broaddy.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:83:30:0f:b8:ea:31:5f:8b:6f:08:28:75:18:e9:8c:cb:52 was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=broaddy.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:30:0f:b8:ea:31:5f:8b:6f:08:28:75:18:e9:8c:cb:52
Serial Number (int): 305977732440692270010024022638384324070226
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 81:87:aa:23:78:69:be:e0:1c:3f:d0:01:6f:b4:b1:0e:66:91:e7:2c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4c:7a:a7:d5:d9:ae:76:0e:94:15:2f:a7:5b:0c:1f:36:e9:c6:11:54
Fingerprint (sha256): 18:21:ad:10:75:6f:2d:37:a9:e9:44:1e:2e:cd:c6:39:9b:47:7b:16:93:64:33:5b:48:54:9d:ca:9f:b4:fb:33

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate broaddy.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for broaddy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agder.broaddy.com
broaddy.com
buddynetwork-salzburg.broaddy.com
cuni.broaddy.com
demo.broaddy.com
esci-upf.broaddy.com
esn-rijeka.broaddy.com
esnauth.broaddy.com
esnbergen.broaddy.com
esncorvinus.broaddy.com
esnelte.broaddy.com
esneu.broaddy.com
esnhaderslev.broaddy.com
esnhsemsk.broaddy.com
esnism.broaddy.com
esnminho.broaddy.com
esnpardubice.broaddy.com
esnpcz.broaddy.com
esnpd.broaddy.com
esnsghwarsaw.broaddy.com
esnspb.broaddy.com
esnsplit.broaddy.com
esntut.broaddy.com
esnuct.broaddy.com
esnupc.broaddy.com
esnzadar.broaddy.com
liberec.broaddy.com
rc.broaddy.com
react.broaddy.com
studyatswps.broaddy.com
swps.broaddy.com
umprum.broaddy.com
upol.broaddy.com
uskatowice.broaddy.com
utb.broaddy.com
vistula.broaddy.com
vsh.broaddy.com
wiki.broaddy.com
www.agder.broaddy.com
www.broaddy.com
www.buddynetwork-salzburg.broaddy.com
www.cuni.broaddy.com
www.demo.broaddy.com
www.esci-upf.broaddy.com
www.esn-rijeka.broaddy.com
www.esnauth.broaddy.com
www.esnbergen.broaddy.com
www.esncorvinus.broaddy.com
www.esnelte.broaddy.com
www.esneu.broaddy.com
www.esnhaderslev.broaddy.com
www.esnhsemsk.broaddy.com
www.esnism.broaddy.com
www.esnminho.broaddy.com
www.esnpardubice.broaddy.com
www.esnpcz.broaddy.com
www.esnpd.broaddy.com
www.esnsghwarsaw.broaddy.com
www.esnspb.broaddy.com
www.esnsplit.broaddy.com
www.esntut.broaddy.com
www.esnuct.broaddy.com
www.esnupc.broaddy.com
www.esnzadar.broaddy.com
www.liberec.broaddy.com
www.rc.broaddy.com
www.react.broaddy.com
www.studyatswps.broaddy.com
www.swps.broaddy.com
www.umprum.broaddy.com
www.upol.broaddy.com
www.uskatowice.broaddy.com
www.utb.broaddy.com
www.vistula.broaddy.com
www.vsh.broaddy.com
www.wiki.broaddy.com

Other certificates including the domain name broaddy.com

(limited to 100 certificates)
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
*.broaddy.com
broaddy.com
czv.broaddy.com
app.broaddy.com
www.madamemargohairdesign.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
recipebox.gummi.site
broaddy.com
aws.broaddy.com
rcmavalet.com
www.en-gager.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
czv.broaddy.com
czv.broaddy.com
broaddy.com
broaddy.com
get.colorain.app
broaddy.com
broaddy.com
demo.broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
samyuktha.live
broaddy.com
broaddy.com
broaddy.com
aws.broaddy.com
iteration-demo.carto.solutions
soflime.in
broaddy.com
rcmavalet.com
broaddy.com
www.bingo.aratiendas.com

Certificate

The complete raw certificate details for broaddy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo8DM5cUx7237v9jJmqJ
dX8UUL4Ftem+WqbQfF6L4oJ9qgDGYVzkPy1ANZJctj4qqf1vs0ZjoM+yK+2f29QY
8KVcRIMM7pc9CNAmKMjPY3ouvh4Fudmi9a+2kIkhxlvz5owSotzGGsiB9lcI4g02
DiziFLpfMDyLIMTlc6eqaEOTsnW+9DX08FQxlyuUNDRgvBak3nXm0/g7pVoL/nOD
jGuzZeX8uGoEWbv/Q0NHhu5yD7rz5hg4uSvtudMPdC9ch5DB9Mb2XC3YYIBes4SX
U89eWr/v81jqjp8c+gfscVa1+NpohTB3oExNfJ57txogxPYLEDCyU4SwiMmOoGbu
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305977732440692270010024022638384324070226
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-22 19:48:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-22 19:48:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'broaddy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25570659698223932671308517099319982527556540590747846829629494247435753880984409293837496262602796822727607417460311043446829723506535602827435267787944922786694945217619987838493783749322389556228375500674509365892215343044312438881386197422940569600085360263161120037324205796389989456896392228832224810708842362854081239674289393686278959271283118086544713879266256710284019755890504808776776441592494877926501050153593409750618172503466532114595428611250240352794132821064884609100441100282552586781637532741064186561401780532122147013094677660024679938345402450412701829835483661526363443938022627494277224525359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8187aa237869bee01c3fd0016fb4b10e6691e72c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1752 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agder.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddynetwork-salzburg.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuni.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esci-upf.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esn-rijeka.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnauth.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnbergen.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esncorvinus.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnelte.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esneu.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnhaderslev.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnhsemsk.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnism.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnminho.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnpardubice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnpcz.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnpd.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnsghwarsaw.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnspb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnsplit.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esntut.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnuct.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnupc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnzadar.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberec.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'react.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studyatswps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umprum.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upol.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uskatowice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistula.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vsh.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agder.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buddynetwork-salzburg.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuni.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demo.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esci-upf.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esn-rijeka.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnauth.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnbergen.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esncorvinus.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnelte.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esneu.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnhaderslev.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnhsemsk.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnism.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnminho.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnpardubice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnpcz.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnpd.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnsghwarsaw.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnspb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnsplit.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esntut.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnuct.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnupc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnzadar.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberec.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.react.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studyatswps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umprum.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upol.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uskatowice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vistula.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vsh.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiki.broaddy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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