nanokovrik.ru

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:66:bb:d3:80:f5:cf:f3:30:f8:7d:cf:91:f2:a6:b9:10:cf was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nanokovrik.ru

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:66:bb:d3:80:f5:cf:f3:30:f8:7d:cf:91:f2:a6:b9:10:cf
Serial Number (int): 296295323046689079810671751413487373979855
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3b:89:bd:7a:c4:2e:04:5e:52:d8:64:e3:ca:41:67:45:31:b1:01:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 43:08:3d:ec:ce:a8:b0:15:08:10:63:05:57:97:ef:94:96:46:83:54
Fingerprint (sha256): 69:03:d0:a3:dc:b6:73:73:c8:98:14:21:3c:61:ca:33:9f:d8:55:2a:10:9e:61:5a:28:d2:63:6d:d2:ae:13:ea

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nanokovrik.ru

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nanokovrik.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abakan.nanokovrik.ru
anadyr.nanokovrik.ru
arkhangelsk.nanokovrik.ru
astrakhan.nanokovrik.ru
barnaul.nanokovrik.ru
belgorod.nanokovrik.ru
birobidzhan.nanokovrik.ru
blagoveshchensk.nanokovrik.ru
bryansk.nanokovrik.ru
cheboksary.nanokovrik.ru
chelyabinsk.nanokovrik.ru
cherkessk.nanokovrik.ru
chita.nanokovrik.ru
elista.nanokovrik.ru
gorno-altaysk.nanokovrik.ru
groznyy.nanokovrik.ru
irkutsk.nanokovrik.ru
ivanovo.nanokovrik.ru
izhevsk.nanokovrik.ru
kaliningrad.nanokovrik.ru
kaluga.nanokovrik.ru
kazan.nanokovrik.ru
kemerovo.nanokovrik.ru
khabarovsk.nanokovrik.ru
khanty-mansiysk.nanokovrik.ru
kirov.nanokovrik.ru
kostroma.nanokovrik.ru
krasnodar.nanokovrik.ru
krasnoyarsk.nanokovrik.ru
kurgan.nanokovrik.ru
kursk.nanokovrik.ru
kyzyl.nanokovrik.ru
lipetsk.nanokovrik.ru
magadan.nanokovrik.ru
magas.nanokovrik.ru
makhachkala.nanokovrik.ru
maykop.nanokovrik.ru
murmansk.nanokovrik.ru
nalchik.nanokovrik.ru
nanokovrik.ru
naryan-mar.nanokovrik.ru
nizhniy-novgorod.nanokovrik.ru
novosibirsk.nanokovrik.ru
omsk.nanokovrik.ru
orenburg.nanokovrik.ru
oryol.nanokovrik.ru
penza.nanokovrik.ru
perm.nanokovrik.ru
petropavlovsk-kamchatskiy.nanokovrik.ru
petrozavodsk.nanokovrik.ru
pskov.nanokovrik.ru
rostov-na-donu.nanokovrik.ru
ryazan.nanokovrik.ru
salekhard.nanokovrik.ru
samara.nanokovrik.ru
sankt-peterburg.nanokovrik.ru
saransk.nanokovrik.ru
saratov.nanokovrik.ru
sevastopol.nanokovrik.ru
simferopol.nanokovrik.ru
smolensk.nanokovrik.ru
stavropol.nanokovrik.ru
syktyvkar.nanokovrik.ru
tambov.nanokovrik.ru
tomsk.nanokovrik.ru
tula.nanokovrik.ru
tver.nanokovrik.ru
tyumen.nanokovrik.ru
ufa.nanokovrik.ru
ulan-ude.nanokovrik.ru
ulyanovsk.nanokovrik.ru
velikiy-novgorod.nanokovrik.ru
vladikavkaz.nanokovrik.ru
vladimir.nanokovrik.ru
vladivostok.nanokovrik.ru
volgograd.nanokovrik.ru
vologda.nanokovrik.ru
voronezh.nanokovrik.ru
www.nanokovrik.ru
yakutsk.nanokovrik.ru
yaroslavl.nanokovrik.ru
yekaterinburg.nanokovrik.ru
yoshkar-ola.nanokovrik.ru
yuzhno-sakhalinsk.nanokovrik.ru

Other certificates including the domain name nanokovrik.ru

(limited to 100 certificates)

