nanokovrik.ru

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:df:9b:f9:f0:0a:7a:c6:c6:8f:2c:2c:47:91:62:39:27:e5 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nanokovrik.ru

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:df:9b:f9:f0:0a:7a:c6:c6:8f:2c:2c:47:91:62:39:27:e5
Serial Number (int): 337427153708523038402307494079505096058853
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:42:ba:0a:b5:06:ad:67:ee:9e:58:ff:cb:70:f1:ad:e2:81:ca:f8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 22:46:93:01:90:30:44:72:26:fe:5c:15:90:d8:9f:b9:98:42:00:62
Fingerprint (sha256): 67:6f:f6:9f:d4:5c:2f:41:a0:4d:af:b7:2d:12:ad:c2:2d:58:5b:a6:6d:b3:3b:a2:ff:f2:fd:90:c8:71:d1:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nanokovrik.ru

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nanokovrik.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abakan.nanokovrik.ru
anadyr.nanokovrik.ru
arkhangelsk.nanokovrik.ru
astrakhan.nanokovrik.ru
barnaul.nanokovrik.ru
belgorod.nanokovrik.ru
birobidzhan.nanokovrik.ru
blagoveshchensk.nanokovrik.ru
bryansk.nanokovrik.ru
cheboksary.nanokovrik.ru
chelyabinsk.nanokovrik.ru
cherkessk.nanokovrik.ru
chita.nanokovrik.ru
elista.nanokovrik.ru
gorno-altaysk.nanokovrik.ru
groznyy.nanokovrik.ru
irkutsk.nanokovrik.ru
ivanovo.nanokovrik.ru
izhevsk.nanokovrik.ru
kaliningrad.nanokovrik.ru
kaluga.nanokovrik.ru
kazan.nanokovrik.ru
kemerovo.nanokovrik.ru
khabarovsk.nanokovrik.ru
khanty-mansiysk.nanokovrik.ru
kirov.nanokovrik.ru
kostroma.nanokovrik.ru
krasnodar.nanokovrik.ru
krasnoyarsk.nanokovrik.ru
kurgan.nanokovrik.ru
kursk.nanokovrik.ru
kyzyl.nanokovrik.ru
lipetsk.nanokovrik.ru
magadan.nanokovrik.ru
magas.nanokovrik.ru
makhachkala.nanokovrik.ru
maykop.nanokovrik.ru
murmansk.nanokovrik.ru
nalchik.nanokovrik.ru
nanokovrik.ru
naryan-mar.nanokovrik.ru
nizhniy-novgorod.nanokovrik.ru
novosibirsk.nanokovrik.ru
omsk.nanokovrik.ru
orenburg.nanokovrik.ru
oryol.nanokovrik.ru
penza.nanokovrik.ru
perm.nanokovrik.ru
petropavlovsk-kamchatskiy.nanokovrik.ru
petrozavodsk.nanokovrik.ru
pskov.nanokovrik.ru
rostov-na-donu.nanokovrik.ru
ryazan.nanokovrik.ru
salekhard.nanokovrik.ru
samara.nanokovrik.ru
sankt-peterburg.nanokovrik.ru
saransk.nanokovrik.ru
saratov.nanokovrik.ru
sevastopol.nanokovrik.ru
simferopol.nanokovrik.ru
smolensk.nanokovrik.ru
stavropol.nanokovrik.ru
syktyvkar.nanokovrik.ru
tambov.nanokovrik.ru
tomsk.nanokovrik.ru
tula.nanokovrik.ru
tver.nanokovrik.ru
tyumen.nanokovrik.ru
ufa.nanokovrik.ru
ulan-ude.nanokovrik.ru
ulyanovsk.nanokovrik.ru
velikiy-novgorod.nanokovrik.ru
vladikavkaz.nanokovrik.ru
vladimir.nanokovrik.ru
vladivostok.nanokovrik.ru
volgograd.nanokovrik.ru
vologda.nanokovrik.ru
voronezh.nanokovrik.ru
www.nanokovrik.ru
yakutsk.nanokovrik.ru
yaroslavl.nanokovrik.ru
yekaterinburg.nanokovrik.ru
yoshkar-ola.nanokovrik.ru
yuzhno-sakhalinsk.nanokovrik.ru

