nanokovrik.ru

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d7:31:4f:de:11:58:e8:2a:f5:53:08:65:3e:f9:d2:67:82 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nanokovrik.ru

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:31:4f:de:11:58:e8:2a:f5:53:08:65:3e:f9:d2:67:82
Serial Number (int): 334563113550597120841584764097998296868738
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cc:65:fa:24:d3:af:d8:b9:14:dc:bb:a1:4f:9a:03:e3:d2:63:ed:5d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a9:61:ec:8a:53:4f:00:68:85:8d:1f:a5:db:bd:6b:ed:17:4f:4a:08
Fingerprint (sha256): 00:0d:8b:ef:fa:18:8f:bb:92:73:a9:68:65:70:84:62:6b:d6:a1:fd:3a:d6:2b:75:fc:c9:8e:46:29:f1:b5:cd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nanokovrik.ru

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nanokovrik.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abakan.nanokovrik.ru
anadyr.nanokovrik.ru
arkhangelsk.nanokovrik.ru
astrakhan.nanokovrik.ru
barnaul.nanokovrik.ru
belgorod.nanokovrik.ru
birobidzhan.nanokovrik.ru
blagoveshchensk.nanokovrik.ru
bryansk.nanokovrik.ru
cheboksary.nanokovrik.ru
chelyabinsk.nanokovrik.ru
cherkessk.nanokovrik.ru
chita.nanokovrik.ru
elista.nanokovrik.ru
gorno-altaysk.nanokovrik.ru
groznyy.nanokovrik.ru
irkutsk.nanokovrik.ru
ivanovo.nanokovrik.ru
izhevsk.nanokovrik.ru
kaliningrad.nanokovrik.ru
kaluga.nanokovrik.ru
kazan.nanokovrik.ru
kemerovo.nanokovrik.ru
khabarovsk.nanokovrik.ru
khanty-mansiysk.nanokovrik.ru
kirov.nanokovrik.ru
kostroma.nanokovrik.ru
krasnodar.nanokovrik.ru
krasnoyarsk.nanokovrik.ru
kurgan.nanokovrik.ru
kursk.nanokovrik.ru
kyzyl.nanokovrik.ru
lipetsk.nanokovrik.ru
magadan.nanokovrik.ru
magas.nanokovrik.ru
makhachkala.nanokovrik.ru
maykop.nanokovrik.ru
murmansk.nanokovrik.ru
nalchik.nanokovrik.ru
nanokovrik.ru
naryan-mar.nanokovrik.ru
nizhniy-novgorod.nanokovrik.ru
novosibirsk.nanokovrik.ru
omsk.nanokovrik.ru
orenburg.nanokovrik.ru
oryol.nanokovrik.ru
penza.nanokovrik.ru
perm.nanokovrik.ru
petropavlovsk-kamchatskiy.nanokovrik.ru
petrozavodsk.nanokovrik.ru
pskov.nanokovrik.ru
rostov-na-donu.nanokovrik.ru
ryazan.nanokovrik.ru
salekhard.nanokovrik.ru
samara.nanokovrik.ru
sankt-peterburg.nanokovrik.ru
saransk.nanokovrik.ru
saratov.nanokovrik.ru
sevastopol.nanokovrik.ru
simferopol.nanokovrik.ru
smolensk.nanokovrik.ru
stavropol.nanokovrik.ru
syktyvkar.nanokovrik.ru
tambov.nanokovrik.ru
tomsk.nanokovrik.ru
tula.nanokovrik.ru
tver.nanokovrik.ru
tyumen.nanokovrik.ru
ufa.nanokovrik.ru
ulan-ude.nanokovrik.ru
ulyanovsk.nanokovrik.ru
velikiy-novgorod.nanokovrik.ru
vladikavkaz.nanokovrik.ru
vladimir.nanokovrik.ru
vladivostok.nanokovrik.ru
volgograd.nanokovrik.ru
vologda.nanokovrik.ru
voronezh.nanokovrik.ru
www.nanokovrik.ru
yakutsk.nanokovrik.ru
yaroslavl.nanokovrik.ru
yekaterinburg.nanokovrik.ru
yoshkar-ola.nanokovrik.ru
yuzhno-sakhalinsk.nanokovrik.ru

Other certificates including the domain name nanokovrik.ru

(limited to 100 certificates)

Certificate

The complete raw certificate details for nanokovrik.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334563113550597120841584764097998296868738
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-01 19:13:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-30 19:13:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nanokovrik.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861127090986630554112101871475362660030737601260085392281814425501665486117739992354460398982540619475465723401981066510989795008182383774468608812420666898234546727165834319374010801137494650788314435262805902788825094782734189966914916238939142251774919073093731599408796177645858279071110991388300213065164762814875027385648176462550220527206109938571221849344543201562858275199589877135238860367581119752030253745922738765850216850612738653504466850527865895786891742920009426325286340929416592077136395147495444402818170527330719058948971641088106031055974919350639243758433263281060405978969472932109015189622720587552342341141100236210881938755165342113300282373397365505606607254692208137273996252713148342927962012720813583421171408493882750171395508876994539292661867818273482441462916547303891373431317660248750324981997758315778370240511577178080097532508008440583110292996510322410950571852759453870003654232317393142475068524125810531143865619844479482281922178611072679126622049725711026176580282014037588307516264165117520876939741988311411958999654043367559606912104499774828282627995633884934500316970759326267427730805207173927854114735663371798680591131644675720164507538717366048662743924551859761595374584851179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc65fa24d3afd8b914dcbba14f9a03e3d263ed5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2054 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abakan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anadyr.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkhangelsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrakhan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnaul.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belgorod.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birobidzhan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blagoveshchensk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bryansk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheboksary.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chelyabinsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cherkessk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chita.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elista.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gorno-altaysk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groznyy.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irkutsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivanovo.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'izhevsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaliningrad.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaluga.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kazan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kemerovo.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khabarovsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khanty-mansiysk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirov.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kostroma.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krasnodar.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krasnoyarsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurgan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kursk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyzyl.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lipetsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magadan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magas.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makhachkala.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maykop.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murmansk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nalchik.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naryan-mar.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nizhniy-novgorod.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novosibirsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orenburg.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oryol.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penza.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perm.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petropavlovsk-kamchatskiy.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petrozavodsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pskov.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rostov-na-donu.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryazan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salekhard.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samara.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sankt-peterburg.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saransk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saratov.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevastopol.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simferopol.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smolensk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stavropol.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syktyvkar.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tambov.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tula.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tver.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyumen.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufa.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulan-ude.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulyanovsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velikiy-novgorod.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vladikavkaz.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vladimir.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vladivostok.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volgograd.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vologda.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voronezh.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yakutsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaroslavl.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yekaterinburg.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoshkar-ola.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yuzhno-sakhalinsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0015e8f3d67c08937162514228437f52adb2fd40e21697a275d69b654583d1513446841acbcc854eff8333e3b4c8e412c6b85b9bf4c4c18871b2c79e3f536d0f12d87efd447422d9ddef7a913bffc9b16b97ae30a62ce79185a0f8228fb987f1d81378d34c168e15bdf17b704abc395b9795ee5035f9ed21a557db3515bdc858d861e6baf43f1606c8f5fc2fbbf01eea4952f67dffa5903752a28bf7e900b28975afc894333464ed098357ff10eb5eb75442075ae804da1a0d98daa750731f50f4be20776f1e700e22373c87d20514ff98beed9ce406ea946a1548813ab1aa738ece80468e9c9b31a4c34402600080f6acf2e72cda2ed11acd3f70c7563eee2dca