ssl-lozda.epik.to

Issued by R3

About this certificate

This digital certificate with serial number 04:70:f0:a5:1a:36:db:4d:56:11:c7:d5:02:f6:51:09:14:77 was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl-lozda.epik.to

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:70:f0:a5:1a:36:db:4d:56:11:c7:d5:02:f6:51:09:14:77
Serial Number (int): 386880640801844973732053377012710460953719
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 35:e6:fd:1f:9b:90:b3:8f:2d:ec:71:e3:63:3f:86:20:41:bf:ab:5f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fe:6d:fe:6f:a3:ad:ef:41:f4:24:b3:cd:57:0e:4e:a6:11:9e:b1:81
Fingerprint (sha256): a6:45:7e:fa:65:1d:77:03:e7:b1:11:29:ff:62:37:b5:2c:49:85:1f:06:59:6b:34:a8:0b:cd:85:e4:9c:76:66

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl-lozda.epik.to

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl-lozda.epik.to

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allenblock.co.uk
ashevillelawyer.com
beauregardparish.com
bibletheologyministries.com
blueskysland.com
careerforvip.com
channelsheetmetal.com
chopperstories.org
christianmuseumtour.com
clintonmikel.com
effectionsfx.com
empirestateroofing.com
eraserewind.com
exotic8k.com
friendsnbuddies.com
gadget4vip.com
homerepairtalk.com
howtoselfcustodybitcoin.com
inspirestrong.com
jaredcummingsphoto.com
launchpayments.com
leasingforvip.com
lovingfans.com
magnifing.com
markjohnstonllc.com
medicalresearchcenter.com
michigandisposal.com
nebucare.org
newagentcareers.com
newcovenantcommunioncups.com
numedia.net
robertfugate.com
roosterspur.com
shaadilove.in
smartpad.shop
ssl-lozda.epik.to
stopghostguns.org
technocrasea.com
teknoral.com
textmessagingads.com
theyoffendme.org
timbergrovemanor.com
turntableneedles.info
uscoinsandstamps.com
utmost24.com
videoiswhereitsat.com
viewpointdiversityscores.org
vrj.co.in
wishforvip.com

Other certificates including the domain name epik.to

(limited to 100 certificates)
ssl-lp5qx.epik.to
ssl-ya1lh.epik.to
ssl-bhs8u.epik.to
ssl-ycoca.epik.to
ssl-npif9.epik.to
ssl-wzrcr.epik.to
ssl-h7hbj.epik.to
ssl-66ert.epik.to
ssl-f7cwp.epik.to
ssl-67bdl.epik.to
ssl-i87rx.epik.to
ssl-0co1e.epik.to
ssl-ors36.epik.to
ssl-yybay.epik.to
ssl-05srt.epik.to
ssl-9vnnh.epik.to
ssl-u4cs0.epik.to
ssl-56d80.epik.to
ssl-uxvmb.epik.to
ssl-bfbw9.epik.to
ssl-7x3jc.epik.to
ssl-cc510.epik.to
ssl-7pvkq.epik.to
ssl-ukmwf.epik.to
ssl-of0zm.epik.to
ssl-pyfrd.epik.to
ssl-sqarl.epik.to
ssl-87gk0.epik.to
ssl-ff3i4.epik.to
ssl-bhs8u.epik.to
ssl-bsrzy.epik.to
ssl-5zl9y.epik.to
ssl-jisou.epik.to
ssl-jctpg.epik.to
ssl-zq51a.epik.to
ssl-cxlmf.epik.to
ssl-bo025.epik.to
ssl-7pvkq.epik.to
ssl-jgtym.epik.to
ssl-snvwl.epik.to
ssl-i87rx.epik.to
ssl-a9hev.epik.to
ssl-ou53h.epik.to
ssl-jhvrc.epik.to
ssl-au9g7.epik.to
ssl-bvhbo.epik.to
ssl-rhqhe.epik.to
ssl-is1v2.epik.to
ssl-jixju.epik.to
ssl-0co1e.epik.to
ssl-5ddox.epik.to
ssl-lvcck.epik.to
ssl-y6t2h.epik.to
ssl-xhv8v.epik.to
ssl-jhvrc.epik.to
ssl-lozda.epik.to
ssl-np5sh.epik.to
ssl-9s54k.epik.to
ssl-rhqhe.epik.to
ssl-jgtym.epik.to
ssl-1leka.epik.to
ssl-0qkk0.epik.to
ssl-na3zn.epik.to
ssl-lsplg.epik.to
ssl-3dxsi.epik.to
ssl-egt9q.epik.to
ssl-ycoca.epik.to
ssl-tlbto.epik.to
epik.to
ssl-2tmgo.epik.to
ssl-2a4ob.epik.to
ssl-rctc9.epik.to
ssl-9vnnh.epik.to
ssl-judg4.epik.to
ssl-odl4l.epik.to
ssl-5zl9y.epik.to
ssl-zmeya.epik.to
ssl-a3mgk.epik.to
ssl-5lu51.epik.to
ssl-ors36.epik.to
ssl-3dxsi.epik.to
ssl-1en2l.epik.to
ssl-24qde.epik.to
ssl-sewt0.epik.to
ssl-np5sh.epik.to
ssl-67bdl.epik.to
ssl-h7hbj.epik.to
ssl-wsyg2.epik.to
ssl-mh21w.epik.to
ssl-zidpe.epik.to
ssl-psdzy.epik.to
ssl-a1x9a.epik.to
ssl-6r4hl.epik.to
ssl-1p30q.epik.to
ssl-psdzy.epik.to
ssl-87gk0.epik.to

