ssl-1p30q.epik.to
Issued by R3
About this certificate
This digital certificate with serial number 03:3f:3a:2b:26:14:44:27:08:2a:e7:d5:63:ab:d5:59:75:05 was issued on by Let's Encrypt.
With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ssl-1p30q.epik.to
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:3f:3a:2b:26:14:44:27:08:2a:e7:d5:63:ab:d5:59:75:05Serial Number (int): 282851966176157525612674726175750760264965
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 9e:3a:32:2b:c4:4b:76:13:54:d6:4e:ac:86:1f:73:45:fa:92:77:32
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 1c:ce:4a:25:6a:84:50:ab:3e:80:1e:74:43:d9:3a:2f:61:0c:30:57
Fingerprint (sha256): fe:a2:2c:89:65:b1:56:2a:e3:17:52:2e:b2:e5:71:c7:72:fa:b3:bf:5b:75:e1:a1:57:c5:54:6d:0e:0d:73:db
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ssl-1p30q.epik.to
49
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ssl-1p30q.epik.to
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
3000.co.uk
adkingpromotion.com
alfalfacounty.com
alpacagloves.com
anabolicsforum.com
arbitrageam.com
atlanta4vip.com
atmguys.com
boutiqueforvip.com
briefumschlaege.com
covidvaccine.org
designpolicies.com
efoodie.com
gotadmitted.com
gpsforahappymarriage.com
greatsanantoniolawyers.com
hairceutics.com
healthyhometelevison.com
heatdemand.com
homeschooldualenrollment.org
hornyhospital.com
horsecommunities.org
immokaleefl.com
kibbeonliberty.org
kmj.co.in
lepusholdem.com
longingforamelia.com
mtjulietnazarene.com
musicdjs.com
naturalrawhide.com
oneofftrip.nl
peoplepowers.com
profounddigitalmarketing.com
qatarforvip.com
qudostravel.com
rvj.co.in
saintjosephwaste.com
school-1.com
shoppinghemp.com
siliconvalley.shopping
ssl-1p30q.epik.to
texasblogs.com
theeverydayman.com
therecoverymasters.com
verticalblog.com
walltowallsolar.com
webfest.in
whitwellmusic.com
www.addictiontreatmentdomains.com
adkingpromotion.com
alfalfacounty.com
alpacagloves.com
anabolicsforum.com
arbitrageam.com
atlanta4vip.com
atmguys.com
boutiqueforvip.com
briefumschlaege.com
covidvaccine.org
designpolicies.com
efoodie.com
gotadmitted.com
gpsforahappymarriage.com
greatsanantoniolawyers.com
hairceutics.com
healthyhometelevison.com
heatdemand.com
homeschooldualenrollment.org
hornyhospital.com
horsecommunities.org
immokaleefl.com
kibbeonliberty.org
kmj.co.in
lepusholdem.com
longingforamelia.com
mtjulietnazarene.com
musicdjs.com
naturalrawhide.com
oneofftrip.nl
peoplepowers.com
profounddigitalmarketing.com
qatarforvip.com
qudostravel.com
rvj.co.in
saintjosephwaste.com
school-1.com
shoppinghemp.com
siliconvalley.shopping
ssl-1p30q.epik.to
texasblogs.com
theeverydayman.com
therecoverymasters.com
verticalblog.com
walltowallsolar.com
webfest.in
whitwellmusic.com
www.addictiontreatmentdomains.com
Other certificates including the domain name epik.to
(limited to 100 certificates)
ssl-lp5qx.epik.to
ssl-ya1lh.epik.to
ssl-bhs8u.epik.to
ssl-ycoca.epik.to
ssl-npif9.epik.to
ssl-wzrcr.epik.to
ssl-h7hbj.epik.to
ssl-66ert.epik.to
ssl-f7cwp.epik.to
