broaddy.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0b:f0:9e:39:b0:44:cc:b7:8d:ba:ec:94:2e:3d:5f:0b:85 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=broaddy.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0b:f0:9e:39:b0:44:cc:b7:8d:ba:ec:94:2e:3d:5f:0b:85
Serial Number (int): 265399800103365887829229357715766718172037
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:50:f5:83:bc:d9:30:73:80:b8:01:b5:b4:cb:36:cc:75:fe:ee:17
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 40:e0:36:75:a9:d7:b9:59:37:0a:58:fc:69:f1:88:d3:1c:c9:8b:01
Fingerprint (sha256): a5:07:7e:5e:dc:94:ce:a3:1d:6c:33:1d:4e:67:e8:76:95:b7:84:fe:42:f3:be:70:dc:a4:16:c6:00:b6:76:64

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate broaddy.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for broaddy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agder.broaddy.com
broaddy.com
buddynetwork-salzburg.broaddy.com
cuni.broaddy.com
czv.broaddy.com
demo.broaddy.com
esci-upf.broaddy.com
esn-rijeka.broaddy.com
esnauth.broaddy.com
esnbarcelonaub.broaddy.com
esnbergen.broaddy.com
esncorvinus.broaddy.com
esneu.broaddy.com
esnhaderslev.broaddy.com
esnhamburg.broaddy.com
esnhsemsk.broaddy.com
esnism.broaddy.com
esnminho.broaddy.com
esnpardubice.broaddy.com
esnpcz.broaddy.com
esnpd.broaddy.com
esnsghwarsaw.broaddy.com
esnspb.broaddy.com
esnsplit.broaddy.com
esntut.broaddy.com
esnuct.broaddy.com
esnupc.broaddy.com
esnzadar.broaddy.com
esnzagreb.broaddy.com
explore.broaddy.com
liberec.broaddy.com
rc.broaddy.com
studyatswps.broaddy.com
swps.broaddy.com
umprum.broaddy.com
unicatt.broaddy.com
unilu.broaddy.com
univ.grenoblealpes.a.broaddy.com
univ.grenoblealpes.broaddy.com
upol.broaddy.com
uskatowice.broaddy.com
utb.broaddy.com
vistula.broaddy.com
vsh.broaddy.com
wiki.broaddy.com
www.agder.broaddy.com
www.broaddy.com
www.buddynetwork-salzburg.broaddy.com
www.cuni.broaddy.com
www.czv.broaddy.com
www.demo.broaddy.com
www.esci-upf.broaddy.com
www.esn-rijeka.broaddy.com
www.esnauth.broaddy.com
www.esnbarcelonaub.broaddy.com
www.esnbergen.broaddy.com
www.esncorvinus.broaddy.com
www.esneu.broaddy.com
www.esnhaderslev.broaddy.com
www.esnhamburg.broaddy.com
www.esnhsemsk.broaddy.com
www.esnism.broaddy.com
www.esnminho.broaddy.com
www.esnpardubice.broaddy.com
www.esnpcz.broaddy.com
www.esnpd.broaddy.com
www.esnsghwarsaw.broaddy.com
www.esnspb.broaddy.com
www.esnsplit.broaddy.com
www.esntut.broaddy.com
www.esnuct.broaddy.com
www.esnupc.broaddy.com
www.esnzadar.broaddy.com
www.esnzagreb.broaddy.com
www.explore.broaddy.com
www.liberec.broaddy.com
www.rc.broaddy.com
www.studyatswps.broaddy.com
www.swps.broaddy.com
www.umprum.broaddy.com
www.unicatt.broaddy.com
www.unilu.broaddy.com
www.univ.grenoblealpes.a.broaddy.com
www.univ.grenoblealpes.broaddy.com
www.upol.broaddy.com
www.uskatowice.broaddy.com
www.utb.broaddy.com
www.vistula.broaddy.com
www.vsh.broaddy.com
www.wiki.broaddy.com

Other certificates including the domain name broaddy.com

(limited to 100 certificates)
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
*.broaddy.com
broaddy.com
czv.broaddy.com
app.broaddy.com
www.madamemargohairdesign.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
recipebox.gummi.site
broaddy.com
aws.broaddy.com
rcmavalet.com
www.en-gager.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
czv.broaddy.com
czv.broaddy.com
broaddy.com
broaddy.com
get.colorain.app
broaddy.com
broaddy.com
demo.broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
samyuktha.live
broaddy.com
broaddy.com
broaddy.com
aws.broaddy.com
iteration-demo.carto.solutions
soflime.in
broaddy.com
rcmavalet.com
broaddy.com
www.bingo.aratiendas.com

Certificate

The complete raw certificate details for broaddy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINnTCCDIWgAwIBAgISAwvwnjmwRMy3jbrslC49XwuFMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MTAxMzM0NDBaFw0x
