ssl-2a4ob.epik.to

Issued by R3

About this certificate

This digital certificate with serial number 04:7e:3f:e7:93:11:5f:06:d9:75:fd:f2:bb:94:d2:12:ad:63 was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl-2a4ob.epik.to

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7e:3f:e7:93:11:5f:06:d9:75:fd:f2:bb:94:d2:12:ad:63
Serial Number (int): 391409665726278504084012015198444086013283
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 92:79:6b:46:5a:da:41:3a:15:1d:23:c2:fc:19:7b:ee:cd:eb:1f:66
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fa:0b:e6:e0:2d:3c:4a:b1:38:d6:9f:b0:d9:7f:49:93:86:96:83:ed
Fingerprint (sha256): ca:b3:62:36:ef:89:fc:df:ae:05:64:eb:dc:b3:e3:63:78:dd:34:63:64:a0:48:5a:ab:8b:cb:89:53:40:03:a2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl-2a4ob.epik.to

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl-2a4ob.epik.to

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alcaclinic.com
alternativepac.org
ameriblog.com
arbitragemarkets.com
backroadfoods.com
bestfortworthlawyers.com
bluemagicgroup.com
cembel.com
conspiracyconversation.com
deliver.tube
dentcommand.com
dncartoons.com
domainicle.com
eaglecircuits.com
emilyhillstrom.com
engale.com
fc.vc
flippingspace.com
fortworthnewhomesforsale.com
ftworthchristianschool.com
gaylisting.com
gaymecca.com
gemalings.ca
greenhomeassociation.com
halloweencostumecheap.com
harleystreetliposuction.com
hiregpt.ai
honoluluforvip.com
kangaroomeats.com
masonvideoproduction.com
nascarrvrentals.com
near.vc
ofschedule.com
omegabritehemp.com
personalizedguitarpicks.com
racewalkers.com
samanmag.com
samedguide.com
secondstorystudioanddesign.com
seoanalysishub.com
shipwrecksalvor.com
slotsnigeria.com
ssl-2a4ob.epik.to
supertornado.com
veggiewool.com
wonderful-romania.com
wrian.com
www.resumetemplateword.com
wwwmerriamwebster.com

Other certificates including the domain name epik.to

(limited to 100 certificates)
ssl-lp5qx.epik.to
ssl-ya1lh.epik.to
ssl-bhs8u.epik.to
ssl-ycoca.epik.to
ssl-npif9.epik.to
ssl-wzrcr.epik.to
ssl-h7hbj.epik.to
ssl-66ert.epik.to
ssl-f7cwp.epik.to
ssl-67bdl.epik.to
ssl-i87rx.epik.to
ssl-0co1e.epik.to
ssl-ors36.epik.to
ssl-yybay.epik.to
ssl-05srt.epik.to
ssl-9vnnh.epik.to
ssl-u4cs0.epik.to
ssl-56d80.epik.to
ssl-uxvmb.epik.to
ssl-bfbw9.epik.to
ssl-7x3jc.epik.to
ssl-cc510.epik.to
ssl-7pvkq.epik.to
ssl-ukmwf.epik.to
ssl-of0zm.epik.to
ssl-pyfrd.epik.to
ssl-sqarl.epik.to
ssl-87gk0.epik.to
ssl-ff3i4.epik.to
ssl-bhs8u.epik.to
ssl-bsrzy.epik.to
ssl-5zl9y.epik.to
ssl-jisou.epik.to
ssl-jctpg.epik.to
ssl-zq51a.epik.to
ssl-cxlmf.epik.to
ssl-bo025.epik.to
ssl-7pvkq.epik.to
ssl-jgtym.epik.to
ssl-snvwl.epik.to
ssl-i87rx.epik.to
ssl-a9hev.epik.to
ssl-ou53h.epik.to
ssl-jhvrc.epik.to
ssl-au9g7.epik.to
ssl-bvhbo.epik.to
ssl-rhqhe.epik.to
ssl-is1v2.epik.to
ssl-jixju.epik.to
ssl-0co1e.epik.to
ssl-5ddox.epik.to
ssl-lvcck.epik.to
ssl-y6t2h.epik.to
ssl-xhv8v.epik.to
ssl-jhvrc.epik.to
ssl-lozda.epik.to
ssl-np5sh.epik.to
ssl-9s54k.epik.to
ssl-rhqhe.epik.to
ssl-jgtym.epik.to
ssl-1leka.epik.to
ssl-0qkk0.epik.to
ssl-na3zn.epik.to
ssl-lsplg.epik.to
ssl-3dxsi.epik.to
ssl-egt9q.epik.to
ssl-ycoca.epik.to
ssl-tlbto.epik.to
epik.to
ssl-2tmgo.epik.to
ssl-2a4ob.epik.to
ssl-rctc9.epik.to
ssl-9vnnh.epik.to
ssl-judg4.epik.to
ssl-odl4l.epik.to
ssl-5zl9y.epik.to
ssl-zmeya.epik.to
ssl-a3mgk.epik.to
ssl-5lu51.epik.to
ssl-ors36.epik.to
ssl-3dxsi.epik.to
ssl-1en2l.epik.to
ssl-24qde.epik.to
ssl-sewt0.epik.to
ssl-np5sh.epik.to
ssl-67bdl.epik.to
ssl-h7hbj.epik.to
ssl-wsyg2.epik.to
ssl-mh21w.epik.to
ssl-zidpe.epik.to
ssl-psdzy.epik.to
ssl-a1x9a.epik.to
ssl-6r4hl.epik.to
ssl-1p30q.epik.to
ssl-psdzy.epik.to
ssl-87gk0.epik.to