ssl-67bdl.epik.to
ssl-i87rx.epik.to
ssl-0co1e.epik.to
ssl-ors36.epik.to
ssl-yybay.epik.to
ssl-05srt.epik.to
ssl-9vnnh.epik.to
ssl-u4cs0.epik.to
ssl-56d80.epik.to
ssl-uxvmb.epik.to
ssl-bfbw9.epik.to
ssl-7x3jc.epik.to
ssl-cc510.epik.to
ssl-7pvkq.epik.to
ssl-ukmwf.epik.to
ssl-of0zm.epik.to
ssl-pyfrd.epik.to
ssl-sqarl.epik.to
ssl-87gk0.epik.to
ssl-ff3i4.epik.to
ssl-bhs8u.epik.to
ssl-bsrzy.epik.to
ssl-5zl9y.epik.to
ssl-jisou.epik.to
ssl-jctpg.epik.to
ssl-zq51a.epik.to
ssl-cxlmf.epik.to
ssl-bo025.epik.to
ssl-7pvkq.epik.to
ssl-jgtym.epik.to
ssl-snvwl.epik.to
ssl-i87rx.epik.to
ssl-a9hev.epik.to
ssl-ou53h.epik.to
ssl-jhvrc.epik.to
ssl-au9g7.epik.to
ssl-bvhbo.epik.to
ssl-rhqhe.epik.to
ssl-is1v2.epik.to
ssl-jixju.epik.to
ssl-0co1e.epik.to
ssl-5ddox.epik.to
ssl-lvcck.epik.to
ssl-y6t2h.epik.to
ssl-xhv8v.epik.to
ssl-jhvrc.epik.to
ssl-lozda.epik.to
ssl-np5sh.epik.to
ssl-9s54k.epik.to
ssl-rhqhe.epik.to
ssl-jgtym.epik.to
ssl-1leka.epik.to
ssl-0qkk0.epik.to
ssl-na3zn.epik.to
ssl-lsplg.epik.to
ssl-3dxsi.epik.to
ssl-egt9q.epik.to
ssl-ycoca.epik.to
ssl-tlbto.epik.to
epik.to
ssl-2tmgo.epik.to
ssl-2a4ob.epik.to
ssl-rctc9.epik.to
ssl-9vnnh.epik.to
ssl-judg4.epik.to
ssl-odl4l.epik.to
ssl-5zl9y.epik.to
ssl-zmeya.epik.to
ssl-a3mgk.epik.to
ssl-5lu51.epik.to
ssl-ors36.epik.to
ssl-3dxsi.epik.to
ssl-1en2l.epik.to
ssl-24qde.epik.to
ssl-sewt0.epik.to
ssl-np5sh.epik.to
ssl-67bdl.epik.to
ssl-h7hbj.epik.to
ssl-wsyg2.epik.to
ssl-mh21w.epik.to
ssl-zidpe.epik.to
ssl-psdzy.epik.to
ssl-a1x9a.epik.to
ssl-6r4hl.epik.to
ssl-1p30q.epik.to
ssl-psdzy.epik.to
ssl-87gk0.epik.to
ssl-ya1lh.epik.to
ssl-bhs8u.epik.to
ssl-ycoca.epik.to
ssl-npif9.epik.to
ssl-wzrcr.epik.to
ssl-h7hbj.epik.to
ssl-66ert.epik.to
ssl-f7cwp.epik.to
ssl-67bdl.epik.to
ssl-i87rx.epik.to
ssl-0co1e.epik.to
ssl-ors36.epik.to
ssl-yybay.epik.to
ssl-05srt.epik.to
ssl-9vnnh.epik.to
ssl-u4cs0.epik.to
ssl-56d80.epik.to
ssl-uxvmb.epik.to
ssl-bfbw9.epik.to
ssl-7x3jc.epik.to
ssl-cc510.epik.to
ssl-7pvkq.epik.to
ssl-ukmwf.epik.to
ssl-of0zm.epik.to
ssl-pyfrd.epik.to
ssl-sqarl.epik.to
ssl-87gk0.epik.to
ssl-ff3i4.epik.to
ssl-bhs8u.epik.to
ssl-bsrzy.epik.to
ssl-5zl9y.epik.to
ssl-jisou.epik.to
ssl-jctpg.epik.to
ssl-zq51a.epik.to
ssl-cxlmf.epik.to
ssl-bo025.epik.to
ssl-7pvkq.epik.to
ssl-jgtym.epik.to
ssl-snvwl.epik.to
ssl-i87rx.epik.to
ssl-a9hev.epik.to
ssl-ou53h.epik.to
ssl-jhvrc.epik.to
ssl-au9g7.epik.to
ssl-bvhbo.epik.to
ssl-rhqhe.epik.to
ssl-is1v2.epik.to
ssl-jixju.epik.to
ssl-0co1e.epik.to
ssl-5ddox.epik.to
ssl-lvcck.epik.to
ssl-y6t2h.epik.to
ssl-xhv8v.epik.to
ssl-jhvrc.epik.to
ssl-lozda.epik.to
ssl-np5sh.epik.to
ssl-9s54k.epik.to
ssl-rhqhe.epik.to
ssl-jgtym.epik.to
ssl-1leka.epik.to
ssl-0qkk0.epik.to
ssl-na3zn.epik.to
ssl-lsplg.epik.to
ssl-3dxsi.epik.to
ssl-egt9q.epik.to
ssl-ycoca.epik.to
ssl-tlbto.epik.to
epik.to
ssl-2tmgo.epik.to
ssl-2a4ob.epik.to
ssl-rctc9.epik.to
ssl-9vnnh.epik.to
ssl-judg4.epik.to
ssl-odl4l.epik.to
ssl-5zl9y.epik.to
ssl-zmeya.epik.to
ssl-a3mgk.epik.to
ssl-5lu51.epik.to
ssl-ors36.epik.to
ssl-3dxsi.epik.to