OTA5MDgxMzM0NDBaMBYxFDASBgNVBAMTC2Jyb2FkZHkuY29tMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+byHG1lBJvfddPCvY6y+YB/sbE8BPy0f0TE1
20yRNwtH31gQ0e1HT2uCuF7NJYX64yHa5yGkHnjWZLugKIY92CktD4xelxryCtoh
MAUSweNjhgbchlh9yDdUQA3CJs0otoUtLKL2p3BQJSoZi01KE66ICHx7Nj78o7jL
LZ9qt3q7gPR0muWDB2THMF/o7U2IlebPhsWSbENhW+nx90Ys2F8vCqlcuGp1xgOH
LrEB7M+qxifoSxl8squ0z9AlKMDncClN/DOxKFCM6V4RX4GZlhCQNCBVsgVrooAO
B7EWR0MxsuBDTlpsrC+Lsb2RmuG3Il1KZDW+c5zxN7sUGzfvVQIDAQABo4IKrzCC
CqswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS0UPWDvNkwc4C4AbW0yzbMdf7uFzAf
BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw
LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw
LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv
MIIIYwYDVR0RBIIIWjCCCFaCEWFnZGVyLmJyb2FkZHkuY29tggticm9hZGR5LmNv
bYIhYnVkZHluZXR3b3JrLXNhbHpidXJnLmJyb2FkZHkuY29tghBjdW5pLmJyb2Fk
ZHkuY29tgg9jenYuYnJvYWRkeS5jb22CEGRlbW8uYnJvYWRkeS5jb22CFGVzY2kt
dXBmLmJyb2FkZHkuY29tghZlc24tcmlqZWthLmJyb2FkZHkuY29tghNlc25hdXRo
LmJyb2FkZHkuY29tghplc25iYXJjZWxvbmF1Yi5icm9hZGR5LmNvbYIVZXNuYmVy
Z2VuLmJyb2FkZHkuY29tghdlc25jb3J2aW51cy5icm9hZGR5LmNvbYIRZXNuZXUu
YnJvYWRkeS5jb22CGGVzbmhhZGVyc2xldi5icm9hZGR5LmNvbYIWZXNuaGFtYnVy
Zy5icm9hZGR5LmNvbYIVZXNuaHNlbXNrLmJyb2FkZHkuY29tghJlc25pc20uYnJv
YWRkeS5jb22CFGVzbm1pbmhvLmJyb2FkZHkuY29tghhlc25wYXJkdWJpY2UuYnJv
YWRkeS5jb22CEmVzbnBjei5icm9hZGR5LmNvbYIRZXNucGQuYnJvYWRkeS5jb22C
GGVzbnNnaHdhcnNhdy5icm9hZGR5LmNvbYISZXNuc3BiLmJyb2FkZHkuY29tghRl
c25zcGxpdC5icm9hZGR5LmNvbYISZXNudHV0LmJyb2FkZHkuY29tghJlc251Y3Qu
YnJvYWRkeS5jb22CEmVzbnVwYy5icm9hZGR5LmNvbYIUZXNuemFkYXIuYnJvYWRk
eS5jb22CFWVzbnphZ3JlYi5icm9hZGR5LmNvbYITZXhwbG9yZS5icm9hZGR5LmNv
bYITbGliZXJlYy5icm9hZGR5LmNvbYIOcmMuYnJvYWRkeS5jb22CF3N0dWR5YXRz
d3BzLmJyb2FkZHkuY29tghBzd3BzLmJyb2FkZHkuY29tghJ1bXBydW0uYnJvYWRk
eS5jb22CE3VuaWNhdHQuYnJvYWRkeS5jb22CEXVuaWx1LmJyb2FkZHkuY29tgiB1
bml2LmdyZW5vYmxlYWxwZXMuYS5icm9hZGR5LmNvbYIedW5pdi5ncmVub2JsZWFs
cGVzLmJyb2FkZHkuY29tghB1cG9sLmJyb2FkZHkuY29tghZ1c2thdG93aWNlLmJy
b2FkZHkuY29tgg91dGIuYnJvYWRkeS5jb22CE3Zpc3R1bGEuYnJvYWRkeS5jb22C
D3ZzaC5icm9hZGR5LmNvbYIQd2lraS5icm9hZGR5LmNvbYIVd3d3LmFnZGVyLmJy
b2FkZHkuY29tgg93d3cuYnJvYWRkeS5jb22CJXd3dy5idWRkeW5ldHdvcmstc2Fs
emJ1cmcuYnJvYWRkeS5jb22CFHd3dy5jdW5pLmJyb2FkZHkuY29tghN3d3cuY3p2
LmJyb2FkZHkuY29tghR3d3cuZGVtby5icm9hZGR5LmNvbYIYd3d3LmVzY2ktdXBm
LmJyb2FkZHkuY29tghp3d3cuZXNuLXJpamVrYS5icm9hZGR5LmNvbYIXd3d3LmVz
bmF1dGguYnJvYWRkeS5jb22CHnd3dy5lc25iYXJjZWxvbmF1Yi5icm9hZGR5LmNv
bYIZd3d3LmVzbmJlcmdlbi5icm9hZGR5LmNvbYIbd3d3LmVzbmNvcnZpbnVzLmJy
b2FkZHkuY29tghV3d3cuZXNuZXUuYnJvYWRkeS5jb22CHHd3dy5lc25oYWRlcnNs
ZXYuYnJvYWRkeS5jb22CGnd3dy5lc25oYW1idXJnLmJyb2FkZHkuY29tghl3d3cu
ZXNuaHNlbXNrLmJyb2FkZHkuY29tghZ3d3cuZXNuaXNtLmJyb2FkZHkuY29tghh3
d3cuZXNubWluaG8uYnJvYWRkeS5jb22CHHd3dy5lc25wYXJkdWJpY2UuYnJvYWRk
eS5jb22CFnd3dy5lc25wY3ouYnJvYWRkeS5jb22CFXd3dy5lc25wZC5icm9hZGR5
LmNvbYIcd3d3LmVzbnNnaHdhcnNhdy5icm9hZGR5LmNvbYIWd3d3LmVzbnNwYi5i
cm9hZGR5LmNvbYIYd3d3LmVzbnNwbGl0LmJyb2FkZHkuY29tghZ3d3cuZXNudHV0
LmJyb2FkZHkuY29tghZ3d3cuZXNudWN0LmJyb2FkZHkuY29tghZ3d3cuZXNudXBj
LmJyb2FkZHkuY29tghh3d3cuZXNuemFkYXIuYnJvYWRkeS5jb22CGXd3dy5lc256
YWdyZWIuYnJvYWRkeS5jb22CF3d3dy5leHBsb3JlLmJyb2FkZHkuY29tghd3d3cu
bGliZXJlYy5icm9hZGR5LmNvbYISd3d3LnJjLmJyb2FkZHkuY29tght3d3cuc3R1
ZHlhdHN3cHMuYnJvYWRkeS5jb22CFHd3dy5zd3BzLmJyb2FkZHkuY29tghZ3d3cu
dW1wcnVtLmJyb2FkZHkuY29tghd3d3cudW5pY2F0dC5icm9hZGR5LmNvbYIVd3d3
LnVuaWx1LmJyb2FkZHkuY29tgiR3d3cudW5pdi5ncmVub2JsZWFscGVzLmEuYnJv
YWRkeS5jb22CInd3dy51bml2LmdyZW5vYmxlYWxwZXMuYnJvYWRkeS5jb22CFHd3
dy51cG9sLmJyb2FkZHkuY29tghp3d3cudXNrYXRvd2ljZS5icm9hZGR5LmNvbYIT
d3d3LnV0Yi5icm9hZGR5LmNvbYIXd3d3LnZpc3R1bGEuYnJvYWRkeS5jb22CE3d3
dy52c2guYnJvYWRkeS5jb22CFHd3dy53aWtpLmJyb2FkZHkuY29tMEwGA1UdIARF
MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6
Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA
dH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFrQdAIEQAABAMARzBF
AiEAnjkVWjVYCNCqbimw4pfGCDkOwYhhitb04pCAgjpBdykCIGtkOE/omr0VSXID
pouygXThDViaXZ58RQZ4B5jfHWbdAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctyk
wwz05UVH9HgAAAFrQdAH/wAABAMARzBFAiAWA+TN6sbx6MFuPR4KNb6NTciGN9NO
vG3M8DtG9QY9dgIhAKxK9MfrhEI0XpVmgvTxdy7YCO8NqeST4NUPv/DCTVzMMA0G
CSqGSIb3DQEBCwUAA4IBAQAO84rrpplNBvANMbyxbn8RKDZRSSAifibjtZsmEGCf
5uyoxikiyXCiHg6uuwXtRJ6goW6PkLQUR8UQX8W4bWNkgQy+O9jioKudSlYVVK9j
QYaQX4Ci9CHdjzDJve83Wnl6KuXBB8fVbFdPpj6/IKkmO+REMTjWPe3SVJeR0L12
Ne6OoJmewy+kmVPryJtBlqmLao4acIm7omELfit6EOv5tB2pJy07z+tueV8VwWgR
KWw2BtN9eG5IlxbXLtd9n8s6JDPREN+tlHrTiFesvT6DjK/pOzDqXVVei+ZQQ//5
hidT0i9Zp6LgQhKB1CmPSvNaFUYMjDXnVwdD995m5DNr
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+byHG1lBJvfddPCvY6y+
YB/sbE8BPy0f0TE120yRNwtH31gQ0e1HT2uCuF7NJYX64yHa5yGkHnjWZLugKIY9
2CktD4xelxryCtohMAUSweNjhgbchlh9yDdUQA3CJs0otoUtLKL2p3BQJSoZi01K
E66ICHx7Nj78o7jLLZ9qt3q7gPR0muWDB2THMF/o7U2IlebPhsWSbENhW+nx90Ys
2F8vCqlcuGp1xgOHLrEB7M+qxifoSxl8squ0z9AlKMDncClN/DOxKFCM6V4RX4GZ
lhCQNCBVsgVrooAOB7EWR0MxsuBDTlpsrC+Lsb2RmuG3Il1KZDW+c5zxN7sUGzfv
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265399800103365887829229357715766718172037
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-10 13:34:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-08 13:34:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'broaddy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31526304440434995736520730968418857543026262668802249189997348691417425662609180474716671686407790527428064376085159733553118315373913974151375545199388175334847253761741245432977303526687492923247862228559919108439203811031420604873709204760705202788581220864758867749489301320460998229794632524176088722910898529029018492863428338617800979174864166673305580516507687206061291278773177080155984802918494320538698885407351596968689702253135418180764097209769414217859448653253021496243014069163954323071745814039169602484780013473602029208424574036055330564786484115971622961337834400191630065229718143491721674616661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b450f583bcd9307380b801b5b4cb36cc75feee17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2138 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agder.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddynetwork-salzburg.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuni.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czv.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esci-upf.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esn-rijeka.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnauth.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnbarcelonaub.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnbergen.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esncorvinus.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esneu.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnhaderslev.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnhamburg.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnhsemsk.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnism.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnminho.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnpardubice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnpcz.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnpd.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnsghwarsaw.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnspb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnsplit.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esntut.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnuct.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnupc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnzadar.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnzagreb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberec.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studyatswps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umprum.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unicatt.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unilu.