ssl-na3zn.epik.to

Issued by R3

About this certificate

This digital certificate with serial number 04:b5:29:e0:d2:53:00:d6:c1:52:62:99:e0:69:3f:8e:6c:9f was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl-na3zn.epik.to

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b5:29:e0:d2:53:00:d6:c1:52:62:99:e0:69:3f:8e:6c:9f
Serial Number (int): 410095917827936555704140844620275744926879
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f5:01:9f:7d:b4:4a:73:73:ec:54:21:1b:08:30:ef:82:4f:42:ee:b3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:7e:05:58:69:cf:2b:96:91:21:fc:28:b9:e8:3e:90:41:4b:53:83
Fingerprint (sha256): be:6f:c4:c7:71:95:12:b2:b0:eb:b5:c9:0e:14:4c:96:8d:cb:1b:f0:0b:38:68:7f:8d:c7:3b:0c:a4:cb:85:fb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl-na3zn.epik.to

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl-na3zn.epik.to

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3d-ocean-farm.com
animalang.com
arbitragehouse.com
arbitrageurs.ai
beachsideresurfacing.com
bellydanceclothes.com
camdenroad.com
candorr.com
chillerrentalandsales.com
clayclarktowergardens.com
clearsun.com
clippershipmuseum.org
decriminalisehomeschooling.org
delawarechamber.com
eboltluxembourg.com
gayaudiostories.com
goldforvip.com
healthyhomeregister.com
helicraft.org
inwilmingtonde.com
kimberturner.com
lgbtqcosmetics.com
medichirurgia.com
memorabiliauniverse.com
miamiforvip.com
mustanggrape.com
mustino.com
nehemiahstrong.com
neohgolf.com
novelpad.com
onlineadvertisingnetwork.com
organization.vc
pix69.com
plasticdiaries.com
positionaming.com
practicaldiets.com
questioncompiler.com
rarestampinvesting.com
richardgriffin.com
runawaypress.com
sculpit.bike
shootingblog.com
socratesdemo.com
ssl-na3zn.epik.to
themontanastore.org
turkishfootball.org
vinylcrafting.com
vitasneakers.com
webuychillers.com

Other certificates including the domain name epik.to

(limited to 100 certificates)
ssl-lp5qx.epik.to
ssl-ya1lh.epik.to
ssl-bhs8u.epik.to
ssl-ycoca.epik.to
ssl-npif9.epik.to
ssl-wzrcr.epik.to
ssl-h7hbj.epik.to
ssl-66ert.epik.to
ssl-f7cwp.epik.to
ssl-67bdl.epik.to
ssl-i87rx.epik.to
ssl-0co1e.epik.to
ssl-ors36.epik.to
ssl-yybay.epik.to
ssl-05srt.epik.to
ssl-9vnnh.epik.to
ssl-u4cs0.epik.to
ssl-56d80.epik.to
ssl-uxvmb.epik.to
ssl-bfbw9.epik.to
ssl-7x3jc.epik.to
ssl-cc510.epik.to
ssl-7pvkq.epik.to
ssl-ukmwf.epik.to
ssl-of0zm.epik.to
ssl-pyfrd.epik.to
ssl-sqarl.epik.to
ssl-87gk0.epik.to
ssl-ff3i4.epik.to
ssl-bhs8u.epik.to
ssl-bsrzy.epik.to
ssl-5zl9y.epik.to
ssl-jisou.epik.to
ssl-jctpg.epik.to
ssl-zq51a.epik.to
ssl-cxlmf.epik.to
ssl-bo025.epik.to
ssl-7pvkq.epik.to
ssl-jgtym.epik.to
ssl-snvwl.epik.to
ssl-i87rx.epik.to
ssl-a9hev.epik.to
ssl-ou53h.epik.to
ssl-jhvrc.epik.to
ssl-au9g7.epik.to
ssl-bvhbo.epik.to
ssl-rhqhe.epik.to
ssl-is1v2.epik.to
ssl-jixju.epik.to
ssl-0co1e.epik.to
ssl-5ddox.epik.to
ssl-lvcck.epik.to
ssl-y6t2h.epik.to
ssl-xhv8v.epik.to
ssl-jhvrc.epik.to
ssl-lozda.epik.to
ssl-np5sh.epik.to
ssl-9s54k.epik.to
ssl-rhqhe.epik.to
ssl-jgtym.epik.to
ssl-1leka.epik.to
ssl-0qkk0.epik.to
ssl-na3zn.epik.to
ssl-lsplg.epik.to
ssl-3dxsi.epik.to
ssl-egt9q.epik.to
ssl-ycoca.epik.to
ssl-tlbto.epik.to
epik.to
ssl-2tmgo.epik.to
ssl-2a4ob.epik.to
ssl-rctc9.epik.to
ssl-9vnnh.epik.to
ssl-judg4.epik.to
ssl-odl4l.epik.to
ssl-5zl9y.epik.to
ssl-zmeya.epik.to
ssl-a3mgk.epik.to
ssl-5lu51.epik.to
ssl-ors36.epik.to
ssl-3dxsi.epik.to
ssl-1en2l.epik.to
ssl-24qde.epik.to
ssl-sewt0.epik.to
ssl-np5sh.epik.to
ssl-67bdl.epik.to
ssl-h7hbj.epik.to
ssl-wsyg2.epik.to
ssl-mh21w.epik.to
ssl-zidpe.epik.to
ssl-psdzy.epik.to
ssl-a1x9a.epik.to
ssl-6r4hl.epik.to
ssl-1p30q.epik.to
ssl-psdzy.epik.to
ssl-87gk0.epik.to

