broaddy.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4a:13:02:be:b8:7b:9d:a7:9f:5a:11:4e:f6:f1:7d:3e:27 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=broaddy.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4a:13:02:be:b8:7b:9d:a7:9f:5a:11:4e:f6:f1:7d:3e:27
Serial Number (int): 286543022532217880552980297462421334605351
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:db:0e:47:12:d6:54:08:8a:9e:3f:37:48:a0:cd:57:d0:0b:ec:44
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5c:cf:1c:85:a2:e8:12:3d:f1:fc:a7:da:2d:eb:43:f6:c1:e5:23:a1
Fingerprint (sha256): 55:1b:56:c8:c8:28:f4:b4:90:26:4e:7e:2d:85:79:e1:6d:63:99:cc:7f:7e:e0:2b:18:58:54:d6:24:a0:0a:fc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate broaddy.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for broaddy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agder.broaddy.com
broaddy.com
buddynetwork-salzburg.broaddy.com
cuni.broaddy.com
demo.broaddy.com
esci-upf.broaddy.com
esn-rijeka.broaddy.com
esnauth.broaddy.com
esnbarcelonaub.broaddy.com
esnbergen.broaddy.com
esncorvinus.broaddy.com
esnelte.broaddy.com
esneu.broaddy.com
esnhaderslev.broaddy.com
esnhamburg.broaddy.com
esnhsemsk.broaddy.com
esnism.broaddy.com
esnminho.broaddy.com
esnpardubice.broaddy.com
esnpcz.broaddy.com
esnpd.broaddy.com
esnsghwarsaw.broaddy.com
esnspb.broaddy.com
esnsplit.broaddy.com
esntut.broaddy.com
esnuct.broaddy.com
esnupc.broaddy.com
esnzadar.broaddy.com
esnzagreb.broaddy.com
liberec.broaddy.com
rc.broaddy.com
react.broaddy.com
studyatswps.broaddy.com
swps.broaddy.com
umprum.broaddy.com
unicatt.broaddy.com
univ.grenoblealpes.a.broaddy.com
univ.grenoblealpes.broaddy.com
upol.broaddy.com
uskatowice.broaddy.com
utb.broaddy.com
vistula.broaddy.com
vsh.broaddy.com
wiki.broaddy.com
www.agder.broaddy.com
www.broaddy.com
www.buddynetwork-salzburg.broaddy.com
www.cuni.broaddy.com
www.demo.broaddy.com
www.esci-upf.broaddy.com
www.esn-rijeka.broaddy.com
www.esnauth.broaddy.com
www.esnbarcelonaub.broaddy.com
www.esnbergen.broaddy.com
www.esncorvinus.broaddy.com
www.esnelte.broaddy.com
www.esneu.broaddy.com
www.esnhaderslev.broaddy.com
www.esnhamburg.broaddy.com
www.esnhsemsk.broaddy.com
www.esnism.broaddy.com
www.esnminho.broaddy.com
www.esnpardubice.broaddy.com
www.esnpcz.broaddy.com
www.esnpd.broaddy.com
www.esnsghwarsaw.broaddy.com
www.esnspb.broaddy.com
www.esnsplit.broaddy.com
www.esntut.broaddy.com
www.esnuct.broaddy.com
www.esnupc.broaddy.com
www.esnzadar.broaddy.com
www.esnzagreb.broaddy.com
www.liberec.broaddy.com
www.rc.broaddy.com
www.react.broaddy.com
www.studyatswps.broaddy.com
www.swps.broaddy.com
www.umprum.broaddy.com
www.unicatt.broaddy.com
www.univ.grenoblealpes.a.broaddy.com
www.univ.grenoblealpes.broaddy.com
www.upol.broaddy.com
www.uskatowice.broaddy.com
www.utb.broaddy.com
www.vistula.broaddy.com
www.vsh.broaddy.com
www.wiki.broaddy.com

Other certificates including the domain name broaddy.com

(limited to 100 certificates)
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
*.broaddy.com
broaddy.com
czv.broaddy.com
app.broaddy.com
www.madamemargohairdesign.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
recipebox.gummi.site
broaddy.com
aws.broaddy.com
rcmavalet.com
www.en-gager.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
czv.broaddy.com
czv.broaddy.com
broaddy.com
broaddy.com
get.colorain.app
broaddy.com
broaddy.com
demo.broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
samyuktha.live
broaddy.com
broaddy.com
broaddy.com
aws.broaddy.com
iteration-demo.carto.solutions
soflime.in
broaddy.com
rcmavalet.com
broaddy.com
www.bingo.aratiendas.com

Certificate

The complete raw certificate details for broaddy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOKzCCDROgAwIBAgISA0oTAr64e52nn1oRTvbxfT4nMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MjAxODEwMjRaFw0x
