ssl-lsplg.epik.to

Issued by R3

About this certificate

This digital certificate with serial number 04:ae:98:35:2c:21:91:dd:d2:1e:fa:7f:db:d1:11:f3:7c:df was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl-lsplg.epik.to

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ae:98:35:2c:21:91:dd:d2:1e:fa:7f:db:d1:11:f3:7c:df
Serial Number (int): 407860594313462784202611336267364390108383
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 47:cc:64:1a:57:12:d3:76:cc:bc:16:54:53:76:02:01:16:74:51:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:d5:a3:3d:26:d0:5a:07:47:2e:be:49:58:cb:ef:f9:9d:65:1e:2b
Fingerprint (sha256): be:79:41:6a:2e:34:43:8f:01:dd:a7:82:96:8a:1a:f7:9e:21:c3:db:a1:cf:22:7d:3d:18:be:7a:dc:81:7d:ff

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl-lsplg.epik.to

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl-lsplg.epik.to

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a2zlgbtq.com
alansears.org
arcadianstructure.org
austincountyfarms.com
bkhelps.com
bonus2buyers.com
cosperks.com
denizeczanem.com
discoverdomaining.com
disposableinsulinpen.com
dlbib.com
dykking.com
fortworthnewhomebuilder.com
ga.cosfacts.org
homeschoolconferences.org
insuranceabuse.com
internet.cooking
japan4vip.com
jobpri.com
madewithrxsugarallulose.com
misslatinadelmundo.com
modaltownhome.com
mythologicallandscape.com
ntccofcheyenne.org
ownman.vc
pauloleocadio.com
privatelabelrightsonline.com
puntamitavacationcondo.com
ravard.com
realestatesalescourse.com
redwoodart.org
repairbynumber.com
republicanphoto.org
rxsugarissugarasmedicine.com
savemoneyonaccidentinsurance.com
shaadidate.com
ssl-lsplg.epik.to
stoneoakfamilydoctors.com
stopghostguns.com
studio-artemis.com
taleinc.com
tasselsandtastemakers.com
thelibertytree.com
theutilitylocator.com
totalswimming.com
treasureclasses.com
tripblogs.com
vainpup.com
wreckpros.com

Other certificates including the domain name epik.to

(limited to 100 certificates)
ssl-lp5qx.epik.to
ssl-ya1lh.epik.to
ssl-bhs8u.epik.to
ssl-ycoca.epik.to
ssl-npif9.epik.to
ssl-wzrcr.epik.to
ssl-h7hbj.epik.to
ssl-66ert.epik.to
ssl-f7cwp.epik.to
ssl-67bdl.epik.to
ssl-i87rx.epik.to
ssl-0co1e.epik.to
ssl-ors36.epik.to
ssl-yybay.epik.to
ssl-05srt.epik.to
ssl-9vnnh.epik.to
ssl-u4cs0.epik.to
ssl-56d80.epik.to
ssl-uxvmb.epik.to
ssl-bfbw9.epik.to
ssl-7x3jc.epik.to
ssl-cc510.epik.to
ssl-7pvkq.epik.to
ssl-ukmwf.epik.to
ssl-of0zm.epik.to
ssl-pyfrd.epik.to
ssl-sqarl.epik.to
ssl-87gk0.epik.to
ssl-ff3i4.epik.to
ssl-bhs8u.epik.to
ssl-bsrzy.epik.to
ssl-5zl9y.epik.to
ssl-jisou.epik.to
ssl-jctpg.epik.to
ssl-zq51a.epik.to
ssl-cxlmf.epik.to
ssl-bo025.epik.to
ssl-7pvkq.epik.to
ssl-jgtym.epik.to
ssl-snvwl.epik.to
ssl-i87rx.epik.to
ssl-a9hev.epik.to
ssl-ou53h.epik.to
ssl-jhvrc.epik.to
ssl-au9g7.epik.to
ssl-bvhbo.epik.to
ssl-rhqhe.epik.to
ssl-is1v2.epik.to
ssl-jixju.epik.to
ssl-0co1e.epik.to
ssl-5ddox.epik.to
ssl-lvcck.epik.to
ssl-y6t2h.epik.to
ssl-xhv8v.epik.to
ssl-jhvrc.epik.to
ssl-lozda.epik.to
ssl-np5sh.epik.to
ssl-9s54k.epik.to
ssl-rhqhe.epik.to
ssl-jgtym.epik.to
ssl-1leka.epik.to
ssl-0qkk0.epik.to
ssl-na3zn.epik.to
ssl-lsplg.epik.to
ssl-3dxsi.epik.to
ssl-egt9q.epik.to
ssl-ycoca.epik.to
ssl-tlbto.epik.to
epik.to
ssl-2tmgo.epik.to
ssl-2a4ob.epik.to
ssl-rctc9.epik.to
ssl-9vnnh.epik.to
ssl-judg4.epik.to
ssl-odl4l.epik.to
ssl-5zl9y.epik.to
ssl-zmeya.epik.to
ssl-a3mgk.epik.to
ssl-5lu51.epik.to
ssl-ors36.epik.to
ssl-3dxsi.epik.to
ssl-1en2l.epik.to
ssl-24qde.epik.to
ssl-sewt0.epik.to
ssl-np5sh.epik.to
ssl-67bdl.epik.to
ssl-h7hbj.epik.to
ssl-wsyg2.epik.to
ssl-mh21w.epik.to
ssl-zidpe.epik.to
ssl-psdzy.epik.to
ssl-a1x9a.epik.to
ssl-6r4hl.epik.to
ssl-1p30q.epik.to
ssl-psdzy.epik.to
ssl-87gk0.epik.to

