overcast.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:29:5a:7e:37:8b:4a:ac:68:b7:38:09:54:dc:80:fb:15:fb was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=overcast.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:29:5a:7e:37:8b:4a:ac:68:b7:38:09:54:dc:80:fb:15:fb
Serial Number (int): 275408720714632387869510870619947206907387
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5e:b0:d7:d8:47:79:12:f0:ae:0b:10:0c:12:80:fc:42:83:e6:2e:92
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 54:ec:a0:bc:f7:64:96:1e:5b:91:9e:89:1a:dc:b6:3d:19:94:c7:0c
Fingerprint (sha256): 9c:33:64:1c:aa:b7:9a:bb:74:bd:86:d5:84:56:f5:84:36:6d:25:c5:1f:53:aa:78:48:97:ef:4b:5a:eb:30:37

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate overcast.io

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for overcast.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

17.is
akureyri.elding.is
allianz-tilbod.overcast.is
allianz-web-prod.overcast.is
allianz-web.overcast.is
allianz.overcast.is
annualreport2017.hsorka.is
annualreport2018.hsorka.is
arsskyrsla2014.hsorka.is
arsskyrsla2015.atvr.is
arsskyrsla2015.hsorka.is
arsskyrsla2016.atvr.is
arsskyrsla2016.hsorka.is
arsskyrsla2017.atvr.is
arsskyrsla2017.hbgrandi.is
arsskyrsla2017.hsorka.is
arsskyrsla2017.origo.is
arsskyrsla2018.atvr.is
arsskyrsla2018.hbgrandi.is
arsskyrsla2018.hsorka.is
arsskyrsla2018.origo.is
arsskyrslur.is
atvr.overcast.is
atvr2017.overcast.is
audlindagardurinn.is
avis.overcast.is
avislangtimaleiga.is
benefitsportal.eurail.com
benefitsportal.eurailgroup.org
brim.overcast.is
brimsamfelag.overcast.is
bru.hsorka.is
elding-ak.overcast.is
elding-rvk.overcast.is
eurogym2020.com
fia.is
fridarsetur.is
garri-prod.overcast.is
gestur.is
gjoridsvovel.is
hhiweb.overcast.is
hsorka.com
hsorka.is
hsorka2018.overcast.is
hsoverkefni.overcast.is
icelandair.overcast.is
icelandsif.is
kjarninn.is
langtimaleigaavis.is
leslistinn.is
lfb.is
login.buseti.is
markadurinn.is
northerndestinations.is
overcast.io
overcast.is
prufukerfi.allianz.is
resourcepark.is
reykjavik.elding.is
samfelagsskyrsla2017.hbgrandi.is
samfelagsskyrsla2018.hbgrandi.is
si.overcast.is
skogarvegur.buseti.is
snjallraedi.is
sustainabilityreport2017.hbgrandi.is
sustainabilityreport2018.hbgrandi.is
tilbod.allianz.is
vesturverk.is
vesturverk.overcast.is
volcanotrails.overcast.is
www.17.is
www.arsskyrslur.is
www.audlindagardurinn.is
www.avislangtimaleiga.is
www.eurogym2020.com
www.fia.is
www.fridarsetur.is
www.garri.is
www.gestur.is
www.hsorka.com
www.hsorka.is
www.icelandsif.is
www.kjarninn.is
www.langtimaleigaavis.is
www.leslistinn.is
www.lfb.is
www.markadurinn.is
www.northerndestinations.is
www.overcast.is
www.resourcepark.is
www.snjallraedi.is
www.vesturverk.is
www.xn--markaurinn-m9a.is
xn--gjrisvovel-l9a3e.is
xn--markaurinn-m9a.is

Other certificates including the domain name overcast.io

(limited to 100 certificates)
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
sni.cloudflaressl.com
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
*.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
*.overcast.io
overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io

Certificate

The complete raw certificate details for overcast.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPDuHQ84inMRkeKThXdj
IGJtWpW7Lm8sxOGa90LcIR+1NYWi8JOApAF75BYS53B0ROPp/YzT4LS85m9t6rqo
jcTVolVfjS+FZTAqkNb/0MWIs2Y22lGlYwmejD+dx6LJ0MKmSqjChGWuWxANpodd
7IdEYQ8ItbFVUzMGR+4w+1VjVS6ZqW74GriveydIWOxqnKFU59D0mtXpD6XhwVqj
NdJIHwKpDFuzw6gr/l5pUUoKQABkiJcTUxJxeVOpQja0T+dWelroP+vV29P1Se8C
ye/mVzmYnK9xq9yZUebZDEJURlGtisGKP5PkRg9JHP6f3Ss6xfE6IIKoRK1UAf5o
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275408720714632387869510870619947206907387
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 15:53:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 15:53:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'overcast.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19307029430394020910064155082188816340009651451372355760956912991440894390837547752976223277322446037691771029894304043217641846839515165354721697753181505746826403645627283365464486324025375642434886840125190183945638693848165103062109161231302494641227008448614563594102370822111550795265757752458704987697558534070298461029210580162533389669376608198420111583157893466991890923599870959388417019365426779097837940939891810343024518709979595199736363688141702752581495605231767262107658732715238649093605987839763037928057116393841298168227862093376250944200129103764732010728819606676741035523106196973648395266291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5eb0d7d8477912f0ae0b100c1280fc4283e62e92
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2007 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '17.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akureyri.elding.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianz-tilbod.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianz-web-prod.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianz-web.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianz.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2017.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2018.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2014.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2015.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2015.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2016.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2016.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.origo.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.origo.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrslur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atvr.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atvr2017.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audlindagardurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avis.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avislangtimaleiga.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitsportal.eurail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitsportal.eurailgroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brim.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brimsamfelag.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bru.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elding-ak.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elding-rvk.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurogym2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fia.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fridarsetur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garri-prod.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gjoridsvovel.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhiweb.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka2018.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsoverkefni.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icelandair.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icelandsif.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjarninn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langtimaleigaavis.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leslistinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfb.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.buseti.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markadurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerndestinations.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prufukerfi.allianz.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcepark.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reykjavik.elding.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samfelagsskyrsla2017.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samfelagsskyrsla2018.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skogarvegur.buseti.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snjallraedi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabilityreport2017.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabilityreport2018.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tilbod.allianz.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesturverk.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesturverk.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volcanotrails.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.17.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arsskyrslur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audlindagardurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avislangtimaleiga.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eurogym2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fia.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fridarsetur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garri.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gestur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsorka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandsif.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjarninn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.langtimaleigaavis.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leslistinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lfb.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markadurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerndestinations.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resourcepark.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snjallraedi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vesturverk.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--markaurinn-m9a.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gjrisvovel-l9a3e.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--markaurinn-m9a.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170a15129b40000040300483046022100c8141813505cdc4b9ed9af6a405874b66cab3c362bdeba90677c703361c5d56f022100fe8de04a17b33e6df478d14dfde18a16e39e0fc26a3bb08edec899865634066e00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a15129fa0000040300483046022100eb7d454b594d2ef95d6be5af1a326639e642a8801ddd0937d11729461345e4f6022100ea488e73d4875d3c22582ce303baae0eb599e2e4e449be4cb4a8c8023577a8df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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