ssl-1en2l.epik.to
ssl-24qde.epik.to
ssl-sewt0.epik.to
ssl-np5sh.epik.to
ssl-67bdl.epik.to
ssl-h7hbj.epik.to
ssl-wsyg2.epik.to
ssl-mh21w.epik.to
ssl-zidpe.epik.to
ssl-psdzy.epik.to
ssl-a1x9a.epik.to
ssl-6r4hl.epik.to
ssl-1p30q.epik.to
ssl-psdzy.epik.to
ssl-87gk0.epik.to
Certificate
The complete raw certificate details for ssl-1p30q.epik.to in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIkTCCB3mgAwIBAgISAz86KyYURCcIKufVY6vVWXUFMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMjUxNTM0MTNaFw0yNDA0MjQxNTM0MTJaMBwxGjAYBgNVBAMT EXNzbC0xcDMwcS5lcGlrLnRvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtl+C+prh0wEwpVxZHEtKU6bf1vDoUYPjKL7pDADo9g5xkD9k/KknwyWl/QV SxsQAQB/oirFaBEirfcyFjZq2IYNeMMF2vj6lRhC6zMn1poUVXYe2j2mke1WEd4A 8CJSJ1rfy+0itiM5srvNDF1S5f9+JqAIWnrJ/Nf4G14Ih+5zrN2Cpbh+ra/IA2DU r6s7pz9WMZWzUUCMPOD0+UDrh92hwmeb9ZKGOst+ILmppXC9aeVHt27i3akJ2Mti t6i6jTHdFdis3Ofkxy1Kaici2HLGruaYATFKm3I8Ml3eUTr8+rsbGG0icTkfPJ3G iwYYNEHZ5ldLmxprw4e0ZG4nEQIDAQABo4IFtTCCBbEwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBSeOjIrxEt2E1TWTqyGH3NF+pJ3MjAfBgNVHSMEGDAWgBQULrMXt1hW y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu b3JnLzCCA7wGA1UdEQSCA7MwggOvggozMDAwLmNvLnVrghNhZGtpbmdwcm9tb3Rp b24uY29tghFhbGZhbGZhY291bnR5LmNvbYIQYWxwYWNhZ2xvdmVzLmNvbYISYW5h Ym9saWNzZm9ydW0uY29tgg9hcmJpdHJhZ2VhbS5jb22CD2F0bGFudGE0dmlwLmNv bYILYXRtZ3V5cy5jb22CEmJvdXRpcXVlZm9ydmlwLmNvbYITYnJpZWZ1bXNjaGxh ZWdlLmNvbYIQY292aWR2YWNjaW5lLm9yZ4ISZGVzaWducG9saWNpZXMuY29tggtl Zm9vZGllLmNvbYIPZ290YWRtaXR0ZWQuY29tghhncHNmb3JhaGFwcHltYXJyaWFn ZS5jb22CGmdyZWF0c2FuYW50b25pb2xhd3llcnMuY29tgg9oYWlyY2V1dGljcy5j b22CGGhlYWx0aHlob21ldGVsZXZpc29uLmNvbYIOaGVhdGRlbWFuZC5jb22CHGhv bWVzY2hvb2xkdWFsZW5yb2xsbWVudC5vcmeCEWhvcm55aG9zcGl0YWwuY29tghRo b3JzZWNvbW11bml0aWVzLm9yZ4IPaW1tb2thbGVlZmwuY29tghJraWJiZW9ubGli ZXJ0eS5vcmeCCWttai5jby5pboIPbGVwdXNob2xkZW0uY29tghRsb25naW5nZm9y YW1lbGlhLmNvbYIUbXRqdWxpZXRuYXphcmVuZS5jb22CDG11c2ljZGpzLmNvbYIS bmF0dXJhbHJhd2hpZGUuY29tgg1vbmVvZmZ0cmlwLm5sghBwZW9wbGVwb3dlcnMu Y29tghxwcm9mb3VuZGRpZ2l0YWxtYXJrZXRpbmcuY29tgg9xYXRhcmZvcnZpcC5j b22CD3F1ZG9zdHJhdmVsLmNvbYIJcnZqLmNvLmlughRzYWludGpvc2VwaHdhc3Rl LmNvbYIMc2Nob29sLTEuY29tghBzaG9wcGluZ2hlbXAuY29tghZzaWxpY29udmFs bGV5LnNob3BwaW5nghFzc2wtMXAzMHEuZXBpay50b4IOdGV4YXNibG9ncy5jb22C EnRoZWV2ZXJ5ZGF5bWFuLmNvbYIWdGhlcmVjb3ZlcnltYXN0ZXJzLmNvbYIQdmVy dGljYWxibG9nLmNvbYITd2FsbHRvd2FsbHNvbGFyLmNvbYIKd2ViZmVzdC5pboIR d2hpdHdlbGxtdXNpYy5jb22CIXd3dy5hZGRpY3Rpb250cmVhdG1lbnRkb21haW5z LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA 8AB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjUF40MwAAAQD AEcwRQIgYR0xYy/Pc2x929uK0v7coiePd/7LQRShOnySiYnJRNkCIQDaOEjna5hO /yNvetLJOq6Lf1kwwxBBr6fp9Il7QvkJLgB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8 vOzew1FIWUZxH7WbAAABjUF40M0AAAQDAEcwRQIgQwTppa0sgr12wQ+AIdydtXZb sU9aNbxNzsQQxFbwGMUCIQDuupv9gVaFTISkBlI50BIQELGrCSATIA+evHfa+4zm RTANBgkqhkiG9w0BAQsFAAOCAQEAP8ECeq+y+Ngw0iElDQ8pGt6cYvkiHsKxZfgX ghBryz8p1yuoY+d2NVieJeA4EwcEWbZgEVkCgZQ3e1NrDCyYPm8o/Q7QGyC3RgXz