Certificate

The complete raw certificate details for nanokovrik.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4vgSq41I2FCeYVD7IeyM
m6t7Rx7+NwGSGwNiou2U7gdVvswmg591STytwN5rgVKeY2H57JG1k6azejvmoqol
PaZva+TJSScblnGbYGZC6tbSqaRvYQnyF/CMiq72ZaQ4zCVed0twaQFiuGPL7dGM
nD+gwn3TgsQkUY+/S9fjUBs2Y0nMJdkebU8E/UC+sEFPjS6zdMFqgrqXwEcVxZX+
ULDjs2PEq/osI0xWyTL3BTdCqR7qZsPF0vqHyj/KzQqE45dymyISaf+aWqIRwtCM
vmtSQUCkcnvyTsPAd64xs+H/jkc/UScvl3irb6woo8Nkbc8k1Blm8wDJf62cnJgg
Jugi0USnDozWzLOp3cOw96M17IdNjrpZI4V2NEQnJKq8Mvgcm8VehKA/z78a1Yi4
PFP3QbskyxQQKRrGttCMDkHOLTg8efe1nLgcgAAGfnmBCOmNQfE9UGxThozXd3IF
/ichrigr35iq19lt6ljShoIZMSq9mMPPGx6aKvNWBkj3lGEhEVJsQwoDO8cKrDxg
sX8OqzsvWl32fP2+xB51fCJ/8NRwc233ApZmj8F8qG8uXzRkljwNv2AvM9YdCVNM
B/17735feEDUY2/4lPgR86SriXicsWqh/9d6jKxElDiAiCL0HV6a+0HNlgAn+UjY
QaD+b9f4gu26A9geu/iVH4kCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296295323046689079810671751413487373979855
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-30 20:06:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-28 20:06:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nanokovrik.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 925952876786694487955308604165856362871903559272533053620240189820091015132301811814648919219286321581193777986815366074086778831341957357398740024665760361142552637863869577565882121973577721705560151166653828439607209060686167104174955836185641724482158209173476505840716489939434733253770082391910572780456884772689126107807835607611490725717177217273111661167392079159060912217725853528824228983041876691584698932622799184380224053560498510013095991216755981150607087254119101498260937901518925867336951691419660706811103989348101886766997714172974053798519867449147381119643641402690463145170992691264629425908652311170194291448254344991190439571293664446356661550835852858370348859832419836291267638811249779861821261052895119402926846451552838704720716589405008661161578840186807744885363738842467639871799714415892757387175604713445589610241036822004530023751098992731829530371185935412325672465364094777049935022099214155958043504644682783146181876202368746261927870553086258748902279431734463348392706159049242013003878977426440507411464161407568645010887816744269379370749264896753578132564291418209267639614839195615305350854832252887089734183708258973835434282480580039299745626607560849242194120747090943096807545446281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b89bd7ac42e045e52d864e3ca41674531b101e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2054 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abakan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anadyr.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkhangelsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrakhan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnaul.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belgorod.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birobidzhan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blagoveshchensk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bryansk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheboksary.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chelyabinsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cherkessk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chita.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elista.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gorno-altaysk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groznyy.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irkutsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivanovo.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'izhevsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaliningrad.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaluga.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kazan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kemerovo.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khabarovsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khanty-mansiysk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirov.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kostroma.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krasnodar.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krasnoyarsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurgan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kursk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyzyl.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lipetsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magadan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magas.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makhachkala.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maykop.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murmansk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nalchik.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naryan-mar.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nizhniy-novgorod.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novosibirsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orenburg.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oryol.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penza.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perm.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petropavlovsk-kamchatskiy.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petrozavodsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pskov.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rostov-na-donu.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryazan.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salekhard.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samara.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sankt-peterburg.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saransk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saratov.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevastopol.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simferopol.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smolensk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stavropol.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syktyvkar.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tambov.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tula.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tver.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyumen.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufa.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulan-ude.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulyanovsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velikiy-novgorod.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vladikavkaz.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vladimir.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vladivostok.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volgograd.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vologda.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voronezh.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yakutsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaroslavl.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yekaterinburg.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoshkar-ola.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yuzhno-sakhalinsk.nanokovrik.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001645284a0830000040300473045022100a61a890da15121dda14f3fcd29e8a07a9ee040dad89e86cdcda46d3e2f036a7002201a6a5d5581372af9a155081a935b5bea0d231a2849f7f8acc6f80ccbf2e4391a007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001645284a08e00000403004630440220170e6457ea30c1fe543b1f2eef6fac9644c334fc5ebcff4a2c3ac5d2e66214bd022040bb8ec73a4f9bab30e0b023bc8da5a7bbb3d00c98352d6755d86bd8a4cb83db
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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