Certificate

The complete raw certificate details for ssl-2a4ob.epik.to in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5VaJwelqRt+fn1DznSI
TGW/AXzfzgadeq/mevK2rnxEgEiG9xXAyxezNwbmgN7z3032upw2YxW64SWtyaDG
p9OH3DE5OJ/ct7qPkgDlB+9KvbmbaU/jjWxn1RECWGkdlvGR+m8z3OEouBzWBawi
C+o5qXiJmjOfWLOvQHV0lCqJCCbbYHF/DgzWjimCTYhvtUV2BJCEPbsNn9mCL2Ul
QocLQc9b7Fq4SBg0dV7V11tKne7w4HuXG5XtklQ8UFNthT5F/9hoQMP57gNHl9tu
EZtQPeeSr2R3EmJxpMfkDpoovYH/zuThhijPNpZ8mj3POriM/Hv4FEHro9FAuf0R
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391409665726278504084012015198444086013283
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 15:40:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 15:40:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl-2a4ob.epik.to'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25700024202153162922330044188685168422890062163682970250479581907493833435423017774731973757612396870255024836462801414054619108574813981352595669684754328934096599682274397015998843079815739925715288294263370836024309114278362212287897356899784438005202945638329178615009053631364788846104207186564144407297197762415987676145925912184587270760767646482879537773900727976395660853096889095592228821380580545854134583343596944667442673155573153017837393903798433090954503977821141175461689762683418660718346772307761477812392455175877908180510350099322013755367767516056230358799874934247950209414630416490055224594881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92796b465ada413a151d23c2fc197beecdeb1f66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (954 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alcaclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alternativepac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ameriblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragemarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backroadfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestfortworthlawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluemagicgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cembel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conspiracyconversation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deliver.tube'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentcommand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dncartoons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglecircuits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emilyhillstrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fc.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flippingspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortworthnewhomesforsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftworthchristianschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaylisting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaymecca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemalings.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenhomeassociation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halloweencostumecheap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harleystreetliposuction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiregpt.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honoluluforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kangaroomeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masonvideoproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nascarrvrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'near.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofschedule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omegabritehemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalizedguitarpicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racewalkers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samanmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samedguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondstorystudioanddesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seoanalysishub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipwrecksalvor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slotsnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-2a4ob.epik.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supertornado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veggiewool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wonderful-romania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resumetemplateword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwmerriamwebster.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d417e9dc8000004030047304502205bef53f20f02aaece6b1a08c2e02b2bcaa96d370fb95a2fc93747056bc1b8f6d0221008ffa30506d76ce868026c83a03a796a74202b8f413214b40a8347cb9b19242680076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d417e9dc10000040300473045022100efc3af0cdae6a63c18b06bd46d347775efdad54c768aa083343a94258de949b60220599f3c3ae20cb07bd826c692e36b869b5cfde0198d06626ed8278d27378caa45
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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