www.overcast.io
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:76:70:4a:67:4d:bc:91:d2:4a:46:00:04:bd:9e:96:fc:e9 was issued on by Let's Encrypt.
With 67 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.overcast.io
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:76:70:4a:67:4d:bc:91:d2:4a:46:00:04:bd:9e:96:fc:e9Serial Number (int): 301639436952694037942437368988321866775785
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ae:1f:e0:f6:af:ae:1a:38:b2:44:01:09:dd:e8:60:79:f8:ab:4c:7a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 96:95:65:bb:19:81:d0:f3:4a:f7:9a:8f:1d:f5:59:f5:bd:38:65:70
Fingerprint (sha256): ab:5a:4a:b9:4c:f4:61:67:54:1a:10:3f:76:9d:42:2c:80:92:5a:b4:dd:65:b4:61:bc:c3:a7:eb:ab:56:0b:bf
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.overcast.io
67
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.overcast.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
akureyri.elding.is
annualreport2017.hsorka.is
annualreport2018.hsorka.is
arsskyrsla2014.hsorka.is
arsskyrsla2015.atvr.is
arsskyrsla2015.hsorka.is
arsskyrsla2016.atvr.is
arsskyrsla2016.hsorka.is
arsskyrsla2017.atvr.is
arsskyrsla2017.hbgrandi.is
arsskyrsla2017.hsorka.is
arsskyrsla2018.hsorka.is
arsskyrslur.is
atvr.overcast.is
atvr2017.overcast.is
audlindagardurinn.is
benefitsportal.eurailgroup.org
bru.hsorka.is
elding-ak.overcast.is
elding-rvk.overcast.is
fia.is
fridarsetur.is
garri.is
gestur.is
gjoridsvovel.is
hbgrandi.overcast.is
hbgsamfelag2018.overcast.is
hhiweb.overcast.is
hsorka.is
hsorka2018.overcast.is
hsoverkefni.overcast.is
icelandsif.is
kjarninn.is
leslistinn.is
lfb.is
markadurinn.is
origo2018.overcast.is
overcast.io
overcast.is
resourcepark.is
reykjavik.elding.is
samfelagsskyrsla2017.hbgrandi.is
si.overcast.is
snjallraedi.is
sustainabilityreport2017.hbgrandi.is
vesturverk.is
vesturverk.overcast.is
www.arsskyrslur.is
www.audlindagardurinn.is
www.fia.is
www.fridarsetur.is
www.garri.is
www.gestur.is
www.hsorka.is
www.icelandsif.is
www.kjarninn.is
www.leslistinn.is
www.lfb.is
www.markadurinn.is
www.overcast.io
www.overcast.is
www.resourcepark.is
www.snjallraedi.is
www.vesturverk.is
www.xn--markaurinn-m9a.is
xn--gjrisvovel-l9a3e.is
xn--markaurinn-m9a.is
annualreport2017.hsorka.is
annualreport2018.hsorka.is
arsskyrsla2014.hsorka.is
arsskyrsla2015.atvr.is
arsskyrsla2015.hsorka.is
arsskyrsla2016.atvr.is
arsskyrsla2016.hsorka.is
arsskyrsla2017.atvr.is
arsskyrsla2017.hbgrandi.is
arsskyrsla2017.hsorka.is
arsskyrsla2018.hsorka.is
arsskyrslur.is
atvr.overcast.is
atvr2017.overcast.is
audlindagardurinn.is
benefitsportal.eurailgroup.org
bru.hsorka.is
elding-ak.overcast.is
elding-rvk.overcast.is
fia.is
fridarsetur.is
garri.is
gestur.is
gjoridsvovel.is
hbgrandi.overcast.is
hbgsamfelag2018.overcast.is
hhiweb.overcast.is
hsorka.is
hsorka2018.overcast.is
hsoverkefni.overcast.is
icelandsif.is
kjarninn.is
leslistinn.is
lfb.is
markadurinn.is
origo2018.overcast.is
overcast.io
overcast.is
resourcepark.is
reykjavik.elding.is
samfelagsskyrsla2017.hbgrandi.is
si.overcast.is
snjallraedi.is
sustainabilityreport2017.hbgrandi.is
vesturverk.is
vesturverk.overcast.is
www.arsskyrslur.is
www.audlindagardurinn.is
www.fia.is
www.fridarsetur.is
www.garri.is
www.gestur.is
www.hsorka.is
www.icelandsif.is
www.kjarninn.is
www.leslistinn.is
www.lfb.is
www.markadurinn.is
www.overcast.io
www.overcast.is
www.resourcepark.is
www.snjallraedi.is
www.vesturverk.is
www.xn--markaurinn-m9a.is
