overcast.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:3c:39:48:9f:ae:ce:d1:53:ab:59:44:6a:7b:17:79:0c:70 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=overcast.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3c:39:48:9f:ae:ce:d1:53:ab:59:44:6a:7b:17:79:0c:70
Serial Number (int): 368942228822183683337377178042782430334064
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 76:45:35:59:8a:61:51:97:60:85:87:ee:da:17:9b:0a:5c:5a:fb:a0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 44:5f:ff:7d:a6:5b:9d:49:2f:21:71:4e:cc:34:0f:80:7f:83:1a:95
Fingerprint (sha256): a0:00:dc:68:ff:ff:fc:e3:69:35:5c:5d:dd:ad:96:73:70:3c:ab:83:28:0b:dd:92:94:2d:41:1e:1a:1a:df:22

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate overcast.io

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for overcast.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akureyri.elding.is
allianz-tilbod.overcast.is
allianz.overcast.is
annualreport2017.hsorka.is
annualreport2018.hsorka.is
arsskyrsla2014.hsorka.is
arsskyrsla2015.atvr.is
arsskyrsla2015.hsorka.is
arsskyrsla2016.atvr.is
arsskyrsla2016.hsorka.is
arsskyrsla2017.atvr.is
arsskyrsla2017.hbgrandi.is
arsskyrsla2017.hsorka.is
arsskyrsla2017.origo.is
arsskyrsla2018.atvr.is
arsskyrsla2018.hbgrandi.is
arsskyrsla2018.hsorka.is
arsskyrsla2018.origo.is
arsskyrslur.is
atvr.overcast.is
atvr2017.overcast.is
audlindagardurinn.is
avis.overcast.is
avislangtimaleiga.is
benefitsportal.eurailgroup.org
brim.overcast.is
brimsamfelag.overcast.is
bru.hsorka.is
elding-ak.overcast.is
elding-rvk.overcast.is
eurogym2020.com
fia.is
fridarsetur.is
garri-prod.overcast.is
gestur.is
gjoridsvovel.is
hhiweb.overcast.is
hsorka.com
hsorka.is
hsorka2018.overcast.is
hsoverkefni.overcast.is
icelandsif.is
kjarninn.is
langtimaleigaavis.is
leslistinn.is
lfb.is
login.buseti.is
markadurinn.is
northerndestinations.is
overcast.io
overcast.is
prufukerfi.allianz.is
resourcepark.is
reykjavik.elding.is
samfelagsskyrsla2017.hbgrandi.is
samfelagsskyrsla2018.hbgrandi.is
si.overcast.is
skogarvegur.buseti.is
snjallraedi.is
sustainabilityreport2017.hbgrandi.is
sustainabilityreport2018.hbgrandi.is
tilbod.allianz.is
vesturverk.is
vesturverk.overcast.is
volcanotrails.overcast.is
www.arsskyrslur.is
www.audlindagardurinn.is
www.avislangtimaleiga.is
www.eurogym2020.com
www.fia.is
www.fridarsetur.is
www.garri.is
www.gestur.is
www.hsorka.com
www.hsorka.is
www.icelandsif.is
www.kjarninn.is
www.langtimaleigaavis.is
www.leslistinn.is
www.lfb.is
www.markadurinn.is
www.northerndestinations.is
www.overcast.is
www.resourcepark.is
www.snjallraedi.is
www.vesturverk.is
www.xn--markaurinn-m9a.is
xn--gjrisvovel-l9a3e.is
xn--markaurinn-m9a.is

Other certificates including the domain name overcast.io

(limited to 100 certificates)
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
sni.cloudflaressl.com
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
*.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
*.overcast.io
overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io

Certificate

The complete raw certificate details for overcast.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV/frRWZRBlZqp9acK0b
rLA53MNjfOdAQpbr0bh3CBLdm9NLoTZ6lAfsEjS9F9nsNEKjIK9JiJgLfREtL3Ai
FY2tJ3bWntI6Gcoi8VDvJhzh2EOusNAxsouA3ZcHMy5kpjgqiFcPkWePK/x3rAoh
5HiS7g0We7NcWQkRAGwFwE0PE209Wm6uXShdp7xd1BWDPfZIqKgHicQPo6pc8dCh
ZYQutZKNr7ejuHKsD6Zme+I4+3LZtNOHmht+SxAZZ72u7lEBLUnmHIve4kbZ9o65
D1xYTLUlty3at/H8LlEh7SZ1qHGT5zTqoLJgvoB3ZUfSKpzD8g9fMVYbwpZDX9ej
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368942228822183683337377178042782430334064
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 10:25:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 10:25:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'overcast.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23401363519396288460149879588333253372803235645436181776500734534981587197052598617137423825314622922518562451526770562238641734983609670671578560005864810285084640493448315250670505065132140267362016782120992601503346471706234812468355333234558013531204593341788235376100541636543182609852083942691958812301801668167454689105768605255211497791162471763256623690530886748436083310465011728759709385875612359221234160310210850671887794632223654074334853750891366581473482897046263249335475167118571285770185751202857067390843387022050096270949790431279558631460260148375934717682865319966357518286918349134264836531057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							764535598a615197608587eeda179b0a5c5afba0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1883 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akureyri.elding.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianz-tilbod.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianz.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2017.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2018.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2014.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2015.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2015.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2016.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2016.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.origo.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.origo.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrslur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atvr.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atvr2017.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audlindagardurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avis.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avislangtimaleiga.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitsportal.eurailgroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brim.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brimsamfelag.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bru.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elding-ak.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elding-rvk.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurogym2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fia.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fridarsetur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garri-prod.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gjoridsvovel.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhiweb.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka2018.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsoverkefni.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icelandsif.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjarninn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langtimaleigaavis.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leslistinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfb.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.buseti.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markadurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerndestinations.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prufukerfi.allianz.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcepark.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reykjavik.elding.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samfelagsskyrsla2017.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samfelagsskyrsla2018.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skogarvegur.buseti.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snjallraedi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabilityreport2017.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabilityreport2018.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tilbod.allianz.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesturverk.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesturverk.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volcanotrails.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arsskyrslur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audlindagardurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avislangtimaleiga.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eurogym2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fia.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fridarsetur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garri.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gestur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsorka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandsif.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjarninn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.langtimaleigaavis.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leslistinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lfb.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markadurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerndestinations.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resourcepark.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snjallraedi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vesturverk.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--markaurinn-m9a.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gjrisvovel-l9a3e.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--markaurinn-m9a.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f8a0d48c50000040300463044022077bd2f454baa6cc7bd1cdbc47ff3015c68b6fb703870185f0714144aebe01415022064a491cf219e859c8bdb865b4584692bd0d47c81baccdc1eceb35e7ff53a1709007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f8a0d48c50000040300463044022001fd7f7c18dcf37dda6d98825ac43983f5c6b700bbf0612b6997747646e108e902203d9929454674445b96b8205bdd55708ec6ed68b3b0a543519f8e5138d8dcfe74
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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