www.icelandair.ca
- Icelandair ehf -
Issued by DigiCert SHA2 Extended Validation Server CA
About this certificate
This digital certificate with serial number 01:e1:e2:94:64:3e:90:1e:5a:19:b0:ab:da:1c:40:53 was issued on by DigiCert Inc.
With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Icelandair ehf
Company registration number:
4612023490
Organization: Icelandair ehf
Organization unit: Web
Organization: Icelandair ehf
Organization unit: Web
Address:
Reykjavikurflugvelli
Postal code: 101
Locality: Reykjavik
Country: IS
Postal code: 101
Locality: Reykjavik
Country: IS
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:e1:e2:94:64:3e:90:1e:5a:19:b0:ab:da:1c:40:53Serial Number (int): 2502090370317864441579828569133826131
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 37:24:ab:5b:02:33:61:01:88:be:fc:0b:b0:61:ce:43:a6:56:e2:b3
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f
Fingerprint (sha1): 93:09:39:a8:7a:07:79:4a:5b:5c:c8:60:17:eb:f7:81:b3:45:66:8e
Fingerprint (sha256): 1c:da:88:73:0f:86:74:61:53:59:a3:3a:e8:26:28:a6:66:a2:d4:7e:92:d5:c7:8c:1f:5b:65:c7:1b:88:26:96
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g1.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g1.crl
Check the revocation status for certificate www.icelandair.ca
21
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.icelandair.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.icelandair.ca
www.icelandair.co.uk
www.icelandair.com
www.icelandair.de
www.icelandair.dk
www.icelandair.fr
www.icelandair.nl
www.icelandair.no
www.icelandair.se
www.icelandair.fi
www.icelandairgolfers.is
www.icelandair.us
www.icelandair.is
cdn.icelandair.com
packages.icelandair.is
book.icelandair.is
www.icelandair.it
www.icelandair.es
fr.icelandair.ca
stopover.icelandair.com
ru.icelandair.net
www.icelandair.co.uk
www.icelandair.com
www.icelandair.de
www.icelandair.dk
www.icelandair.fr
www.icelandair.nl
www.icelandair.no
www.icelandair.se
www.icelandair.fi
www.icelandairgolfers.is
www.icelandair.us
www.icelandair.is
cdn.icelandair.com
packages.icelandair.is
book.icelandair.is
www.icelandair.it
www.icelandair.es
fr.icelandair.ca
stopover.icelandair.com
ru.icelandair.net
Other certificates including the domain name icelandair.ca
(limited to 100 certificates)
icelandair.ca
m.icelandair.is
www.icelandair.ca
www.icelandair.ca
www.icelandair.ca
www.icelandair.ca
icelandair.is
www.icelandair.ca
www.icelandair.ca
icelandair.is
icelandair.is
www.icelandair.ca
www.icelandair.ca
m.ca.icelandair.com
icelandair.ca
m.ca.icelandair.com
icelandair.is
icelandair.is
m.icelandair.is
m.ca.icelandair.com
www.icelandair.ca
m.ca.icelandair.com
icelandair.ca
m.icelandair.ca
icelandair.is
icelandair.is
m.icelandair.is
www.icelandair.ca
m.icelandair.is
icelandair.is
icelandair.ca
www.icelandair.ca
icelandair.ca
www.icelandair.ca
m.icelandair.ca
icelandair.ca
icelandair.ca
icelandair.ca
www.icelandair.ca
www.icelandair.ca
www.icelandair.ca
m.icelandair.ca
m.icelandair.is
www.icelandair.ca
icelandair.is
icelandair.ca
m.icelandair.ca
www.icelandair.ca
www.icelandair.ca
m.ca.icelandair.com
icelandair.ca
icelandair.ca
m.icelandair.is
www.icelandair.ca
icelandair.ca
icelandair.ca
icelandair.ca
www.icelandair.ca
m.icelandair.is
www.icelandair.ca
m.ca.icelandair.com
m.icelandair.ca
icelandair.ca
icelandair.ca
icelandair.is
*.icelandair.ca
