www.icelandair.ca
- Icelandair ehf -
Issued by DigiCert SHA2 Extended Validation Server CA
About this certificate
This digital certificate with serial number 08:50:2f:fa:c2:52:f3:88:53:11:b3:52:a6:81:5d:72 was issued on by DigiCert Inc.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Icelandair ehf
Company registration number:
4612023490
Organization: Icelandair ehf
Organization unit: Web
Organization: Icelandair ehf
Organization unit: Web
Address:
Reykjavikurflugvelli
Postal code: 101
Locality: Reykjavik
Country: IS
Postal code: 101
Locality: Reykjavik
Country: IS
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:50:2f:fa:c2:52:f3:88:53:11:b3:52:a6:81:5d:72Serial Number (int): 11050180855394487260454856915912056178
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 42:87:0e:f7:30:eb:74:60:95:1d:6f:fa:d2:31:4e:4e:27:fe:45:4a
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f
Fingerprint (sha1): ac:3f:b1:06:58:d4:46:1b:18:6e:00:e6:f7:16:9f:ba:b8:22:21:d1
Fingerprint (sha256): 34:e3:f9:b6:74:c1:a5:f2:f8:9f:12:4d:64:69:45:16:05:2c:a5:3d:8e:72:e0:dd:79:2f:59:f1:16:4f:d1:dd
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g1.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g1.crl
Check the revocation status for certificate www.icelandair.ca
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.icelandair.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.icelandair.ca
www.icelandair.co.uk
www.icelandair.com
www.icelandair.de
www.icelandair.dk
www.icelandair.fr
www.icelandair.nl
www.icelandair.no
www.icelandair.se
www.icelandair.fi
www.icelandairgolfers.is
www.icelandair.us
www.icelandair.is
cdn.icelandair.com
packages.icelandair.is
book.icelandair.is
www.icelandair.it
www.icelandair.es
fr.icelandair.ca
stopover.icelandair.com
www.icelandair.co.uk
www.icelandair.com
www.icelandair.de
www.icelandair.dk
www.icelandair.fr
www.icelandair.nl
www.icelandair.no
www.icelandair.se
www.icelandair.fi
www.icelandairgolfers.is
www.icelandair.us
www.icelandair.is
cdn.icelandair.com
packages.icelandair.is
book.icelandair.is
www.icelandair.it
www.icelandair.es
fr.icelandair.ca
stopover.icelandair.com
Other certificates including the domain name icelandair.ca
(limited to 100 certificates)
icelandair.ca
m.icelandair.is
www.icelandair.ca
www.icelandair.ca
www.icelandair.ca
www.icelandair.ca
icelandair.is
www.icelandair.ca
www.icelandair.ca
icelandair.is
icelandair.is
www.icelandair.ca
www.icelandair.ca
m.ca.icelandair.com
icelandair.ca
m.ca.icelandair.com
icelandair.is
icelandair.is
m.icelandair.is
m.ca.icelandair.com
www.icelandair.ca
m.ca.icelandair.com
icelandair.ca
m.icelandair.ca
icelandair.is
icelandair.is
m.icelandair.is
www.icelandair.ca
m.icelandair.is
icelandair.is
icelandair.ca
www.icelandair.ca
icelandair.ca
www.icelandair.ca
m.icelandair.ca
icelandair.ca
icelandair.ca
icelandair.ca
www.icelandair.ca
www.icelandair.ca
www.icelandair.ca
m.icelandair.ca
m.icelandair.is
www.icelandair.ca
icelandair.is
icelandair.ca
m.icelandair.ca
www.icelandair.ca
www.icelandair.ca
m.ca.icelandair.com
icelandair.ca
icelandair.ca
m.icelandair.is
www.icelandair.ca
icelandair.ca
icelandair.ca
icelandair.ca
www.icelandair.ca
m.icelandair.is
www.icelandair.ca
m.ca.icelandair.com
m.icelandair.ca
icelandair.ca
icelandair.ca
icelandair.is
