nanokovrik.ru

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e9:a7:82:0f:cd:40:1a:20:88:6b:9b:f4:48:4c:81:c1:74 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nanokovrik.ru

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e9:a7:82:0f:cd:40:1a:20:88:6b:9b:f4:48:4c:81:c1:74
Serial Number (int): 340845305682244848401735987119059755975028
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2d:fc:29:16:c0:4a:69:cf:c0:aa:be:29:1b:81:aa:2c:75:3d:26:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4b:31:f9:d6:17:b6:61:df:aa:bf:c5:ae:46:dc:c8:db:c7:95:6e:54
Fingerprint (sha256): 0c:f8:c2:6a:c9:20:63:13:8e:0c:21:2d:29:f2:01:9b:5b:64:e3:8f:36:c9:60:2f:4e:f5:87:04:58:40:61:14

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nanokovrik.ru

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nanokovrik.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abakan.nanokovrik.ru
anadyr.nanokovrik.ru
arkhangelsk.nanokovrik.ru
astrakhan.nanokovrik.ru
barnaul.nanokovrik.ru
belgorod.nanokovrik.ru
birobidzhan.nanokovrik.ru
blagoveshchensk.nanokovrik.ru
bryansk.nanokovrik.ru
cheboksary.nanokovrik.ru
chelyabinsk.nanokovrik.ru
cherkessk.nanokovrik.ru
chita.nanokovrik.ru
ekaterinburg.nanokovrik.ru
elista.nanokovrik.ru
gorno-altaysk.nanokovrik.ru
groznyy.nanokovrik.ru
irkutsk.nanokovrik.ru
ivanovo.nanokovrik.ru
izhevsk.nanokovrik.ru
kaliningrad.nanokovrik.ru
kaluga.nanokovrik.ru
kazan.nanokovrik.ru
kemerovo.nanokovrik.ru
khabarovsk.nanokovrik.ru
khanty-mansiysk.nanokovrik.ru
kirov.nanokovrik.ru
kostroma.nanokovrik.ru
krasnodar.nanokovrik.ru
krasnoyarsk.nanokovrik.ru
kurgan.nanokovrik.ru
kursk.nanokovrik.ru
kyzyl.nanokovrik.ru
lipetsk.nanokovrik.ru
magadan.nanokovrik.ru
magas.nanokovrik.ru
makhachkala.nanokovrik.ru
maykop.nanokovrik.ru
murmansk.nanokovrik.ru
nalchik.nanokovrik.ru
nanokovrik.ru
naryan-mar.nanokovrik.ru
nizhniy-novgorod.nanokovrik.ru
novosibirsk.nanokovrik.ru
omsk.nanokovrik.ru
orenburg.nanokovrik.ru
oryol.nanokovrik.ru
penza.nanokovrik.ru
perm.nanokovrik.ru
petropavlovsk-kamchatskiy.nanokovrik.ru
petrozavodsk.nanokovrik.ru
pskov.nanokovrik.ru
rostov-na-donu.nanokovrik.ru
ryazan.nanokovrik.ru
salekhard.nanokovrik.ru
samara.nanokovrik.ru
saransk.nanokovrik.ru
saratov.nanokovrik.ru
sevastopol.nanokovrik.ru
simferopol.nanokovrik.ru
smolensk.nanokovrik.ru
spb.nanokovrik.ru
stavropol.nanokovrik.ru
syktyvkar.nanokovrik.ru
tambov.nanokovrik.ru
tomsk.nanokovrik.ru
tula.nanokovrik.ru
tver.nanokovrik.ru
tyumen.nanokovrik.ru
ufa.nanokovrik.ru
ulan-ude.nanokovrik.ru
ulyanovsk.nanokovrik.ru
velikiy-novgorod.nanokovrik.ru
vladikavkaz.nanokovrik.ru
vladimir.nanokovrik.ru
vladivostok.nanokovrik.ru
volgograd.nanokovrik.ru
vologda.nanokovrik.ru
voronezh.nanokovrik.ru
www.nanokovrik.ru
yakutsk.nanokovrik.ru
yaroslavl.nanokovrik.ru
yoshkar-ola.nanokovrik.ru
yuzhno-sakhalinsk.nanokovrik.ru

Other certificates including the domain name nanokovrik.ru

(limited to 100 certificates)

Certificate

The complete raw certificate details for nanokovrik.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340845305682244848401735987119059755975028
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-27 00:11:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-27 00:11:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nanokovrik.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 933283019195151885670235337288397089902779427878239224705291922654645962582889584206865362910354406656542890282500029214966819418910323637214896315176677994908987678136361551897652170208375849241815595192999232733000202663897960233945820653021570530927274172070052571786232691247708004668183096108689875989737949162074790711681480435825168671770790237824038380051273364635656440758927981631466016965093165895629655868314134608479064455064958585080378948033920423782976098930397872985487556620371625213880288514623478340209226849444875770248765063038569740109404966483232273925733239053367746540565435958140150498337704816979402931664697429487084904448817729866156586978133449223136458691252030294905220313502561745842565151682262775782197337233131610519819852334292868438116374080917710076733472030275601913803612639684457654912609384218911983495189162573723305003849909439796424261029690086341760127727433019377379287411400935513829555873880345228594400416003255680214024512112910992071186937349062145898008552660641633067687893093305174392077817106159049051438778962289213187927966630585257550606684660952916135065317935161250615652550074755967466729020331627642876829505535095664887258099820790276297784674900107832066353403059917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2dfc2916c04a69cfc0aabe291b81aa2c753d26a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2041 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abakan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anadyr.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkhangelsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrakhan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnaul.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belgorod.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birobidzhan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blagoveshchensk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bryansk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheboksary.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chelyabinsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cherkessk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chita.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekaterinburg.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elista.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gorno-altaysk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groznyy.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irkutsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivanovo.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'izhevsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaliningrad.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaluga.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kazan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kemerovo.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khabarovsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khanty-mansiysk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirov.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kostroma.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krasnodar.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krasnoyarsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurgan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kursk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyzyl.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lipetsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magadan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magas.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makhachkala.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maykop.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murmansk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nalchik.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naryan-mar.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nizhniy-novgorod.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novosibirsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orenburg.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oryol.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penza.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perm.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petropavlovsk-kamchatskiy.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petrozavodsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pskov.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rostov-na-donu.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryazan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salekhard.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samara.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saransk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saratov.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevastopol.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simferopol.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smolensk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spb.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stavropol.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syktyvkar.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tambov.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tula.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tver.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyumen.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufa.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulan-ude.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulyanovsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velikiy-novgorod.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vladikavkaz.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vladimir.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vladivostok.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volgograd.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vologda.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voronezh.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yakutsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaroslavl.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoshkar-ola.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yuzhno-sakhalinsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001688cdccc3a0000040300483046022100d29e5ed65ec4ee05091b0c355a3cbd67dcde121e7a6d6db03956b5a7d0fcb917022100dc28a625c54a256c7051db82921d2ff983657fcc65a61561f925623f9f78078100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001688cdccc390000040300473045022100af45c5429137f7053fc01b49e527207d7f12c5b37ed4589d9314e27a26313aa80220614d72bb4482cb6fb26e37d1414d54bc30444b13e60478e1895010c1e89cbe8a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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