ov2HvDxRVc7aDsOCWHOTad3hzR2p/mhaGM/Qm2wrfeAqYdNIU5ujgDdqsCYBE4zp DM+HB1fpO0LhiTHxZxvA8gLM23w24IjNERU1QuYUtu4dRn7NxugUnMSmNGr2jkTe 9hzT8lZJRFibETih4muhskN3GEOLfD93d0GV/DjekLy9XyKOCG6tD+S4g2b8Stcy p7G1+gLsxtVHtLcXkKPq7mzjcuk42GtJQOsOuqKE9Jw0L1PoNQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtl+C+prh0wEwpVxZHEt KU6bf1vDoUYPjKL7pDADo9g5xkD9k/KknwyWl/QVSxsQAQB/oirFaBEirfcyFjZq 2IYNeMMF2vj6lRhC6zMn1poUVXYe2j2mke1WEd4A8CJSJ1rfy+0itiM5srvNDF1S 5f9+JqAIWnrJ/Nf4G14Ih+5zrN2Cpbh+ra/IA2DUr6s7pz9WMZWzUUCMPOD0+UDr h92hwmeb9ZKGOst+ILmppXC9aeVHt27i3akJ2Mtit6i6jTHdFdis3Ofkxy1Kaici 2HLGruaYATFKm3I8Ml3eUTr8+rsbGG0icTkfPJ3GiwYYNEHZ5ldLmxprw4e0ZG4n EQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 282851966176157525612674726175750760264965 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 15:34:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 15:34:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl-1p30q.epik.to' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24092527428105466888594151085279878528288371539757313619619213483441573318551888634411692019797859685479286716910201701688028771548795287881656828145550099291477383720584765617768173445120845679057553825829899999034643294487456425438337090931179702380465809967453520601235983806100680289653342709405952874484439109846652813091854195885987394174625763021957553275212539771405704582239198034903856665487930868621155974908100953595883076631804589104437533685700159205481505096206216349725313946082399537418117034532798910896807576498974819417037488728772291568889724092170891777263044001381183665897065254655729962198801 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9e3a322bc44b761354d64eac861f7345fa927732 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (947 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3000.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adkingpromotion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfalfacounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpacagloves.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anabolicsforum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageam.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanta4vip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atmguys.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutiqueforvip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefumschlaege.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covidvaccine.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designpolicies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efoodie.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotadmitted.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpsforahappymarriage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatsanantoniolawyers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairceutics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhometelevison.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heatdemand.