*.icelandair.ca
icelandair.ca
www.icelandair.ca
m.icelandair.is
www.icelandair.ca
www.icelandair.ca
www.icelandair.ca
www.icelandair.ca
icelandair.is
www.icelandair.ca
www.icelandair.ca
icelandair.is
icelandair.is
www.icelandair.ca
www.icelandair.ca
m.ca.icelandair.com
icelandair.ca
m.ca.icelandair.com
icelandair.is
icelandair.is
m.icelandair.is
m.ca.icelandair.com
www.icelandair.ca
m.ca.icelandair.com
icelandair.ca
m.icelandair.ca
icelandair.is
icelandair.is
m.icelandair.is
www.icelandair.ca
m.icelandair.is
icelandair.is
icelandair.ca
www.icelandair.ca
icelandair.ca
www.icelandair.ca
m.icelandair.ca
icelandair.ca
icelandair.ca
icelandair.ca
www.icelandair.ca
www.icelandair.ca
www.icelandair.ca
m.icelandair.ca
m.icelandair.is
www.icelandair.ca
icelandair.is
icelandair.ca
m.icelandair.ca
www.icelandair.ca
www.icelandair.ca
m.ca.icelandair.com
icelandair.ca
icelandair.ca
m.icelandair.is
www.icelandair.ca
icelandair.ca
icelandair.ca
icelandair.ca
www.icelandair.ca
m.icelandair.is
www.icelandair.ca
m.ca.icelandair.com
m.icelandair.ca
icelandair.ca
icelandair.ca
icelandair.is
*.icelandair.ca
icelandair.ca
www.icelandair.ca
Certificate
The complete raw certificate details for www.icelandair.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIyDCCB7CgAwIBAgIQCFAv+sJS84hTEbNSpoFdcjANBgkqhkiG9w0BAQsFADB1 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTE1MDQxNzAwMDAwMFoXDTE3MDcwNTEy MDAwMFowgdoxHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYB BAGCNzwCAQMTAklTMRMwEQYDVQQFEwo0NjEyMDIzNDkwMR0wGwYDVQQJExRSZXlr amF2aWt1cmZsdWd2ZWxsaTEMMAoGA1UEERMDMTAxMQswCQYDVQQGEwJJUzESMBAG A1UEBxMJUmV5a2phdmlrMRcwFQYDVQQKEw5JY2VsYW5kYWlyIGVoZjEMMAoGA1UE CxMDV2ViMRowGAYDVQQDExF3d3cuaWNlbGFuZGFpci5jYTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAK2X1AYvGAxxhmeOoTeHhGuBhq1PcNF1Bh7KAFlG sDc2ROmTII1GpHmRdjbbbmAwV8n+nFQBzG2ZZcpCBtt4fMYLEMp3t5c6ERM05xFC OEeYI+qiu75QX6J4hasBcrxc3MFp30YX0ucl1KzwHu7jWXFnYJCWdnMI9ayTqW8r 9g6jT2NwVkNAXWtkk4VdaQiWc+eofp7cUFzFcbv7qUs+Bxf2l1xuhFBAokF4SOoB 67WPLwdWKFi+NqUYf0SZlyO+XsRnnfrgJh5Fji40zxe5xXACGCeHkFfOV6rLcPnO Mo5tZkmzg6m3J+hKAkeaC38CJ6fdS/jAuG6NIsoerUOt0gsCAwEAAaOCBOwwggTo MB8GA1UdIwQYMBaAFD3TUKXWoK3u80pgCmXTIdT4+NYPMB0GA1UdDgQWBBRChw73 MOt0YJUdb/rSMU5OJ/5FSjCCAaAGA1UdEQSCAZcwggGTghF3d3cuaWNlbGFuZGFp ci5jYYIUd3d3LmljZWxhbmRhaXIuY28udWuCEnd3dy5pY2VsYW5kYWlyLmNvbYIR d3d3LmljZWxhbmRhaXIuZGWCEXd3dy5pY2VsYW5kYWlyLmRrghF3d3cuaWNlbGFu ZGFpci5mcoIRd3d3LmljZWxhbmRhaXIubmyCEXd3dy5pY2VsYW5kYWlyLm5vghF3 d3cuaWNlbGFuZGFpci5zZYIRd3d3LmljZWxhbmRhaXIuZmmCGHd3dy5pY2VsYW5k YWlyZ29sZmVycy5pc4IRd3d3LmljZWxhbmRhaXIudXOCEXd3dy5pY2VsYW5kYWly LmlzghJjZG4uaWNlbGFuZGFpci5jb22CFnBhY2thZ2VzLmljZWxhbmRhaXIuaXOC EmJvb2suaWNlbGFuZGFpci5pc4IRd3d3LmljZWxhbmRhaXIuaXSCEXd3dy5pY2Vs YW5kYWlyLmVzghBmci5pY2VsYW5kYWlyLmNhghdzdG9wb3Zlci5pY2VsYW5kYWly LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9z aGEyLWV2LXNlcnZlci1nMS5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0 LmNvbS9zaGEyLWV2LXNlcnZlci1nMS5jcmwwQgYDVR0gBDswOTA3BglghkgBhv1s AgEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzCB iAYIKwYBBQUHAQEEfDB6MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2Vy dC5jb20wUgYIKwYBBQUHMAKGRmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9E aWdpQ2VydFNIQTJFeHRlbmRlZFZhbGlkYXRpb25TZXJ2ZXJDQS5jcnQwDAYDVR0T AQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHUApLkJkLQYWBSHuxOi zGdwCjw1mAT5G9+443fNDsgN3BAAAAFOhqHKXwAABAMARjBEAiAmFx61Z4przw/L ywcxo8nNGmUAaFj+9iI4i3LMLZJqTgIgDgqGGo9VlwkGPvPEGhfDhuotGHwAixK3 OU/4YFOEDsEAdgBo9pj4H2SCvjqM7rkoHUz8cVFdZ5PURNEKZ6y7T0/7xAAAAU6G oco1AAAEAwBHMEUCIDgR1vpK0jNYOvsKcsu/C8PRsLjoV9aIAFLm+gCxDZQJAiEA jugwuFY3erkYjUxYCr57VfMfgs7jd7QC535ILJ5iMmwAdgBWFAaaL9fC7NP14b1E sj7HRna5vJkRXMDvlJhV1onQ3QAAAU6GocuwAAAEAwBHMEUCIBL0SY0TfhKPjbkQ bTH/dB7loHmnRLtrDtSnq16rWXrBAiEAlX32yQzoKtUFsDNFHdqWZL4bTx4DrQIX pEkA5NpHUlEwDQYJKoZIhvcNAQELBQADggEBAFfeaARrlSg3+bZ1bsxoYVVQnYYi uXdjuVdPMmSEYsR0krswWuYyi7JUDOMz7jK2qiy+utHsckGTp9Ax30JNkpFrhvgF lxpgPOMic6720dAyiIg77N4WsO70Y1t0aNCDAoaqUmLgavScBBAJFLmvwCBq0A+5 hd+nBeZk2Pe1IjIExpMrYCUdZ6Uvp5yqhdTBYYPviaiYQ4W4cy9tQ0NS9BqXGxZy i8CA/gw3vUN0kKcVDkSzyB1z8MCjfqmWiVyx6e0hTLLaj/ghbDiX2+LPcm+pULx6 imh9NMYrK0WoQVlgnTaD2ED7ThUdhxPmCOo8HlDmZElTVfFPfjN3vutLxtM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZfUBi8YDHGGZ46hN4eE a4GGrU9w0XUGHsoAWUawNzZE6ZMgjUakeZF2NttuYDBXyf6cVAHMbZllykIG23h8 xgsQyne3lzoREzTnEUI4R5gj6qK7vlBfoniFqwFyvFzcwWnfRhfS5yXUrPAe7uNZ cWdgkJZ2cwj1rJOpbyv2DqNPY3BWQ0Bda2SThV1pCJZz56h+ntxQXMVxu/upSz4H F/aXXG6EUECiQXhI6gHrtY8vB1YoWL42pRh/RJmXI75exGed+uAmHkWOLjTPF7nF cAIYJ4eQV85Xqstw+c4yjm1mSbODqbcn6EoCR5oLfwInp91L+MC4bo0iyh6tQ63S CwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11050180855394487260454856915912056178 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-05 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4612023490' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reykjavikurflugvelli' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '101' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reykjavik' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Icelandair ehf' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Web' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.icelandair.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21914096044510915129746408384838889764293758650047808627026588838337515352960982395013378278505647014122901068965242277543908383329674184852495360743988468162452432458625765130974683027166886569938680485452397281769857514698669799917634894268798462895325801354694442056701330890456377009800738526534516110142482974005186597856780355198717771392401098340669581831199855546825768147091213931263567710280130028923032961101252536076468904126995158969304742584482908786488722948044432290569960081283181172552135515539314645015738948784168399848944589812018819312919187607864801350243333993428548256688483156417844937085451 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 42870ef730eb7460951d6ffad2314e4e27fe454a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (407 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandairgolfers.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.icelandair.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'packages.icelandair.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.icelandair.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandair.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.icelandair.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stopover.icelandair.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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