Certificate

The complete raw certificate details for ssl-lozda.epik.to in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35YYRXqRgnS6zORcy+2Q
R5/v6ZaXzvPNHe9U0sjvumQ6cTlJfdHh83JxWrAgGTUPZAKc4heE2lW4rpQAR60n
W+p6WQfZduK4SuB4q0PZdn+JSJHkUA+Yct9AOfGhUPNzf1oyjeZyqnfShAWPhT0U
ufk0jglwiU2TXKiIORMVoRUCafpY6N2vjRV/zeOexEklpUPrjdmdAGsCJ53Pbi4/
R9zn1oFPCsp0HAVuwraRyWX4QWX0TRLMS7by/CCWwWppWP030K9RNY0NpmOvsj1C
/LsdcLuHsiUgnRgFQvRZZ7w2TnYiNpz5arMflzwmJJI7NaRKQ97ZT3GAZt9Shbdx
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386880640801844973732053377012710460953719
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 16:10:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 16:10:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl-lozda.epik.to'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28225156516880544355555319863994712992491180266858450906772243582208054236502227996910562674475220121091610712338401472579909956419924356692831235397295928279976153083203615686182284547977757839307113869645586061572907114291630793297238529469502864373723050562941377464057552642455475478636141398058400083169977895275326799727556793335843286066240501599756099735971454472102709763958255830197590148237753126605733394680632655698270789530311255990105590302003750143910251212336869390235656800753814863701039535268832825832199348757187561824405585400817190697585447761304560223492542094984089813712462667074805379330521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35e6fd1f9b90b38f2dec71e3633f862041bfab5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (972 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allenblock.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashevillelawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beauregardparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibletheologyministries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueskysland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'channelsheetmetal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chopperstories.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christianmuseumtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clintonmikel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'effectionsfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empirestateroofing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eraserewind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exotic8k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendsnbuddies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadget4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homerepairtalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtoselfcustodybitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspirestrong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaredcummingsphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'launchpayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leasingforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovingfans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnifing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markjohnstonllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicalresearchcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michigandisposal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebucare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newagentcareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcovenantcommunioncups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robertfugate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosterspur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaadilove.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartpad.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-lozda.epik.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stopghostguns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technocrasea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teknoral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textmessagingads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theyoffendme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timbergrovemanor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turntableneedles.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscoinsandstamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utmost24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoiswhereitsat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewpointdiversityscores.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wishforvip.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d4199e2b0000004030048304602210093699f16508e40aefe679d5b6d256d5e70ab4ec426a4aa1f1ee006c1868b17830221009e0ae93c3e2450202bfe406558407d13db7e0be5f5160220bb5ecd50461230ce00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d4199e34e000004030046304402206dbcc502727acae10d140ab9415c07d5dcf794f397d4c09364a50e120955f50c022034539d4524f98675a25fac45bc1a2d03d004e2c2ec6251e3221464460dbbf8e5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007a6469cc1b86dae7bb7b581022736e37cf76e2d9b37cc4b73b3dd86181e556135991c074bf410a7af2fa13657b847e3943fa7db4f2f463a4d7b8f96fc8689dbc581e7bae603a2c391052d4e8cfeb72667ca65a813155404de4165b157c027c1b42d2de6f4175ae42c19c1bb239b1567830ff695a0b62de55f97ab636a7c6dcba7635ae0e4f70daf77997fe6611eccd748e5eddea52e2edd621bd84e312484ab5e7a05c4a1c715daadfc54637a92445545a5fd4ef76b83cb7c5d8fcce28c487fdca539c7b200209e0e2d1a864eb040f8358ef933567399fb81db82528e2c95672ca1203de482b5a0e022a15cd8fe53f7dd674f3281f6dbe9e1bc2f619bb01ab26