ssl-lsplg.epik.to
Issued by R3
About this certificate
This digital certificate with serial number 04:ae:98:35:2c:21:91:dd:d2:1e:fa:7f:db:d1:11:f3:7c:df was issued on by Let's Encrypt.
With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ssl-lsplg.epik.to
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:ae:98:35:2c:21:91:dd:d2:1e:fa:7f:db:d1:11:f3:7c:dfSerial Number (int): 407860594313462784202611336267364390108383
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 47:cc:64:1a:57:12:d3:76:cc:bc:16:54:53:76:02:01:16:74:51:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 4e:d5:a3:3d:26:d0:5a:07:47:2e:be:49:58:cb:ef:f9:9d:65:1e:2b
Fingerprint (sha256): be:79:41:6a:2e:34:43:8f:01:dd:a7:82:96:8a:1a:f7:9e:21:c3:db:a1:cf:22:7d:3d:18:be:7a:dc:81:7d:ff
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ssl-lsplg.epik.to
49
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ssl-lsplg.epik.to
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
a2zlgbtq.com
alansears.org
arcadianstructure.org
austincountyfarms.com
bkhelps.com
bonus2buyers.com
cosperks.com
denizeczanem.com
discoverdomaining.com
disposableinsulinpen.com
dlbib.com
dykking.com
fortworthnewhomebuilder.com
ga.cosfacts.org
homeschoolconferences.org
insuranceabuse.com
internet.cooking
japan4vip.com
jobpri.com
madewithrxsugarallulose.com
misslatinadelmundo.com
modaltownhome.com
mythologicallandscape.com
ntccofcheyenne.org
ownman.vc
pauloleocadio.com
privatelabelrightsonline.com
puntamitavacationcondo.com
ravard.com
realestatesalescourse.com
redwoodart.org
repairbynumber.com
republicanphoto.org
rxsugarissugarasmedicine.com
savemoneyonaccidentinsurance.com
shaadidate.com
ssl-lsplg.epik.to
stoneoakfamilydoctors.com
stopghostguns.com
studio-artemis.com
taleinc.com
tasselsandtastemakers.com
thelibertytree.com
theutilitylocator.com
totalswimming.com
treasureclasses.com
tripblogs.com
vainpup.com
wreckpros.com
alansears.org
arcadianstructure.org
austincountyfarms.com
bkhelps.com
bonus2buyers.com
cosperks.com
denizeczanem.com
discoverdomaining.com
disposableinsulinpen.com
dlbib.com
dykking.com
fortworthnewhomebuilder.com
ga.cosfacts.org
homeschoolconferences.org
insuranceabuse.com
internet.cooking
japan4vip.com
jobpri.com
madewithrxsugarallulose.com
misslatinadelmundo.com
modaltownhome.com
mythologicallandscape.com
ntccofcheyenne.org
ownman.vc
pauloleocadio.com
privatelabelrightsonline.com
puntamitavacationcondo.com
ravard.com
realestatesalescourse.com
redwoodart.org
repairbynumber.com
republicanphoto.org
rxsugarissugarasmedicine.com
savemoneyonaccidentinsurance.com
shaadidate.com
ssl-lsplg.epik.to
stoneoakfamilydoctors.com
stopghostguns.com
studio-artemis.com
taleinc.com
tasselsandtastemakers.com
thelibertytree.com
theutilitylocator.com
totalswimming.com
treasureclasses.com
tripblogs.com
vainpup.com
wreckpros.com
Other certificates including the domain name epik.to
(limited to 100 certificates)
ssl-lp5qx.epik.to