Certificate

The complete raw certificate details for ssl-na3zn.epik.to in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIInzCCB4egAwIBAgISBLUp4NJTANbBUmKZ4Gk/jmyfMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMjUxNjA0MTVaFw0yNDA0MjQxNjA0MTRaMBwxGjAYBgNVBAMT
EXNzbC1uYTN6bi5lcGlrLnRvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5TUtQZ3KioC2p1SxKodNFJ+m2OKPWzkrG7mVMgJaCm++9F2n83zqDEmRv1nS
71h4TOZqpOk+3Zb1a4i0rroCgUSKSBnH3kokkQAuEsDidNuSJ7nay/FxEEIHcSYz
acZUbaHeh5wWcKaKgvxdnX5EVmTHtJxeXphdaU8zWSbZuRfbKoX4b7HqeyiKrLK0
aBwiZUNoJLQjkSilsdZ1Ner09w53jQy30Ph34uOSJ4NhEdF+ErDSOIS0OD6UPizK
kqXlgi01h9gEEh714Fzp8kffxi8pjJYfU85meDI/pftBzwfUQ7p5mmdkoUyujRxG
sBX1mO3hvsUAXr3Dk2OYw6QZiQIDAQABo4IFwzCCBb8wDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBT1AZ99tEpzc+xUIRsIMO+CT0LuszAfBgNVHSMEGDAWgBQULrMXt1hW
y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6
Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu
b3JnLzCCA8oGA1UdEQSCA8EwggO9ghEzZC1vY2Vhbi1mYXJtLmNvbYINYW5pbWFs
YW5nLmNvbYISYXJiaXRyYWdlaG91c2UuY29tgg9hcmJpdHJhZ2V1cnMuYWmCGGJl
YWNoc2lkZXJlc3VyZmFjaW5nLmNvbYIVYmVsbHlkYW5jZWNsb3RoZXMuY29tgg5j
YW1kZW5yb2FkLmNvbYILY2FuZG9yci5jb22CGWNoaWxsZXJyZW50YWxhbmRzYWxl
cy5jb22CGWNsYXljbGFya3Rvd2VyZ2FyZGVucy5jb22CDGNsZWFyc3VuLmNvbYIV
Y2xpcHBlcnNoaXBtdXNldW0ub3Jngh5kZWNyaW1pbmFsaXNlaG9tZXNjaG9vbGlu
Zy5vcmeCE2RlbGF3YXJlY2hhbWJlci5jb22CE2Vib2x0bHV4ZW1ib3VyZy5jb22C
E2dheWF1ZGlvc3Rvcmllcy5jb22CDmdvbGRmb3J2aXAuY29tghdoZWFsdGh5aG9t
ZXJlZ2lzdGVyLmNvbYINaGVsaWNyYWZ0Lm9yZ4ISaW53aWxtaW5ndG9uZGUuY29t
ghBraW1iZXJ0dXJuZXIuY29tghJsZ2J0cWNvc21ldGljcy5jb22CEW1lZGljaGly
dXJnaWEuY29tghdtZW1vcmFiaWxpYXVuaXZlcnNlLmNvbYIPbWlhbWlmb3J2aXAu
Y29tghBtdXN0YW5nZ3JhcGUuY29tggttdXN0aW5vLmNvbYISbmVoZW1pYWhzdHJv
bmcuY29tggxuZW9oZ29sZi5jb22CDG5vdmVscGFkLmNvbYIcb25saW5lYWR2ZXJ0
aXNpbmduZXR3b3JrLmNvbYIPb3JnYW5pemF0aW9uLnZjgglwaXg2OS5jb22CEnBs
YXN0aWNkaWFyaWVzLmNvbYIRcG9zaXRpb25hbWluZy5jb22CEnByYWN0aWNhbGRp
ZXRzLmNvbYIUcXVlc3Rpb25jb21waWxlci5jb22CFnJhcmVzdGFtcGludmVzdGlu
Zy5jb22CEnJpY2hhcmRncmlmZmluLmNvbYIQcnVuYXdheXByZXNzLmNvbYIMc2N1
bHBpdC5iaWtlghBzaG9vdGluZ2Jsb2cuY29tghBzb2NyYXRlc2RlbW8uY29tghFz
c2wtbmEzem4uZXBpay50b4ITdGhlbW9udGFuYXN0b3JlLm9yZ4ITdHVya2lzaGZv
b3RiYWxsLm9yZ4IRdmlueWxjcmFmdGluZy5jb22CEHZpdGFzbmVha2Vycy5jb22C
EXdlYnV5Y2hpbGxlcnMuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYB
BAHWeQIEAgSB9QSB8gDwAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H6
1BcAAAGNQZRQUwAABAMARzBFAiEArd3nD180pMNDhoaj0KtrHcxAE2pMQrpapYni
/8scyT0CIGynH696Grm0fE1vkveJ0FAo6LK2v3X08pDIoxrvHtk4AHYAouK/1h7e
Ly8HoNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGNQZRQzQAABAMARzBFAiBM3Yz7
n8OPEPrG1zhTJRhsuV6GwE5l5lIkseSQ9ykvDAIhAJAs/2a9sLtD4jB+YEYT0NNI
vtQ7tKqRPcLUAoHByJsNMA0GCSqGSIb3DQEBCwUAA4IBAQA9aF2fWps8XnMtq6hB
oFvQvIiAPiYs/Ls8bdEnWnh9Q6NIg0F/KoAR9N/BccQnf05ur5ONWy5mNa7szIsi
zk4+Pq98jTOWT8YzI0HsyjY++0tJfdyfllo3IVJ+bTKvuvVq3uoL4Z21qgR+aJtd
gloeYqffllsM9ZCi+a7fYzQJlPYrhM5SE+CFzLVJ9OWtSG5v4aKDJAm6ywCHdgTr
wokXtugmBnRbISmt/w2t9GRg+mGpmcx8Yuh8WRtxiDl8iX5TSk2NxLxmYSGs5MJO
TciWbl0xmNpm0QqcAmMoGwG4rxhbroVW66yvvypDbckY97frPOfzYxhjPHV8g17j
S0Xq
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TUtQZ3KioC2p1SxKodN
FJ+m2OKPWzkrG7mVMgJaCm++9F2n83zqDEmRv1nS71h4TOZqpOk+3Zb1a4i0rroC
gUSKSBnH3kokkQAuEsDidNuSJ7nay/FxEEIHcSYzacZUbaHeh5wWcKaKgvxdnX5E
VmTHtJxeXphdaU8zWSbZuRfbKoX4b7HqeyiKrLK0aBwiZUNoJLQjkSilsdZ1Ner0
9w53jQy30Ph34uOSJ4NhEdF+ErDSOIS0OD6UPizKkqXlgi01h9gEEh714Fzp8kff
xi8pjJYfU85meDI/pftBzwfUQ7p5mmdkoUyujRxGsBX1mO3hvsUAXr3Dk2OYw6QZ
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410095917827936555704140844620275744926879