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'univ.grenoblealpes.a.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'univ.grenoblealpes.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upol.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uskatowice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistula.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vsh.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agder.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buddynetwork-salzburg.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuni.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.czv.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demo.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esci-upf.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esn-rijeka.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnauth.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnbarcelonaub.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnbergen.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esncorvinus.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esneu.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnhaderslev.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnhamburg.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnhsemsk.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnism.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnminho.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnpardubice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnpcz.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnpd.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnsghwarsaw.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnspb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnsplit.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esntut.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnuct.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnupc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnzadar.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnzagreb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explore.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberec.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studyatswps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umprum.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unicatt.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unilu.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.univ.grenoblealpes.a.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.univ.grenoblealpes.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upol.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uskatowice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vistula.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vsh.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiki.broaddy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b41d0081100000403004730450221009e39155a355808d0aa6e29b0e297c608390ec188618ad6f4e29080823a41772902206b64384fe89abd15497203a68bb28174e10d589a5d9e7c4506780798df1d66dd007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b41d007ff000004030047304502201603e4cdeac6f1e8c16e3d1e0a35be8d4dc88637d34ebc6dccf03b46f5063d76022100ac4af4c7eb8442345e956682f4f1772ed808ef0da9e493e0d50fbff0c24d5ccc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000ef38aeba6994d06f00d31bcb16e7f112836514920227e26e3b59b2610609fe6eca8c62922c970a21e0eaebb05ed449ea0a16e8f90b41447c5105fc5b86d6364810cbe3bd8e2a0ab9d4a561554af634186905f80a2f421dd8f30c9bdef375a797a2ae5c107c7d56c574fa63ebf20a9263be4443138d63dedd2549791d0bd7635ee8ea0999ec32fa49953ebc89b4196a98b6a8e1a7089bba2610b7e2b7a10ebf9b41da9272d3bcfeb6e795f15c16811296c3606d37d786e489716d72ed77d9fcb3a2433d110dfad947ad38857acbd3e838cafe93b30ea5d555e8be65043fff9862753d22f59a7a2e0421281d4298f4af35a15460c8c35e7570743f7de66e4336b