparish.com
bibletheologyministries.com
blueskysland.com
careerforvip.com
channelsheetmetal.com
chopperstories.org
christianmuseumtour.com
clintonmikel.com
effectionsfx.com
empirestateroofing.com
eraserewind.com
exotic8k.com
friendsnbuddies.com
gadget4vip.com
homerepairtalk.com
howtoselfcustodybitcoin.com
inspirestrong.com
jaredcummingsphoto.com
launchpayments.com
leasingforvip.com
lovingfans.com
magnifing.com
markjohnstonllc.com
medicalresearchcenter.com
michigandisposal.com
nebucare.org
newagentcareers.com
newcovenantcommunioncups.com
numedia.net
robertfugate.com
roosterspur.com
shaadilove.in
smartpad.shop
ssl-lozda.epik.to
stopghostguns.org
technocrasea.com
teknoral.com
textmessagingads.com
theyoffendme.org
timbergrovemanor.com
turntableneedles.info
uscoinsandstamps.com
utmost24.com
videoiswhereitsat.com
viewpointdiversityscores.org
vrj.co.in
wishforvip.com
Other certificates including the domain name epik.to
(limited to 100 certificates)
ssl-lp5qx.epik.to
ssl-ya1lh.epik.to
ssl-bhs8u.epik.to
ssl-ycoca.epik.to
ssl-npif9.epik.to
ssl-wzrcr.epik.to
ssl-h7hbj.epik.to
ssl-66ert.epik.to
ssl-f7cwp.epik.to
ssl-67bdl.epik.to
ssl-i87rx.epik.to
ssl-0co1e.epik.to
ssl-ors36.epik.to
ssl-yybay.epik.to
ssl-05srt.epik.to
ssl-9vnnh.epik.to
ssl-u4cs0.epik.to
ssl-56d80.epik.to
ssl-uxvmb.epik.to
ssl-bfbw9.epik.to
ssl-7x3jc.epik.to
ssl-cc510.epik.to
ssl-7pvkq.epik.to
ssl-ukmwf.epik.to
ssl-of0zm.epik.to
ssl-pyfrd.epik.to
ssl-sqarl.epik.to
ssl-87gk0.epik.to
ssl-ff3i4.epik.to
ssl-bhs8u.epik.to
ssl-bsrzy.epik.to
ssl-5zl9y.epik.to
ssl-jisou.epik.to
ssl-jctpg.epik.to
ssl-zq51a.epik.to
ssl-cxlmf.epik.to
ssl-bo025.epik.to
ssl-7pvkq.epik.to
ssl-jgtym.epik.to
ssl-snvwl.epik.to
ssl-i87rx.epik.to
ssl-a9hev.epik.to
ssl-ou53h.epik.to
ssl-jhvrc.epik.to
ssl-au9g7.epik.to
ssl-bvhbo.epik.to
ssl-rhqhe.epik.to
ssl-is1v2.epik.to
ssl-jixju.epik.to
ssl-0co1e.epik.to
ssl-5ddox.epik.to
ssl-lvcck.epik.to
ssl-y6t2h.epik.to
ssl-xhv8v.epik.to
ssl-jhvrc.epik.to
ssl-lozda.epik.to
ssl-np5sh.epik.to
ssl-9s54k.epik.to
ssl-rhqhe.epik.to
ssl-jgtym.epik.to
ssl-1leka.epik.to
ssl-0qkk0.epik.to
ssl-na3zn.epik.to
ssl-lsplg.epik.to
ssl-3dxsi.epik.to
ssl-egt9q.epik.to
ssl-ycoca.epik.to
ssl-tlbto.epik.to
epik.to
ssl-2tmgo.epik.to
ssl-2a4ob.epik.to
ssl-rctc9.epik.to
ssl-9vnnh.epik.to
ssl-judg4.epik.to
ssl-odl4l.epik.to
ssl-5zl9y.epik.to
ssl-zmeya.epik.to
ssl-a3mgk.epik.to
ssl-5lu51.epik.to
ssl-ors36.epik.to
ssl-3dxsi.epik.to
ssl-1en2l.epik.to
ssl-24qde.epik.to
ssl-sewt0.epik.to
ssl-np5sh.epik.to
ssl-67bdl.epik.to
ssl-h7hbj.epik.to
ssl-wsyg2.epik.to
ssl-mh21w.epik.to
ssl-zidpe.epik.to
ssl-psdzy.epik.to
ssl-a1x9a.epik.to
ssl-6r4hl.epik.to
ssl-1p30q.epik.to
ssl-psdzy.epik.to
ssl-87gk0.epik.to
ssl-ya1lh.epik.to
ssl-bhs8u.epik.to
ssl-ycoca.epik.to
ssl-npif9.epik.to
ssl-wzrcr.epik.to
ssl-h7hbj.epik.to
ssl-66ert.epik.to
ssl-f7cwp.epik.to
ssl-67bdl.epik.to
ssl-i87rx.epik.to
ssl-0co1e.epik.to
ssl-ors36.epik.to
ssl-yybay.epik.to
ssl-05srt.epik.to
ssl-9vnnh.epik.to
ssl-u4cs0.epik.to
ssl-56d80.epik.to
ssl-uxvmb.epik.to
ssl-bfbw9.epik.to
ssl-7x3jc.epik.to
ssl-cc510.epik.to
ssl-7pvkq.epik.to
ssl-ukmwf.epik.to
ssl-of0zm.epik.to
ssl-pyfrd.epik.to
ssl-sqarl.epik.to
ssl-87gk0.epik.to
ssl-ff3i4.epik.to