icelandair.ca
www.icelandair.ca
m.icelandair.is
www.icelandair.ca
www.icelandair.ca
www.icelandair.ca
www.icelandair.ca
icelandair.is
www.icelandair.ca
www.icelandair.ca
icelandair.is
icelandair.is
www.icelandair.ca
www.icelandair.ca
m.ca.icelandair.com
icelandair.ca
m.ca.icelandair.com
icelandair.is
icelandair.is
m.icelandair.is
m.ca.icelandair.com
www.icelandair.ca
m.ca.icelandair.com
icelandair.ca
m.icelandair.ca
icelandair.is
icelandair.is
m.icelandair.is
www.icelandair.ca
m.icelandair.is
icelandair.is
icelandair.ca
www.icelandair.ca
icelandair.ca
www.icelandair.ca
m.icelandair.ca
icelandair.ca
icelandair.ca
icelandair.ca
www.icelandair.ca
www.icelandair.ca
www.icelandair.ca
m.icelandair.ca
m.icelandair.is
www.icelandair.ca
icelandair.is
icelandair.ca
m.icelandair.ca
www.icelandair.ca
www.icelandair.ca
m.ca.icelandair.com
icelandair.ca
icelandair.ca
m.icelandair.is
www.icelandair.ca
icelandair.ca
icelandair.ca
icelandair.ca
www.icelandair.ca
m.icelandair.is
www.icelandair.ca
m.ca.icelandair.com
m.icelandair.ca
icelandair.ca
icelandair.ca
icelandair.is
*.icelandair.ca
icelandair.ca
www.icelandair.ca
Certificate
The complete raw certificate details for www.icelandair.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIII5jCCB86gAwIBAgIQAeHilGQ+kB5aGbCr2hxAUzANBgkqhkiG9w0BAQsFADB1 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTE1MDQxNzAwMDAwMFoXDTE3MDcwNTEy MDAwMFowgdoxHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYB BAGCNzwCAQMTAklTMRMwEQYDVQQFEwo0NjEyMDIzNDkwMR0wGwYDVQQJExRSZXlr amF2aWt1cmZsdWd2ZWxsaTEMMAoGA1UEERMDMTAxMQswCQYDVQQGEwJJUzESMBAG A1UEBxMJUmV5a2phdmlrMRcwFQYDVQQKEw5JY2VsYW5kYWlyIGVoZjEMMAoGA1UE CxMDV2ViMRowGAYDVQQDExF3d3cuaWNlbGFuZGFpci5jYTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAJlqLbQ88eF+fW1j6tWX18qxVfZBbBYhXi6rFyJI XQkAL9H/Q+5dosf0kBPeg2bT+rc/ns5t67+WkeKmOcTlbH1mi9OuaYO/nM0cJceg YoI+X636rG/CNn/JeaxfJHofDd2m6+/TyDapJvlbVctsXbic4lx5AZ+yxsCbMamM g0Ta2a2Kn2hb4vDmoSjiBx32ZbHWMeGzjDBDK1Lw8+3ETgT+pJNEypmLPuiZL7/I emZzZndYX064ElXzjaxFyrwarTsrWnI2A+4jx5Rr34wg/Dfh3ot0ueczdgYWTJWX BmMQEtBixZZeWe6TRnPKVdc37Rg3pFIyGHWeNZ+eWJwIFQ0CAwEAAaOCBQowggUG MB8GA1UdIwQYMBaAFD3TUKXWoK3u80pgCmXTIdT4+NYPMB0GA1UdDgQWBBQ3JKtb AjNhAYi+/AuwYc5DplbiszCCAbMGA1UdEQSCAaowggGmghF3d3cuaWNlbGFuZGFp ci5jYYIUd3d3LmljZWxhbmRhaXIuY28udWuCEnd3dy5pY2VsYW5kYWlyLmNvbYIR d3d3LmljZWxhbmRhaXIuZGWCEXd3dy5pY2VsYW5kYWlyLmRrghF3d3cuaWNlbGFu ZGFpci5mcoIRd3d3LmljZWxhbmRhaXIubmyCEXd3dy5pY2VsYW5kYWlyLm5vghF3 d3cuaWNlbGFuZGFpci5zZYIRd3d3LmljZWxhbmRhaXIuZmmCGHd3dy5pY2VsYW5k YWlyZ29sZmVycy5pc4IRd3d3LmljZWxhbmRhaXIudXOCEXd3dy5pY2VsYW5kYWly LmlzghJjZG4uaWNlbGFuZGFpci5jb22CFnBhY2thZ2VzLmljZWxhbmRhaXIuaXOC EmJvb2suaWNlbGFuZGFpci5pc4IRd3d3LmljZWxhbmRhaXIuaXSCEXd3dy5pY2Vs YW5kYWlyLmVzghBmci5pY2VsYW5kYWlyLmNhghdzdG9wb3Zlci5pY2VsYW5kYWly LmNvbYIRcnUuaWNlbGFuZGFpci5uZXQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAwhi5odHRwOi8v Y3JsMy5kaWdpY2VydC5jb20vc2hhMi1ldi1zZXJ2ZXItZzEuY3JsMDSgMqAwhi5o dHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc2hhMi1ldi1zZXJ2ZXItZzEuY3JsMEsG A1UdIAREMEIwNwYJYIZIAYb9bAIBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3 LmRpZ2ljZXJ0LmNvbS9DUFMwBwYFZ4EMAQEwgYgGCCsGAQUFBwEBBHwwejAkBggr BgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFIGCCsGAQUFBzAChkZo dHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyRXh0ZW5kZWRW