Other certificates including the domain name nanokovrik.ru

(limited to 100 certificates)

Certificate

The complete raw certificate details for nanokovrik.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1kVqctaTYd7CyojKB7QY
iK6VbaYxgaachUpXsbwiIECTgCqc2xA9PW5SAS5vBbtW0ksvQxwmFDGSUXC0Bl9C
R/vSvqPC8LMkNnIErZEuZq75NxUlAJIXCl3nW3xny19ITEcmCKKDN7lgKLLezLjy
OqF6mF7tNbb/9k+QBjR6VUZU6jaoTTCmlQZU9I6pV056HM2vZ+Cg1g9cEoRk3+cR
6W7BN1B44b6x0dpAyOTzTro5P8lJ6pgUfs3n+NaaVCI2L+EA5NaHYEcxHOryy53N
qdff4MDgx/TWHh3CdKNRQQ5o3QFRvZeFQtdME3GrgO2hfN1UFQquKCJR73SeYB2k
a4G2uEhBzO3MYAquHyPlFIg2LJynFfUDvwvAt+YgTv5TdLg16aH8HG9MmCUjOFn6
DxcN6PNNdWhjkkl3hpJiG2ko8aj++JGQ8phBAmYxEUfvDQZWe4DsfPZpz7kWII5q
QegmSJ0YyMH/wYirOzgc+sa1PrkpAudKRP8cueUEgCK9FDs4yofF7Z56mxKaRdxL
G3rFnMHOFLN65eILqNE4fJAAgwJYBzeSTi8C25rw1eND0610qbOJrPRj1KT51F87
zJ/AR8Bxj5LMJCat2KHfN7T1xyHZeikgprfHKOA4rlC9g5elRlY/iCX30ZS+pxKB
RoESSEPhSn3aQKR+7VhrDDcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337427153708523038402307494079505096058853
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-31 20:03:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-31 20:03:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nanokovrik.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 874150048591625878947135563654059519825331875552741565602632241920913966189581594152416185616634698108048609140200855537077851349324861159991842878241618453829168825578332792647846077267561148994458466216387224034479669034837281179642351758389779504793702830647385365867411613678344784005670443367554693696792170709418862306892409985886642861835416009873426352568425651672288975620225730170844007130036340108032504955584255148358324758261537004758096164292020138623426054398927620398450578134147774736473496173152103598974413111917773707004610387420010194748163149502437460826757620547289076308825911648307968552507402288141503210954837868822172715867676980446786727676403292028442254469562190861959621459760296339181586688429985562170731951854651788247878659987025822622950980824130956544867456795082335652887126716456266006255377105596729335349675674452351021753229926252884384687358000630564057644858998240421546898692026365933745924391954782898517510994580148838718051236170362837560363372239910904198686264036511841124573214895200511753999921340905862044379662105953355982513330145953645475025370322160988269873573832518057604571913889898469961205713380654418745201498132362691239854994696619412928456211793508057859830661712951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0242ba0ab506ad67ee9e58ffcb70f1ade281caf8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2054 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abakan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anadyr.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkhangelsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrakhan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnaul.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belgorod.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birobidzhan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blagoveshchensk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bryansk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheboksary.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chelyabinsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cherkessk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chita.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elista.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gorno-altaysk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groznyy.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irkutsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivanovo.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'izhevsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaliningrad.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaluga.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kazan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kemerovo.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khabarovsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khanty-mansiysk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirov.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kostroma.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krasnodar.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krasnoyarsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurgan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kursk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyzyl.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lipetsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magadan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magas.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makhachkala.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maykop.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murmansk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nalchik.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naryan-mar.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nizhniy-novgorod.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novosibirsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orenburg.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oryol.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penza.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perm.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petropavlovsk-kamchatskiy.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petrozavodsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pskov.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rostov-na-donu.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryazan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salekhard.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samara.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sankt-peterburg.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saransk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saratov.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevastopol.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simferopol.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smolensk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stavropol.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syktyvkar.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tambov.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tula.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tver.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyumen.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufa.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulan-ude.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulyanovsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velikiy-novgorod.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vladikavkaz.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vladimir.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vladivostok.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volgograd.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vologda.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voronezh.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yakutsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaroslavl.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yekaterinburg.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoshkar-ola.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yuzhno-sakhalinsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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