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 16:04:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 16:04:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl-na3zn.epik.to'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28934794285990574975285778984703349974721522284454754847382404436752484034998346770574547565120296543600669266256671345968385792326852547269307352364168932961908509696842480797774648048562466863989306401902228587458100948476945901566062261907368886590062709434957293441439551846142692421880266209443805075723686837724985300335370574161355468990710818600957990737189070269089552885826089223938529086452158592423013925436341948685657879831212903533829071501526472354377694622390338657729024247341359091309568817677508121254674291365700943709938915788969911113496956821281962026977778468247360799255119006903016188287369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5019f7db44a7373ec54211b0830ef824f42eeb3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (961 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3d-ocean-farm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animalang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageurs.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachsideresurfacing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellydanceclothes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camdenroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candorr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chillerrentalandsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clayclarktowergardens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clippershipmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decriminalisehomeschooling.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delawarechamber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eboltluxembourg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayaudiostories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomeregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helicraft.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inwilmingtonde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimberturner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqcosmetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medichirurgia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memorabiliauniverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miamiforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mustanggrape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mustino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nehemiahstrong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neohgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novelpad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineadvertisingnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organization.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pix69.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plasticdiaries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'positionaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practicaldiets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questioncompiler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rarestampinvesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richardgriffin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runawaypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sculpit.bike'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shootingblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socratesdemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-na3zn.epik.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themontanastore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turkishfootball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinylcrafting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitasneakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webuychillers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d419450530000040300473045022100addde70f5f34a4c3438686a3d0ab6b1dcc40136a4c42ba5aa589e2ffcb1cc93d02206ca71faf7a1ab9b47c4d6f92f789d05028e8b2b6bf75f4f290c8a31aef1ed938007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d419450cd000004030047304502204cdd8cfb9fc38f10fac6d7385325186cb95e86c04e65e65224b1e490f7292f0c022100902cff66bdb0bb43e2307e604613d0d348bed43bb4aa913dc2d40281c1c89b0d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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