ssl-ya1lh.epik.to
ssl-bhs8u.epik.to
ssl-ycoca.epik.to
ssl-npif9.epik.to
ssl-wzrcr.epik.to
ssl-h7hbj.epik.to
ssl-66ert.epik.to
ssl-f7cwp.epik.to
ssl-67bdl.epik.to
ssl-i87rx.epik.to
ssl-0co1e.epik.to
ssl-ors36.epik.to
ssl-yybay.epik.to
ssl-05srt.epik.to
ssl-9vnnh.epik.to
ssl-u4cs0.epik.to
ssl-56d80.epik.to
ssl-uxvmb.epik.to
ssl-bfbw9.epik.to
ssl-7x3jc.epik.to
ssl-cc510.epik.to
ssl-7pvkq.epik.to
ssl-ukmwf.epik.to
ssl-of0zm.epik.to
ssl-pyfrd.epik.to
ssl-sqarl.epik.to
ssl-87gk0.epik.to
ssl-ff3i4.epik.to
ssl-bhs8u.epik.to
ssl-bsrzy.epik.to
ssl-5zl9y.epik.to
ssl-jisou.epik.to
ssl-jctpg.epik.to
ssl-zq51a.epik.to
ssl-cxlmf.epik.to
ssl-bo025.epik.to
ssl-7pvkq.epik.to
ssl-jgtym.epik.to
ssl-snvwl.epik.to
ssl-i87rx.epik.to
ssl-a9hev.epik.to
ssl-ou53h.epik.to
ssl-jhvrc.epik.to
ssl-au9g7.epik.to
ssl-bvhbo.epik.to
ssl-rhqhe.epik.to
ssl-is1v2.epik.to
ssl-jixju.epik.to
ssl-0co1e.epik.to
ssl-5ddox.epik.to
ssl-lvcck.epik.to
ssl-y6t2h.epik.to
ssl-xhv8v.epik.to
ssl-jhvrc.epik.to
ssl-lozda.epik.to
ssl-np5sh.epik.to
ssl-9s54k.epik.to
ssl-rhqhe.epik.to
ssl-jgtym.epik.to
ssl-1leka.epik.to
ssl-0qkk0.epik.to
ssl-na3zn.epik.to
ssl-lsplg.epik.to
ssl-3dxsi.epik.to
ssl-egt9q.epik.to
ssl-ycoca.epik.to
ssl-tlbto.epik.to
epik.to
ssl-2tmgo.epik.to
ssl-2a4ob.epik.to
ssl-rctc9.epik.to
ssl-9vnnh.epik.to
ssl-judg4.epik.to
ssl-odl4l.epik.to
ssl-5zl9y.epik.to
ssl-zmeya.epik.to
ssl-a3mgk.epik.to
ssl-5lu51.epik.to
ssl-ors36.epik.to
ssl-3dxsi.epik.to
ssl-1en2l.epik.to
ssl-24qde.epik.to
ssl-sewt0.epik.to
ssl-np5sh.epik.to
ssl-67bdl.epik.to
ssl-h7hbj.epik.to
ssl-wsyg2.epik.to
ssl-mh21w.epik.to
ssl-zidpe.epik.to
ssl-psdzy.epik.to
ssl-a1x9a.epik.to
ssl-6r4hl.epik.to
ssl-1p30q.epik.to
ssl-psdzy.epik.to
ssl-87gk0.epik.to
ssl-ya1lh.epik.to
ssl-bhs8u.epik.to
ssl-ycoca.epik.to
ssl-npif9.epik.to
ssl-wzrcr.epik.to
ssl-h7hbj.epik.to
ssl-66ert.epik.to
ssl-f7cwp.epik.to
ssl-67bdl.epik.to
ssl-i87rx.epik.to
ssl-0co1e.epik.to
ssl-ors36.epik.to
ssl-yybay.epik.to
ssl-05srt.epik.to
ssl-9vnnh.epik.to
ssl-u4cs0.epik.to
ssl-56d80.epik.to
ssl-uxvmb.epik.to
ssl-bfbw9.epik.to
ssl-7x3jc.epik.to
ssl-cc510.epik.to
ssl-7pvkq.epik.to
ssl-ukmwf.epik.to
ssl-of0zm.epik.to
ssl-pyfrd.epik.to
ssl-sqarl.epik.to
ssl-87gk0.epik.to
ssl-ff3i4.epik.to
ssl-bhs8u.epik.to
ssl-bsrzy.epik.to
ssl-5zl9y.epik.to
ssl-jisou.epik.to
ssl-jctpg.epik.to
ssl-zq51a.epik.to
ssl-cxlmf.epik.to
ssl-bo025.epik.to
ssl-7pvkq.epik.to
ssl-jgtym.epik.to
ssl-snvwl.epik.to
ssl-i87rx.epik.to
ssl-a9hev.epik.to
ssl-ou53h.epik.to
ssl-jhvrc.epik.to
ssl-au9g7.epik.to
ssl-bvhbo.epik.to
ssl-rhqhe.epik.to
ssl-is1v2.epik.to
ssl-jixju.epik.to
ssl-0co1e.epik.to
ssl-5ddox.epik.to
ssl-lvcck.epik.to
ssl-y6t2h.epik.to
ssl-xhv8v.epik.to
ssl-jhvrc.epik.to
ssl-lozda.epik.to
ssl-np5sh.epik.to
ssl-9s54k.epik.to
ssl-rhqhe.epik.to
ssl-jgtym.epik.to
ssl-1leka.epik.to
ssl-0qkk0.epik.to
ssl-na3zn.epik.to
ssl-lsplg.epik.to
ssl-3dxsi.epik.to
ssl-egt9q.epik.to
ssl-ycoca.epik.to
ssl-tlbto.epik.to
epik.to