xn--gjrisvovel-l9a3e.is
xn--markaurinn-m9a.is
Other certificates including the domain name overcast.io
(limited to 100 certificates)
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
sni.cloudflaressl.com
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
*.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
*.overcast.io
overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
sni.cloudflaressl.com
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
*.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
*.overcast.io
overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
Certificate
The complete raw certificate details for www.overcast.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKjjCCCXagAwIBAgISA3ZwSmdNvJHSSkYABL2elvzpMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMTMxMDU5MzJaFw0x OTA2MTExMDU5MzJaMBoxGDAWBgNVBAMTD3d3dy5vdmVyY2FzdC5pbzCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAN2vuoScjAaezejaOAqWdMDkyfVJwdP+ B+EK4gYWDYFdIALJ+Xd06GM/2/bfHox75zPV8eeY8r9NqSrRg6K3kHuHWDXwyiAA 7yspVJ7mmUEO3TDY86LDPxfb6pC29Igj561APUFEweVDx2GiWlWcQ7LeEnvBX2Fm Dt3e2rVA9AJN+QEDOBSZkLFVHCPHBOPj+uY3ThkOP3Wh+JhSkHZmMgrJGxBW1nbB jiSo5aMq2xRxkOGSfi6vJF35FgJ9OzBXQKXsmDwcDiejXwkHSfS22MaZTGXhH2vH kpV+g5ZzOuMLQPvgvduRyA8noyIj0c8GiNdje2MN5EmpciLuHAznDcMCAwEAAaOC B5wwggeYMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUrh/g9q+uGjiyRAEJ3ehgefir THowHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu b3JnLzCCBU8GA1UdEQSCBUYwggVCghJha3VyZXlyaS5lbGRpbmcuaXOCGmFubnVh bHJlcG9ydDIwMTcuaHNvcmthLmlzghphbm51YWxyZXBvcnQyMDE4Lmhzb3JrYS5p c4IYYXJzc2t5cnNsYTIwMTQuaHNvcmthLmlzghZhcnNza3lyc2xhMjAxNS5hdHZy LmlzghhhcnNza3lyc2xhMjAxNS5oc29ya2EuaXOCFmFyc3NreXJzbGEyMDE2LmF0 dnIuaXOCGGFyc3NreXJzbGEyMDE2Lmhzb3JrYS5pc4IWYXJzc2t5cnNsYTIwMTcu YXR2ci5pc4IaYXJzc2t5cnNsYTIwMTcuaGJncmFuZGkuaXOCGGFyc3NreXJzbGEy MDE3Lmhzb3JrYS5pc4IYYXJzc2t5cnNsYTIwMTguaHNvcmthLmlzgg5hcnNza3ly c2x1ci5pc4IQYXR2ci5vdmVyY2FzdC5pc4IUYXR2cjIwMTcub3ZlcmNhc3QuaXOC FGF1ZGxpbmRhZ2FyZHVyaW5uLmlzgh5iZW5lZml0c3BvcnRhbC5ldXJhaWxncm91 cC5vcmeCDWJydS5oc29ya2EuaXOCFWVsZGluZy1hay5vdmVyY2FzdC5pc4IWZWxk aW5nLXJ2ay5vdmVyY2FzdC5pc4IGZmlhLmlzgg5mcmlkYXJzZXR1ci5pc4IIZ2Fy cmkuaXOCCWdlc3R1ci5pc4IPZ2pvcmlkc3ZvdmVsLmlzghRoYmdyYW5kaS5vdmVy Y2FzdC5pc4IbaGJnc2FtZmVsYWcyMDE4Lm92ZXJjYXN0LmlzghJoaGl3ZWIub3Zl cmNhc3QuaXOCCWhzb3JrYS5pc4IWaHNvcmthMjAxOC5vdmVyY2FzdC5pc4IXaHNv dmVya2Vmbmkub3ZlcmNhc3QuaXOCDWljZWxhbmRzaWYuaXOCC2tqYXJuaW5uLmlz gg1sZXNsaXN0aW5uLmlzggZsZmIuaXOCDm1hcmthZHVyaW5uLmlzghVvcmlnbzIw MTgub3ZlcmNhc3QuaXOCC292ZXJjYXN0LmlvggtvdmVyY2FzdC5pc4IPcmVzb3Vy Y2VwYXJrLmlzghNyZXlramF2aWsuZWxkaW5nLmlzgiBzYW1mZWxhZ3Nza3lyc2xh MjAxNy5oYmdyYW5kaS5pc4IOc2kub3ZlcmNhc3QuaXOCDnNuamFsbHJhZWRpLmlz giRzdXN0YWluYWJpbGl0eXJlcG9ydDIwMTcuaGJncmFuZGkuaXOCDXZlc3R1cnZl cmsuaXOCFnZlc3R1cnZlcmsub3ZlcmNhc3QuaXOCEnd3dy5hcnNza3lyc2x1ci5p c4IYd3d3LmF1ZGxpbmRhZ2FyZHVyaW5uLmlzggp3d3cuZmlhLmlzghJ3d3cuZnJp ZGFyc2V0dXIuaXOCDHd3dy5nYXJyaS5pc4INd3d3Lmdlc3R1ci5pc4INd3d3Lmhz b3JrYS5pc4IRd3d3LmljZWxhbmRzaWYuaXOCD3d3dy5ramFybmlubi5pc4IRd3d3 Lmxlc2xpc3Rpbm4uaXOCCnd3dy5sZmIuaXOCEnd3dy5tYXJrYWR1cmlubi5pc4IP d3d3Lm92ZXJjYXN0Lmlvgg93d3cub3ZlcmNhc3QuaXOCE3d3dy5yZXNvdXJjZXBh cmsuaXOCEnd3dy5zbmphbGxyYWVkaS5pc4IRd3d3LnZlc3R1cnZlcmsuaXOCGXd3 dy54bi0tbWFya2F1cmlubi1tOWEuaXOCF3huLS1nanJpc3ZvdmVsLWw5YTNlLmlz ghV4bi0tbWFya2F1cmlubi1tOWEuaXMwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYL KwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw dC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgDiaUuuJujpQAnohhu2O4PU Puf+dIj7pI8okwGd3fHb/gAAAWl27AQVAAAEAwBHMEUCIQD7S0L7TKQXNdWp2NQf 47AGSiBwvXDoO8T7CBA9bBH4agIgT10EsmwNO18lyINqk9oRuVClnXvvkax1MIvP gjRyzbIAdwApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWl27AZS AAAEAwBIMEYCIQCCnO/KYgkKDyWzkOGuE5j/KsawTukCjgkakmE81OhZkwIhAIYz Z6A4mbnD4oiOSE4KnnGVgcI7z1HdMfJenU8lhbY6MA0GCSqGSIb3DQEBCwUAA4IB AQBC3r38sZLYqYrG7mi0S1afPGmELJYRJljmFw7NYMfkTvsXm8G7bOINAlK6AgFJ 9jYdyaDlw8nCKN575x1imv26gLpk+xyc1z1RF4unDfTByVlHkVzRdmahNBz/4xep 4F+oou4ZpzCoAaVnbbBHGyvreAGJmtf66zIl+xQnxwA1hVd2peRHpSqfy15TlVTH Zchrfo8AmoEE+8xPpSnjupEm0zkjAUbOWdYIhtAtw2nQqlAd7HMNTQCXW6sKFsgp UVN+jDenOoXUqzas45rr7GcgED+2J80Ggo6jSrtfwcjcq7v3lY+p6i6TNKVMRzsE KqbZxefiROh4iBWk3HXO3pep -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3a+6hJyMBp7N6No4CpZ0 wOTJ9UnB0/4H4QriBhYNgV0gAsn5d3ToYz/b9t8ejHvnM9Xx55jyv02pKtGDoreQ e4dYNfDKIADvKylUnuaZQQ7dMNjzosM/F9vqkLb0iCPnrUA9QUTB5UPHYaJaVZxD st4Se8FfYWYO3d7atUD0Ak35AQM4FJmQsVUcI8cE4+P65jdOGQ4/daH4mFKQdmYy CskbEFbWdsGOJKjloyrbFHGQ4ZJ+Lq8kXfkWAn07MFdApeyYPBwOJ6NfCQdJ9LbY xplMZeEfa8eSlX6DlnM64wtA++C925HIDyejIiPRzwaI12N7Yw3kSalyIu4cDOcN wwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 301639436952694037942437368988321866775785 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-13 10:59:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 10:59:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.overcast.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27985320392927067283735913049356115758497057757940258197708941457514926174546569094590288747680462365747109938955266058594866132119669288207232003552359449971275945911619543694951775350173134870520477083185733429234061599520913039574259002435141829371530273905646197784322636318289557195261912926751587735397568242732475145582088209882120281885621956548011242597665020240656465353957639412707375376968326814672641341659440486370738412596553377080036555495644545364340387448010065435783419374870407674487295197444731366041714769932977216661882930689108336359619011611105636001727100118648000701068518876675841051790787 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ae1fe0f6afae1a38b2440109dde86079f8ab4c7a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1350 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akureyri.elding.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2017.hsorka.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2018.hsorka.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2014.hsorka.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2015.atvr.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2015.hsorka.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2016.atvr.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2016.hsorka.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.atvr.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.hbgrandi.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.hsorka.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.hsorka.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrslur.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atvr.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atvr2017.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audlindagardurinn.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitsportal.eurailgroup.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bru.hsorka.