ssl-bhs8u.epik.to
ssl-bsrzy.epik.to
ssl-5zl9y.epik.to
ssl-jisou.epik.to
ssl-jctpg.epik.to
ssl-zq51a.epik.to
ssl-cxlmf.epik.to
ssl-bo025.epik.to
ssl-7pvkq.epik.to
ssl-jgtym.epik.to
ssl-snvwl.epik.to
ssl-i87rx.epik.to
ssl-a9hev.epik.to
ssl-ou53h.epik.to
ssl-jhvrc.epik.to
ssl-au9g7.epik.to
ssl-bvhbo.epik.to
ssl-rhqhe.epik.to
ssl-is1v2.epik.to
ssl-jixju.epik.to
ssl-0co1e.epik.to
ssl-5ddox.epik.to
ssl-lvcck.epik.to
ssl-y6t2h.epik.to
ssl-xhv8v.epik.to
ssl-jhvrc.epik.to
ssl-lozda.epik.to
ssl-np5sh.epik.to
ssl-9s54k.epik.to
ssl-rhqhe.epik.to
ssl-jgtym.epik.to
ssl-1leka.epik.to
ssl-0qkk0.epik.to
ssl-na3zn.epik.to
ssl-lsplg.epik.to
ssl-3dxsi.epik.to
ssl-egt9q.epik.to
ssl-ycoca.epik.to
ssl-tlbto.epik.to
epik.to
ssl-2tmgo.epik.to
ssl-2a4ob.epik.to
ssl-rctc9.epik.to
ssl-9vnnh.epik.to
ssl-judg4.epik.to
ssl-odl4l.epik.to
ssl-5zl9y.epik.to
ssl-zmeya.epik.to
ssl-a3mgk.epik.to
ssl-5lu51.epik.to
ssl-ors36.epik.to
ssl-3dxsi.epik.to
ssl-1en2l.epik.to
ssl-24qde.epik.to
ssl-sewt0.epik.to
ssl-np5sh.epik.to
ssl-67bdl.epik.to
ssl-h7hbj.epik.to
ssl-wsyg2.epik.to
ssl-mh21w.epik.to
ssl-zidpe.epik.to
ssl-psdzy.epik.to
ssl-a1x9a.epik.to
ssl-6r4hl.epik.to
ssl-1p30q.epik.to
ssl-psdzy.epik.to
ssl-87gk0.epik.to
Certificate
The complete raw certificate details for ssl-lozda.epik.to in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIqjCCB5KgAwIBAgISBHDwpRo2201WEcfVAvZRCRR3MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMjUxNjEwMjBaFw0yNDA0MjQxNjEwMTlaMBwxGjAYBgNVBAMT EXNzbC1sb3pkYS5lcGlrLnRvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35YYRXqRgnS6zORcy+2QR5/v6ZaXzvPNHe9U0sjvumQ6cTlJfdHh83JxWrAg GTUPZAKc4heE2lW4rpQAR60nW+p6WQfZduK4SuB4q0PZdn+JSJHkUA+Yct9AOfGh UPNzf1oyjeZyqnfShAWPhT0Uufk0jglwiU2TXKiIORMVoRUCafpY6N2vjRV/zeOe xEklpUPrjdmdAGsCJ53Pbi4/R9zn1oFPCsp0HAVuwraRyWX4QWX0TRLMS7by/CCW wWppWP030K9RNY0NpmOvsj1C/LsdcLuHsiUgnRgFQvRZZ7w2TnYiNpz5arMflzwm JJI7NaRKQ97ZT3GAZt9Shbdx2QIDAQABo4IFzjCCBcowDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBQ15v0fm5Czjy3sceNjP4YgQb+rXzAfBgNVHSMEGDAWgBQULrMXt1hW y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu b3JnLzCCA9UGA1UdEQSCA8wwggPIghBhbGxlbmJsb2NrLmNvLnVrghNhc2hldmls bGVsYXd5ZXIuY29tghRiZWF1cmVnYXJkcGFyaXNoLmNvbYIbYmlibGV0aGVvbG9n eW1pbmlzdHJpZXMuY29tghBibHVlc2t5c2xhbmQuY29tghBjYXJlZXJmb3J2aXAu Y29tghVjaGFubmVsc2hlZXRtZXRhbC5jb22CEmNob3BwZXJzdG9yaWVzLm9yZ4IX Y2hyaXN0aWFubXVzZXVtdG91ci5jb22CEGNsaW50b25taWtlbC5jb22CEGVmZmVj dGlvbnNmeC5jb22CFmVtcGlyZXN0YXRlcm9vZmluZy5jb22CD2VyYXNlcmV3aW5k LmNvbYIMZXhvdGljOGsuY29tghNmcmllbmRzbmJ1ZGRpZXMuY29tgg5nYWRnZXQ0 dmlwLmNvbYISaG9tZXJlcGFpcnRhbGsuY29tghtob3d0b3NlbGZjdXN0b2R5Yml0 Y29pbi5jb22CEWluc3BpcmVzdHJvbmcuY29tghZqYXJlZGN1bW1pbmdzcGhvdG8u Y29tghJsYXVuY2hwYXltZW50cy5jb22CEWxlYXNpbmdmb3J2aXAuY29tgg5sb3Zp bmdmYW5zLmNvbYINbWFnbmlmaW5nLmNvbYITbWFya2pvaG5zdG9ubGxjLmNvbYIZ bWVkaWNhbHJlc2VhcmNoY2VudGVyLmNvbYIUbWljaGlnYW5kaXNwb3NhbC5jb22C DG5lYnVjYXJlLm9yZ4ITbmV3YWdlbnRjYXJlZXJzLmNvbYIcbmV3Y292ZW5hbnRj b21tdW5pb25jdXBzLmNvbYILbnVtZWRpYS5uZXSCEHJvYmVydGZ1Z2F0ZS5jb22C D3Jvb3N0ZXJzcHVyLmNvbYINc2hhYWRpbG92ZS5pboINc21hcnRwYWQuc2hvcIIR c3NsLWxvemRhLmVwaWsudG+CEXN0b3BnaG9zdGd1bnMub3JnghB0ZWNobm9jcmFz ZWEuY29tggx0ZWtub3JhbC5jb22CFHRleHRtZXNzYWdpbmdhZHMuY29tghB0aGV5 