ODExMTgxODEwMjRaMBYxFDASBgNVBAMTC2Jyb2FkZHkuY29tMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw49t+fuFe5nKidHtZH2SEQiUAF5Cm+vcS+wX
+gVv9jgs5iK4AJxt0E1eAgBrvQv7yxdbVKkYrGJKSKGI3Z5NO0ENhNMkk3Hpt2TX
bJ1PkzS7qinRNJWMBqxsdKfzDelYkSlkDDaQD3dKVGwLhMOC6KKJDWNAazghA8zI
oM20f3R95eN39WT3QpG5Hkm0qu/xKj5KN/v72HgsxMm0D6etRzdFZqfixiq609OF
Ryazz1+9vloCcjGHR4TZL/leV9ktXgHkr++u5UIC6UqVWZXp2zDEvvuIs19ye6hd
7AMgVMSsXCw5zRb5UhSjPDgqbw2wjOPOWmTFlFovrxX8BS88NQIDAQABo4ILPTCC
CzkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRO2w5HEtZUCIqePzdIoM1X0AvsRDAf
BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw
LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw
LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv
MIIIPQYDVR0RBIIINDCCCDCCEWFnZGVyLmJyb2FkZHkuY29tggticm9hZGR5LmNv
bYIhYnVkZHluZXR3b3JrLXNhbHpidXJnLmJyb2FkZHkuY29tghBjdW5pLmJyb2Fk
ZHkuY29tghBkZW1vLmJyb2FkZHkuY29tghRlc2NpLXVwZi5icm9hZGR5LmNvbYIW
ZXNuLXJpamVrYS5icm9hZGR5LmNvbYITZXNuYXV0aC5icm9hZGR5LmNvbYIaZXNu
YmFyY2Vsb25hdWIuYnJvYWRkeS5jb22CFWVzbmJlcmdlbi5icm9hZGR5LmNvbYIX
ZXNuY29ydmludXMuYnJvYWRkeS5jb22CE2VzbmVsdGUuYnJvYWRkeS5jb22CEWVz
bmV1LmJyb2FkZHkuY29tghhlc25oYWRlcnNsZXYuYnJvYWRkeS5jb22CFmVzbmhh
bWJ1cmcuYnJvYWRkeS5jb22CFWVzbmhzZW1zay5icm9hZGR5LmNvbYISZXNuaXNt
LmJyb2FkZHkuY29tghRlc25taW5oby5icm9hZGR5LmNvbYIYZXNucGFyZHViaWNl
LmJyb2FkZHkuY29tghJlc25wY3ouYnJvYWRkeS5jb22CEWVzbnBkLmJyb2FkZHku
Y29tghhlc25zZ2h3YXJzYXcuYnJvYWRkeS5jb22CEmVzbnNwYi5icm9hZGR5LmNv
bYIUZXNuc3BsaXQuYnJvYWRkeS5jb22CEmVzbnR1dC5icm9hZGR5LmNvbYISZXNu
dWN0LmJyb2FkZHkuY29tghJlc251cGMuYnJvYWRkeS5jb22CFGVzbnphZGFyLmJy
b2FkZHkuY29tghVlc256YWdyZWIuYnJvYWRkeS5jb22CE2xpYmVyZWMuYnJvYWRk
eS5jb22CDnJjLmJyb2FkZHkuY29tghFyZWFjdC5icm9hZGR5LmNvbYIXc3R1ZHlh
dHN3cHMuYnJvYWRkeS5jb22CEHN3cHMuYnJvYWRkeS5jb22CEnVtcHJ1bS5icm9h
ZGR5LmNvbYITdW5pY2F0dC5icm9hZGR5LmNvbYIgdW5pdi5ncmVub2JsZWFscGVz
LmEuYnJvYWRkeS5jb22CHnVuaXYuZ3Jlbm9ibGVhbHBlcy5icm9hZGR5LmNvbYIQ
dXBvbC5icm9hZGR5LmNvbYIWdXNrYXRvd2ljZS5icm9hZGR5LmNvbYIPdXRiLmJy
b2FkZHkuY29tghN2aXN0dWxhLmJyb2FkZHkuY29tgg92c2guYnJvYWRkeS5jb22C
EHdpa2kuYnJvYWRkeS5jb22CFXd3dy5hZ2Rlci5icm9hZGR5LmNvbYIPd3d3LmJy
b2FkZHkuY29tgiV3d3cuYnVkZHluZXR3b3JrLXNhbHpidXJnLmJyb2FkZHkuY29t
ghR3d3cuY3VuaS5icm9hZGR5LmNvbYIUd3d3LmRlbW8uYnJvYWRkeS5jb22CGHd3
dy5lc2NpLXVwZi5icm9hZGR5LmNvbYIad3d3LmVzbi1yaWpla2EuYnJvYWRkeS5j
b22CF3d3dy5lc25hdXRoLmJyb2FkZHkuY29tgh53d3cuZXNuYmFyY2Vsb25hdWIu
YnJvYWRkeS5jb22CGXd3dy5lc25iZXJnZW4uYnJvYWRkeS5jb22CG3d3dy5lc25j
b3J2aW51cy5icm9hZGR5LmNvbYIXd3d3LmVzbmVsdGUuYnJvYWRkeS5jb22CFXd3
dy5lc25ldS5icm9hZGR5LmNvbYIcd3d3LmVzbmhhZGVyc2xldi5icm9hZGR5LmNv
bYIad3d3LmVzbmhhbWJ1cmcuYnJvYWRkeS5jb22CGXd3dy5lc25oc2Vtc2suYnJv
YWRkeS5jb22CFnd3dy5lc25pc20uYnJvYWRkeS5jb22CGHd3dy5lc25taW5oby5i
cm9hZGR5LmNvbYIcd3d3LmVzbnBhcmR1YmljZS5icm9hZGR5LmNvbYIWd3d3LmVz
bnBjei5icm9hZGR5LmNvbYIVd3d3LmVzbnBkLmJyb2FkZHkuY29tghx3d3cuZXNu
c2dod2Fyc2F3LmJyb2FkZHkuY29tghZ3d3cuZXNuc3BiLmJyb2FkZHkuY29tghh3
d3cuZXNuc3BsaXQuYnJvYWRkeS5jb22CFnd3dy5lc250dXQuYnJvYWRkeS5jb22C
Fnd3dy5lc251Y3QuYnJvYWRkeS5jb22CFnd3dy5lc251cGMuYnJvYWRkeS5jb22C
GHd3dy5lc256YWRhci5icm9hZGR5LmNvbYIZd3d3LmVzbnphZ3JlYi5icm9hZGR5
LmNvbYIXd3d3LmxpYmVyZWMuYnJvYWRkeS5jb22CEnd3dy5yYy5icm9hZGR5LmNv
bYIVd3d3LnJlYWN0LmJyb2FkZHkuY29tght3d3cuc3R1ZHlhdHN3cHMuYnJvYWRk
eS5jb22CFHd3dy5zd3BzLmJyb2FkZHkuY29tghZ3d3cudW1wcnVtLmJyb2FkZHku
Y29tghd3d3cudW5pY2F0dC5icm9hZGR5LmNvbYIkd3d3LnVuaXYuZ3Jlbm9ibGVh
bHBlcy5hLmJyb2FkZHkuY29tgiJ3d3cudW5pdi5ncmVub2JsZWFscGVzLmJyb2Fk
ZHkuY29tghR3d3cudXBvbC5icm9hZGR5LmNvbYIad3d3LnVza2F0b3dpY2UuYnJv
YWRkeS5jb22CE3d3dy51dGIuYnJvYWRkeS5jb22CF3d3dy52aXN0dWxhLmJyb2Fk
ZHkuY29tghN3d3cudnNoLmJyb2FkZHkuY29tghR3d3cud2lraS5icm9hZGR5LmNv
bTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcC
AjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24g
YnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0
aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5
cHQub3JnL3JlcG9zaXRvcnkvMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAKTxR
llTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFlWL7QBQAABAMARzBFAiAb
ZdLsChkLn6uUV1t5ytEwSixqu2Z6UBUmzsORRsMQ/gIhAJgPwBuAgV7o+/gdrM7V
kW69tks8D3cwe8wEKXPSrN9sAHcAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2y
CJo32RMAAAFlWL7QNQAABAMASDBGAiEA4DqSJVQdjMHXnFGItuUC9Rsa5bEYTbMg
p/vhAogrChgCIQCeDSafISMRLJOh7Pr5akWEawWOO2zfdD9tlPzVT5cOiDANBgkq
hkiG9w0BAQsFAAOCAQEAeP/o92TfJhAnRpT2TWKeSP59LBchjrIwCOo0XFdd/ERb
Tcywv8FpyPHGk0LSLAGVspyuBsOyl4be4BoXpAOytIw+BqjzlQtqct+WmBe8pC6u
lGhn2WfOVSLm9bUt1Qi3PmRjwe9suY9fm/1eUzkk8eXixXO2WiBE0nfyi0NO5AOE
UStEeDolo4Ga7LDDvvfElenBIZxUgNGovOnfavXJgfc5OR8PB7MdS2ZIGNzMWS6C
74ZUdHTn+2judvVsmsbfkwp7OuLRvrd92pNJJ370Y9QmZ0uDJWSemI5lmCbVKyW5
Nfn+Is0iBSdSDB5W03m9baO2RYltSHQBZoRNBIQI9Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw49t+fuFe5nKidHtZH2S
EQiUAF5Cm+vcS+wX+gVv9jgs5iK4AJxt0E1eAgBrvQv7yxdbVKkYrGJKSKGI3Z5N
O0ENhNMkk3Hpt2TXbJ1PkzS7qinRNJWMBqxsdKfzDelYkSlkDDaQD3dKVGwLhMOC
6KKJDWNAazghA8zIoM20f3R95eN39WT3QpG5Hkm0qu/xKj5KN/v72HgsxMm0D6et
RzdFZqfixiq609OFRyazz1+9vloCcjGHR4TZL/leV9ktXgHkr++u5UIC6UqVWZXp
2zDEvvuIs19ye6hd7AMgVMSsXCw5zRb5UhSjPDgqbw2wjOPOWmTFlFovrxX8BS88
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286543022532217880552980297462421334605351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-20 18:10:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-18 18:10:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'broaddy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24687197238071473856171423059509970999120990291232445152581194833857599640485163584384108501881215214341732218501907837611664781306917948721450982059161417381643260886742068046034745508208473890982803234496285506305135310138592567507218093280747767638653064675870504172123577179250177973520909790458495174903066819009621804736977173530123295438332595096101014302769054249550297845716345903461299630847798075003341427182091365907378453694397129502122614915865156061767403925599578083581024101910393363061776850640492279937852657486628391082843589727666969026986659967872649902102593029636529288991927274440432525720629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4edb0e4712d654088a9e3f3748a0cd57d00bec44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agder.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddynetwork-salzburg.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuni.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esci-upf.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esn-rijeka.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnauth.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnbarcelonaub.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnbergen.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esncorvinus.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnelte.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esneu.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnhaderslev.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnhamburg.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnhsemsk.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnism.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnminho.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnpardubice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnpcz.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnpd.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnsghwarsaw.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnspb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnsplit.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esntut.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnuct.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnupc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnzadar.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnzagreb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberec.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'react.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studyatswps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umprum.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unicatt.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'univ.grenoblealpes.a.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'univ.grenoblealpes.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upol.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uskatowice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistula.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vsh.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agder.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buddynetwork-salzburg.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuni.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demo.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esci-upf.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esn-rijeka.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnauth.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnbarcelonaub.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnbergen.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esncorvinus.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnelte.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esneu.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnhaderslev.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnhamburg.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnhsemsk.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnism.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnminho.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnpardubice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnpcz.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnpd.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnsghwarsaw.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnspb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnsplit.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esntut.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnuct.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnupc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnzadar.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnzagreb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberec.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.react.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studyatswps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umprum.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unicatt.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.univ.grenoblealpes.a.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.univ.grenoblealpes.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upol.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uskatowice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vistula.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vsh.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiki.broaddy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016558bed005000004030047304502201b65d2ec0a190b9fab94575b79cad1304a2c6abb667a501526cec39146c310fe022100980fc01b80815ee8fbf81dacced5916ebdb64b3c0f77307bcc042973d2acdf6c0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016558bed0350000040300483046022100e03a9225541d8cc1d79c5188b6e502f51b1ae5b1184db320a7fbe102882b0a180221009e0d269f2123112c93a1ecfaf96a45846b058e3b6cdf743f6d94fcd54f970e88
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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