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elding-ak.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elding-rvk.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fia.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fridarsetur.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garri.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestur.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gjoridsvovel.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbgrandi.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbgsamfelag2018.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhiweb.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka2018.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsoverkefni.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icelandsif.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjarninn.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leslistinn.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfb.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markadurinn.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origo2018.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcast.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcepark.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reykjavik.elding.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samfelagsskyrsla2017.hbgrandi.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snjallraedi.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabilityreport2017.hbgrandi.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesturverk.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesturverk.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arsskyrslur.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audlindagardurinn.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fia.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fridarsetur.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garri.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gestur.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsorka.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandsif.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjarninn.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leslistinn.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lfb.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markadurinn.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcast.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resourcepark.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snjallraedi.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vesturverk.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--markaurinn-m9a.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gjrisvovel-l9a3e.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--markaurinn-m9a.is' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016976ec04150000040300473045022100fb4b42fb4ca41735d5a9d8d41fe3b0064a2070bd70e83bc4fb08103d6c11f86a02204f5d04b26c0d3b5f25c8836a93da11b950a59d7bef91ac75308bcf823472cdb2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016976ec06520000040300483046022100829cefca62090a0f25b390e1ae1398ff2ac6b04ee9028e091a92613cd4e85993022100863367a03899b9c3e2888e484e0a9e719581c23bcf51dd31f25e9d4f2585b63a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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