b2ZmZW5kbWUub3JnghR0aW1iZXJncm92ZW1hbm9yLmNvbYIVdHVybnRhYmxlbmVl ZGxlcy5pbmZvghR1c2NvaW5zYW5kc3RhbXBzLmNvbYIMdXRtb3N0MjQuY29tghV2 aWRlb2lzd2hlcmVpdHNhdC5jb22CHHZpZXdwb2ludGRpdmVyc2l0eXNjb3Jlcy5v cmeCCXZyai5jby5pboIOd2lzaGZvcnZpcC5jb20wEwYDVR0gBAwwCjAIBgZngQwB AgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwA7U3d1Pi25gE6LMFsG/kA7Z9hP w/THvQANLXJv4frUFwAAAY1BmeKwAAAEAwBIMEYCIQCTaZ8WUI5Arv5nnVttJW1e cKtOxCakqh8e4AbBhosXgwIhAJ4K6Tw+JFAgK/5AZVhAfRPbfgvl9RYCILtezVBG EjDOAHUAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGNQZnjTgAA BAMARjBEAiBtvMUCcnrK4Q0UCrlBXAfV3PeU85fUwJNkpQ4SCVX1DAIgNFOdRST5 hnWiX6xFvBotA9AE4sLsYlHjIhRkRg27+OUwDQYJKoZIhvcNAQELBQADggEBAHpk acwbhtrnu3tYECJzbjfPduLZs3zEtzs92GGB5VYTWZHAdL9BCnry+hNle4R+OUP6 fbTy9GOk17j5b8honbxYHnuuYDosORBS1OjP63JmfKZagTFVQE3kFlsVfAJ8G0LS 3m9Bda5CwZwbsjmxVngw/2laC2LeVfl6tjanxty6djWuDk9w2vd5l/5mEezNdI5e 3epS4u3WIb2E4xJISrXnoFxKHHFdqt/FRjepJEVUWl/U73a4PLfF2PzOKMSH/cpT nHsgAgng4tGoZOsED4NY75M1ZzmfuB24JSjiyVZyyhID3kgrWg4CKhXNj+U/fdZ0 8ygfbb6eG8L2GbsBqyY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35YYRXqRgnS6zORcy+2Q R5/v6ZaXzvPNHe9U0sjvumQ6cTlJfdHh83JxWrAgGTUPZAKc4heE2lW4rpQAR60n W+p6WQfZduK4SuB4q0PZdn+JSJHkUA+Yct9AOfGhUPNzf1oyjeZyqnfShAWPhT0U ufk0jglwiU2TXKiIORMVoRUCafpY6N2vjRV/zeOexEklpUPrjdmdAGsCJ53Pbi4/ R9zn1oFPCsp0HAVuwraRyWX4QWX0TRLMS7by/CCWwWppWP030K9RNY0NpmOvsj1C /LsdcLuHsiUgnRgFQvRZZ7w2TnYiNpz5arMflzwmJJI7NaRKQ97ZT3GAZt9Shbdx 2QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 386880640801844973732053377012710460953719 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 16:10:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 16:10:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl-lozda.epik.to' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28225156516880544355555319863994712992491180266858450906772243582208054236502227996910562674475220121091610712338401472579909956419924356692831235397295928279976153083203615686182284547977757839307113869645586061572907114291630793297238529469502864373723050562941377464057552642455475478636141398058400083169977895275326799727556793335843286066240501599756099735971454472102709763958255830197590148237753126605733394680632655698270789530311255990105590302003750143910251212336869390235656800753814863701039535268832825832199348757187561824405585400817190697585447761304560223492542094984089813712462667074805379330521 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 35e6fd1f9b90b38f2dec71e3633f862041bfab5f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (972 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allenblock.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashevillelawyer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beauregardparish.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibletheologyministries.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueskysland.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerforvip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'channelsheetmetal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chopperstories.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christianmuseumtour.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clintonmikel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'effectionsfx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empirestateroofing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eraserewind.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exotic8k.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendsnbuddies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadget4vip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homerepairtalk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtoselfcustodybitcoin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspirestrong.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaredcummingsphoto.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'launchpayments.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leasingforvip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovingfans.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnifing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markjohnstonllc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicalresearchcenter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michigandisposal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebucare.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newagentcareers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcovenantcommunioncups.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numedia.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robertfugate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosterspur.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaadilove.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartpad.shop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-lozda.epik.to' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stopghostguns.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technocrasea.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teknoral.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textmessagingads.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theyoffendme.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timbergrovemanor.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turntableneedles.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscoinsandstamps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utmost24.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoiswhereitsat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewpointdiversityscores.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrj.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wishforvip.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d4199e2b0000004030048304602210093699f16508e40aefe679d5b6d256d5e70ab4ec426a4aa1f1ee006c1868b17830221009e0ae93c3e2450202bfe406558407d13db7e0be5f5160220bb5ecd50461230ce00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d4199e34e000004030046304402206dbcc502727acae10d140ab9415c07d5dcf794f397d4c09364a50e120955f50c022034539d4524f98675a25fac45bc1a2d03d004e2c2ec6251e3221464460dbbf8e5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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