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschooldualenrollment.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hornyhospital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horsecommunities.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immokaleefl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kibbeonliberty.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmj.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lepusholdem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longingforamelia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtjulietnazarene.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicdjs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalrawhide.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneofftrip.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplepowers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profounddigitalmarketing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qatarforvip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qudostravel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvj.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintjosephwaste.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school-1.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppinghemp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siliconvalley.shopping' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-1p30q.epik.to' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasblogs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theeverydayman.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therecoverymasters.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verticalblog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walltowallsolar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webfest.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitwellmusic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.addictiontreatmentdomains.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d4178d0cc00000403004730450220611d31632fcf736c7ddbdb8ad2fedca2278f77fecb4114a13a7c928989c944d9022100da3848e76b984eff236f7ad2c93aae8b7f5930c31041afa7e9f4897b42f9092e007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d4178d0cd000004030047304502204304e9a5ad2c82bd76c10f8021dc9db5765bb14f5a35bc4dcec410c456f018c5022100eeba9bfd8156854c84a4065239d0121010b1ab092013200f9ebc77dafb8ce645 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003fc1027aafb2f8d830d221250d0f291ade9c62f9221ec2b165f81782106bcb3f29d72ba863e77635589e25e03813070459b6601159028194377b536b0c2c983e6f28fd0ed01b20b74605f3a2fd87bc3c5155ceda0ec38258739369dde1cd1da9fe685a18cfd09b6c2b7de02a61d348539ba380376ab02601138ce90ccf870757e93b42e18931f1671bc0f202ccdb7c36e088cd11153542e614b6ee1d467ecdc6e8149cc4a6346af68e44def61cd3f2564944589b1138a1e26ba1b2437718438b7c3f77774195fc38de90bcbd5f228e086ead0fe4b88366fc4ad732a7b1b5fa02ecc6d547b4b71790a3eaee6ce372e938d86b4940eb0ebaa284f49c342f53e835