YWxpZGF0aW9uU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwggF/BgorBgEEAdZ5 AgQCBIIBbwSCAWsBaQB3AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQ AAABVKAdGr8AAAQDAEgwRgIhAMjBjL64/7ZDo9HRKIgQkGyHA/hwqho4wuR851qJ jnNoAiEA9CKraWfrwli6OK1e3Tk2GVd65RIvP6TFwaRI9O9UYD8AdwBo9pj4H2SC vjqM7rkoHUz8cVFdZ5PURNEKZ6y7T0/7xAAAAVSgHRqIAAAEAwBIMEYCIQCNSZH3 5ejEY4BK40cvXQx1T1t+yw2sdPG8ot+oRKrvCAIhAMmdSLS7vDMZ3EoWEo5HUxKF 1t+BT3YyW8czTCVoFrKsAHUAVhQGmi/XwuzT9eG9RLI+x0Z2ubyZEVzA75SYVdaJ 0N0AAAFUoB0bqwAABAMARjBEAiA0Q042kTOwzF4QbNOfdMdDs2f+37derRFZajOn cdSeqgIgJyKzltZxcHa8IzLrSV71h83wWCt+4R9fFox5k0wpETMwDQYJKoZIhvcN AQELBQADggEBAFkT/iaRWnKHNGPvQixOwX31ZqZw6g35nkfogkrDG3gpFQSFT+1F 9SIHisVwI7u8RNLFP0r0VRqDZ7lpTfN9Fto6HFZsXhHzpLJ8JCY9svpLzxln43kP 3wfHkfqWyXxJ5AuFVcmfnwDn3AbUjvVatFmNV+172HhHg7lzCDuqqV0OQ+5ouIfl gP53ogcpWrseFEtEq0tCuF3AtiUa2hgtfTP+nIpiuDbS165hTlrW9aYHfNGfjVts 2Je/oeaI3jHm1Ju6NKMWqtQitV7kuL7L5yvwUUOlILQv1KLqb2wM8Vat7ohx2jmj 4VKROMLZpXjR/e+RYWDVVkXVGGmWuwPd1GM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWottDzx4X59bWPq1ZfX yrFV9kFsFiFeLqsXIkhdCQAv0f9D7l2ix/SQE96DZtP6tz+ezm3rv5aR4qY5xOVs fWaL065pg7+czRwlx6Bigj5frfqsb8I2f8l5rF8keh8N3abr79PINqkm+VtVy2xd uJziXHkBn7LGwJsxqYyDRNrZrYqfaFvi8OahKOIHHfZlsdYx4bOMMEMrUvDz7cRO BP6kk0TKmYs+6Jkvv8h6ZnNmd1hfTrgSVfONrEXKvBqtOytacjYD7iPHlGvfjCD8 N+Hei3S55zN2BhZMlZcGYxAS0GLFll5Z7pNGc8pV1zftGDekUjIYdZ41n55YnAgV DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2502090370317864441579828569133826131 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-05 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4612023490' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reykjavikurflugvelli' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '101' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reykjavik' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Icelandair ehf' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Web' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.icelandair.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19366819245103374912018518954015283761034003697700325938493039562534909449789772909768249684581476688409998900770271137301004508044849218533521392557631144373617020281761589601471184756007093257224949692852798927385635353261256022136554712591716513810238821542189668480389320691024907645160030784140522978027305108884133819291537762642414114103582839479761810972962972482669647203370806487491512070230107346153584225495488286529628371813496532805357861933837918958066490876470754343460436314145670620005356373955543714945836145400985702553574439779452183192314423237997497236813716203918021196446951023647325977842957 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3724ab5b0233610188befc0bb061ce43a656e2b3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (426 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandairgolfers.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.icelandair.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'packages.icelandair.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.icelandair.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.icelandair.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stopover.icelandair.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ru.icelandair.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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