overcast.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7f:e8:84:4c:e7:25:b3:e7:50:dc:cf:0f:5d:39:50:5b:a7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=overcast.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7f:e8:84:4c:e7:25:b3:e7:50:dc:cf:0f:5d:39:50:5b:a7
Serial Number (int): 304861786232223855733246345926884285504423
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3d:56:5f:d2:63:67:c7:b0:ed:85:0f:28:a1:18:62:0e:cf:f3:b4:c3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 95:a6:6c:6e:89:a3:b7:6a:87:2a:28:a0:cd:15:9d:0e:19:28:74:13
Fingerprint (sha256): 92:a1:4a:73:35:fa:85:a0:14:f4:d5:67:de:59:e9:a2:b4:b3:cc:55:f6:83:a1:1c:a0:f0:cd:7b:c7:a1:dd:19

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate overcast.io

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for overcast.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

17.is
akureyri.elding.is
allianz-tilbod.overcast.is
allianz-undirrita.overcast.is
allianz-web-test.overcast.is
allianz.is
ams.hi.is
annualreport2017.hsorka.is
annualreport2018.hsorka.is
annualreport2019.hsorka.is
annualreport2019.icelandairgroup.is
arsskyrsla2014.hsorka.is
arsskyrsla2015.atvr.is
arsskyrsla2015.hsorka.is
arsskyrsla2016.atvr.is
arsskyrsla2016.hsorka.is
arsskyrsla2017.atvr.is
arsskyrsla2017.hbgrandi.is
arsskyrsla2017.hsorka.is
arsskyrsla2018.atvr.is
arsskyrsla2018.hbgrandi.is
arsskyrsla2018.hsorka.is
arsskyrsla2019.atvr.is
arsskyrsla2019.brim.is
arsskyrsla2019.hsorka.is
arsskyrsla2020.brim.is
arsskyrslur.is
atvr.overcast.is
audlindagardurinn.is
avislangtimaleiga.is
benefitsportal.eurail.com
benefitsportal.eurailgroup.org
bru.hsorka.is
csr.sfs.is
elding-ak.overcast.is
elding-rvk.overcast.is
eurogym2020.com
fia.is
fridarsetur.is
hsorka.com
hsorka.is
hsorka2018.overcast.is
icelandair.overcast.is
icelandsif.is
innri.allianz.is
kjarninn.is
langtimaleigaavis.is
leslistinn.is
lfb.is
login.buseti.is
markadurinn.is
northerndestinations.is
overcast.io
overcast.is
pappir.allianz.is
prufukerfi.allianz.is
prufuundirrita.allianz.is
resourcepark.is
reykjavik.elding.is
samfelag.sfs.is
samfelagsskyrsla2017.hbgrandi.is
samfelagsskyrsla2018.hbgrandi.is
samfelagsskyrsla2019.brim.is
skogarvegur.buseti.is
snjallraedi.is
sustainabilityreport2017.hbgrandi.is
sustainabilityreport2018.hbgrandi.is
sustainabilityreport2019.brim.is
tilbod.allianz.is
undirrita.allianz.is
vesturverk.is
volcanohuts.com
volcanotrails.com
volcanotrails.is
www.17.is
www.allianz.is
www.arsskyrslur.is
www.audlindagardurinn.is
www.avislangtimaleiga.is
www.eurogym2020.com
www.fia.is
www.fridarsetur.is
www.garri.is
www.hsorka.com
www.hsorka.is
www.icelandsif.is
www.kjarninn.is
www.langtimaleigaavis.is
www.leslistinn.is
www.lfb.is
www.markadurinn.is
www.northerndestinations.is
www.overcast.is
www.resourcepark.is
www.snjallraedi.is
www.vesturverk.is
www.volcanohuts.com
www.volcanotrails.com
www.xn--markaurinn-m9a.is
xn--markaurinn-m9a.is

Other certificates including the domain name overcast.io

(limited to 100 certificates)
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
sni.cloudflaressl.com
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
*.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
*.overcast.io
overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io

Certificate

The complete raw certificate details for overcast.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlUpus350Gl8UGwDfU+O
YBzvVdozQpSlSE/1ZvApYn4lsKVjQgKDrFemn+ui7NoKKoQDkOTb1xZ6DIchnCIS
tjAu8SYxxsCcE2zwRrjkZpf3ym0OgjQ3lzcls9HsH5ee1jVjkscrKSwr1WIleDmD
AmWjkiQQS0OkkSzEMQhC4gF3IuMYGOqUFLfHwWzRsDfasVTXs07z638o8JMPYTGO
4a/fv6tcAsT7dVnfurP56nDzIWm7dspuUhzpe17OmrkX1uQLZuwaciz9zcuWPn2C
UUnSt6S1BEa14xktN+uHA321z0vbB/h+kvuC3OBKH71AFZGYnSlNxpEUq+DUYumh
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304861786232223855733246345926884285504423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-02 09:32:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-31 09:32:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'overcast.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24027273387327736532660339257798860751953630978091358419459178602915137246375292681863917283035738986808573685398665171600805804317656307510738104543069932170058711324834497405012720227322586143865976376907640000865789300334488818173450583099562857945413862612116872951255365665618418139335139673067620303866721746149268603734400112787301116001219077968347354038685617435465236425928820472521728802283852942554571654681379930987239721219415549085339913879260211049047721411391389669359629473602227244819842511072065688759192755178485909613452945330423017345543834496479854100162800203450939936036497188047596718498291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d565fd26367c7b0ed850f28a118620ecff3b4c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '17.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akureyri.elding.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianz-tilbod.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianz-undirrita.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianz-web-test.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianz.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ams.hi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2017.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2018.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2019.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2019.icelandairgroup.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2014.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2015.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2015.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2016.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2016.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2019.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2019.brim.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2019.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2020.brim.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrslur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atvr.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audlindagardurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avislangtimaleiga.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitsportal.eurail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitsportal.eurailgroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bru.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr.sfs.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elding-ak.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elding-rvk.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurogym2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fia.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fridarsetur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka2018.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icelandair.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icelandsif.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innri.allianz.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjarninn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langtimaleigaavis.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leslistinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfb.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.buseti.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markadurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerndestinations.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pappir.allianz.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prufukerfi.allianz.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prufuundirrita.allianz.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcepark.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reykjavik.elding.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samfelag.sfs.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samfelagsskyrsla2017.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samfelagsskyrsla2018.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samfelagsskyrsla2019.brim.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skogarvegur.buseti.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snjallraedi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabilityreport2017.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabilityreport2018.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabilityreport2019.brim.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tilbod.allianz.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'undirrita.allianz.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesturverk.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volcanohuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volcanotrails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volcanotrails.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.17.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allianz.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arsskyrslur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audlindagardurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avislangtimaleiga.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eurogym2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fia.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fridarsetur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garri.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsorka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandsif.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjarninn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.langtimaleigaavis.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leslistinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lfb.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markadurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerndestinations.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resourcepark.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snjallraedi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vesturverk.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volcanohuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volcanotrails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--markaurinn-m9a.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--markaurinn-m9a.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017588841639000004030046304402201364ce7937d70d86a01d0728824c33b705ff93f466c1a10d9b81deb05df684e0022045a1993886848369e4b5ae80c6f543520a73b7b68d6b853298a1c5d5f64dec330076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001758884161600000403004730450220111474eb1df88849d8e72ca8b3d1795f93207b2d703d4b16d5f6ffd9d00a011f022100a5df648319b7232957f0cf927ef6de0942975ae62bf78d523dadfaa5171183cd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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