ssl-2tmgo.epik.to
ssl-2a4ob.epik.to
ssl-rctc9.epik.to
ssl-9vnnh.epik.to
ssl-judg4.epik.to
ssl-odl4l.epik.to
ssl-5zl9y.epik.to
ssl-zmeya.epik.to
ssl-a3mgk.epik.to
ssl-5lu51.epik.to
ssl-ors36.epik.to
ssl-3dxsi.epik.to
ssl-1en2l.epik.to
ssl-24qde.epik.to
ssl-sewt0.epik.to
ssl-np5sh.epik.to
ssl-67bdl.epik.to
ssl-h7hbj.epik.to
ssl-wsyg2.epik.to
ssl-mh21w.epik.to
ssl-zidpe.epik.to
ssl-psdzy.epik.to
ssl-a1x9a.epik.to
ssl-6r4hl.epik.to
ssl-1p30q.epik.to
ssl-psdzy.epik.to
ssl-87gk0.epik.to
Certificate
The complete raw certificate details for ssl-lsplg.epik.to in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIuTCCB6GgAwIBAgISBK6YNSwhkd3SHvp/29ER83zfMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMjUxNDMyMjdaFw0yNDA0MjQxNDMyMjZaMBwxGjAYBgNVBAMT EXNzbC1sc3BsZy5lcGlrLnRvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxc13JkJkv75df6KtgI3UuACA3bYGDVND9IREp7Gw0WlaDr1kEmHn9APPDZxV arrdSk/vaJTsnxeJkl/zA0PXtBlvlCkdhHRebGtte3+6XMHaELmZVyZz6e0265PQ wrIGcwC6Qp6gtC00dyqI3ojkWITBFv7LiYI+KgwJlxHSzMj9j/c5f0c72yPSlCGx Pq4m7q7whGprYuHzGM+Bb9LnKd0Lze9b2tcJf7rtKDuaSTh5djs0er050f8ESXPw LWAJqRErFPJERO9KxJ9ZFcDanVz9bdt631au1Z63pECHG/D4b/kEpz2m/6mg89Ml 0vKNaeQVw6CEzdlIqzGwvbFY1QIDAQABo4IF3TCCBdkwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBRHzGQaVxLTdsy8FlRTdgIBFnRRRDAfBgNVHSMEGDAWgBQULrMXt1hW y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu b3JnLzCCA+QGA1UdEQSCA9swggPXggxhMnpsZ2J0cS5jb22CDWFsYW5zZWFycy5v cmeCFWFyY2FkaWFuc3RydWN0dXJlLm9yZ4IVYXVzdGluY291bnR5ZmFybXMuY29t ggtia2hlbHBzLmNvbYIQYm9udXMyYnV5ZXJzLmNvbYIMY29zcGVya3MuY29tghBk ZW5pemVjemFuZW0uY29tghVkaXNjb3ZlcmRvbWFpbmluZy5jb22CGGRpc3Bvc2Fi bGVpbnN1bGlucGVuLmNvbYIJZGxiaWIuY29tggtkeWtraW5nLmNvbYIbZm9ydHdv cnRobmV3aG9tZWJ1aWxkZXIuY29tgg9nYS5jb3NmYWN0cy5vcmeCGWhvbWVzY2hv b2xjb25mZXJlbmNlcy5vcmeCEmluc3VyYW5jZWFidXNlLmNvbYIQaW50ZXJuZXQu Y29va2luZ4INamFwYW40dmlwLmNvbYIKam9icHJpLmNvbYIbbWFkZXdpdGhyeHN1 Z2FyYWxsdWxvc2UuY29tghZtaXNzbGF0aW5hZGVsbXVuZG8uY29tghFtb2RhbHRv d25ob21lLmNvbYIZbXl0aG9sb2dpY2FsbGFuZHNjYXBlLmNvbYISbnRjY29mY2hl eWVubmUub3Jngglvd25tYW4udmOCEXBhdWxvbGVvY2FkaW8uY29tghxwcml2YXRl bGFiZWxyaWdodHNvbmxpbmUuY29tghpwdW50YW1pdGF2YWNhdGlvbmNvbmRvLmNv bYIKcmF2YXJkLmNvbYIZcmVhbGVzdGF0ZXNhbGVzY291cnNlLmNvbYIOcmVkd29v ZGFydC5vcmeCEnJlcGFpcmJ5bnVtYmVyLmNvbYITcmVwdWJsaWNhbnBob3RvLm9y Z4IccnhzdWdhcmlzc3VnYXJhc21lZGljaW5lLmNvbYIgc2F2ZW1vbmV5b25hY2Np ZGVudGluc3VyYW5jZS5jb22CDnNoYWFkaWRhdGUuY29tghFzc2wtbHNwbGcuZXBp ay50b4IZc3RvbmVvYWtmYW1pbHlkb2N0b3JzLmNvbYIRc3RvcGdob3N0Z3Vucy5j b22CEnN0dWRpby1hcnRlbWlzLmNvbYILdGFsZWluYy5jb22CGXRhc3NlbHNhbmR0 YXN0ZW1ha2Vycy5jb22CEnRoZWxpYmVydHl0cmVlLmNvbYIVdGhldXRpbGl0eWxv Y2F0b3IuY29tghF0b3RhbHN3aW1taW5nLmNvbYITdHJlYXN1cmVjbGFzc2VzLmNv bYINdHJpcGJsb2dzLmNvbYILdmFpbnB1cC5jb22CDXdyZWNrcHJvcy5jb20wEwYD VR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQDuzdBk 1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAY1BQEe3AAAEAwBGMEQCIFq9 F1kcbbeTURh8Fx+EOAUeBWPhnvxWtPVkIjcLS/lRAiAyr/5I9GdhcolUm93cobhu