Certificate

The complete raw certificate details for ssl-lsplg.epik.to in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc13JkJkv75df6KtgI3U
uACA3bYGDVND9IREp7Gw0WlaDr1kEmHn9APPDZxVarrdSk/vaJTsnxeJkl/zA0PX
tBlvlCkdhHRebGtte3+6XMHaELmZVyZz6e0265PQwrIGcwC6Qp6gtC00dyqI3ojk
WITBFv7LiYI+KgwJlxHSzMj9j/c5f0c72yPSlCGxPq4m7q7whGprYuHzGM+Bb9Ln
Kd0Lze9b2tcJf7rtKDuaSTh5djs0er050f8ESXPwLWAJqRErFPJERO9KxJ9ZFcDa
nVz9bdt631au1Z63pECHG/D4b/kEpz2m/6mg89Ml0vKNaeQVw6CEzdlIqzGwvbFY
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407860594313462784202611336267364390108383
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 14:32:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 14:32:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl-lsplg.epik.to'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24970264856836776546905221374838258780661108722545757818986246998547508849490158150404588948442928988318316058984848687456200258304006015994855320536446253210358838261629249363543323736375642778157754379352166161370611354144804004922309359772996282770926163871905643169494022710788986482592628244356517464291374682798085255336616656598338629527903527542292402389031096881581458383446794342029512477669098806394709646835392590827531004680923253125603522617035263713189390345644729519093799141960286696059739012599794180990393922706556415975249456592762495895160291599681856000459760758212494311306445618847008813045973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47cc641a5712d376ccbc16545376020116745144
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (987 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a2zlgbtq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alansears.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcadianstructure.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austincountyfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkhelps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonus2buyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denizeczanem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverdomaining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disposableinsulinpen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlbib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dykking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortworthnewhomebuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ga.cosfacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolconferences.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insuranceabuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internet.cooking'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japan4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobpri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madewithrxsugarallulose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misslatinadelmundo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modaltownhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mythologicallandscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntccofcheyenne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ownman.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pauloleocadio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatelabelrightsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puntamitavacationcondo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestatesalescourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redwoodart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repairbynumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republicanphoto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarissugarasmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savemoneyonaccidentinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaadidate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-lsplg.epik.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoneoakfamilydoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stopghostguns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio-artemis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taleinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasselsandtastemakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelibertytree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theutilitylocator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalswimming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treasureclasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vainpup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wreckpros.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d414047b7000004030046304402205abd17591c6db79351187c171f8438051e0563e19efc56b4f56422370b4bf951022032affe48f467617289549bdddca1b86ec4b5ebe5f32e6eb45d1f962c5ccc8abc00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d4140497a0000040300483046022100da8c23cf637d714cbaa5f6bb3947a65ad076ea3c034bcc06d4db862d14dac3750221009b8e59fef292209e4e84e70371167498f68437b8ef84b9cdbe944fba5b0e2b78
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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