xLXr5fMubrRdH5YsXMyKvAB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5 2IRzAAABjUFASXoAAAQDAEgwRgIhANqMI89jfXFMuqX2uzlHplrQduo8A0vMBtTb hi0U2sN1AiEAm45Z/vKSIJ5OhOcDcRZ0mPaEN7jvhLnNvpRPulsOK3gwDQYJKoZI hvcNAQELBQADggEBABUPvopeupnLrjf6DqqqdDmbcPzkqhpIpPI00YcQV3ql70d4 9/MGlBYign+BYX57m+D2xT3bhr0xXDIa6iEiaPh+DQTyKmw2Lj7IhYsxq3nel+7w c1GScnLbcMLFKue7bEXduvAhTar0EthabIosHr7WLeyoJh4ZJlUUC/aaBsvyk+Rf HfSym0ru+Av1ceAfMrHSRFNItrpknpQfBEdFmhKGrGxhEWkt52NbMc+Atj3ynQoB +6wpnsCUAhF9MkWS3yqTb4wIxE+/W0ij8RN0wXtbjFE84kHCQu7yk31tATh5SF/6 MNT5OaFzk710fcasGYn+7/iVfd6Ljjm7+D7A4Us= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc13JkJkv75df6KtgI3U uACA3bYGDVND9IREp7Gw0WlaDr1kEmHn9APPDZxVarrdSk/vaJTsnxeJkl/zA0PX tBlvlCkdhHRebGtte3+6XMHaELmZVyZz6e0265PQwrIGcwC6Qp6gtC00dyqI3ojk WITBFv7LiYI+KgwJlxHSzMj9j/c5f0c72yPSlCGxPq4m7q7whGprYuHzGM+Bb9Ln Kd0Lze9b2tcJf7rtKDuaSTh5djs0er050f8ESXPwLWAJqRErFPJERO9KxJ9ZFcDa nVz9bdt631au1Z63pECHG/D4b/kEpz2m/6mg89Ml0vKNaeQVw6CEzdlIqzGwvbFY 1QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 407860594313462784202611336267364390108383 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 14:32:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 14:32:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl-lsplg.epik.to' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24970264856836776546905221374838258780661108722545757818986246998547508849490158150404588948442928988318316058984848687456200258304006015994855320536446253210358838261629249363543323736375642778157754379352166161370611354144804004922309359772996282770926163871905643169494022710788986482592628244356517464291374682798085255336616656598338629527903527542292402389031096881581458383446794342029512477669098806394709646835392590827531004680923253125603522617035263713189390345644729519093799141960286696059739012599794180990393922706556415975249456592762495895160291599681856000459760758212494311306445618847008813045973 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 47cc641a5712d376ccbc16545376020116745144 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (987 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a2zlgbtq.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alansears.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcadianstructure.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austincountyfarms.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkhelps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonus2buyers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosperks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denizeczanem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverdomaining.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disposableinsulinpen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlbib.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dykking.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortworthnewhomebuilder.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ga.cosfacts.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolconferences.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insuranceabuse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internet.cooking' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japan4vip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobpri.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madewithrxsugarallulose.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misslatinadelmundo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modaltownhome.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mythologicallandscape.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntccofcheyenne.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ownman.vc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pauloleocadio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatelabelrightsonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puntamitavacationcondo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestatesalescourse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redwoodart.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repairbynumber.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republicanphoto.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarissugarasmedicine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savemoneyonaccidentinsurance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaadidate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-lsplg.epik.to' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoneoakfamilydoctors.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stopghostguns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio-artemis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taleinc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasselsandtastemakers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelibertytree.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theutilitylocator.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalswimming.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treasureclasses.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripblogs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vainpup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wreckpros.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d414047b7000004030046304402205abd17591c6db79351187c171f8438051e0563e19efc56b4f56422370b4bf951022032affe48f467617289549bdddca1b86ec4b5ebe5f32e6eb45d1f962c5ccc8abc00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d4140497a0000040300483046022100da8c23cf637d714cbaa5f6bb3947a65ad076ea3c034bcc06d4db862d14dac3750221009b8e59fef292209e4e84e70371167498f68437b8ef84b9cdbe944fba5b0e2b78 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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