broaddy.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:84:5f:85:a8:7d:fd:bd:ab:0e:fc:19:0f:2b:f0:8e:9c:9a was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=broaddy.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:84:5f:85:a8:7d:fd:bd:ab:0e:fc:19:0f:2b:f0:8e:9c:9a
Serial Number (int): 306381100881353231987067072359957042994330
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 38:21:d8:8d:61:5a:1c:ff:7c:13:23:19:ae:01:b6:98:c0:6c:de:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1d:51:b5:ed:87:8f:8d:a0:74:89:cf:c0:bd:7e:fb:3d:09:41:27:12
Fingerprint (sha256): b2:c8:7c:dc:2e:d0:86:22:85:c9:b9:fd:4f:6b:3a:d3:0b:4f:bf:01:63:05:18:3a:80:51:30:bd:fc:53:0e:db

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate broaddy.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for broaddy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agder.broaddy.com
broaddy.com
buddynetwork-salzburg.broaddy.com
cuni.broaddy.com
demo.broaddy.com
esci-upf.broaddy.com
esn-rijeka.broaddy.com
esnauth.broaddy.com
esnbarcelonaub.broaddy.com
esnbergen.broaddy.com
esncorvinus.broaddy.com
esneu.broaddy.com
esnhaderslev.broaddy.com
esnhamburg.broaddy.com
esnhsemsk.broaddy.com
esnism.broaddy.com
esnminho.broaddy.com
esnpardubice.broaddy.com
esnpcz.broaddy.com
esnpd.broaddy.com
esnsghwarsaw.broaddy.com
esnspb.broaddy.com
esnsplit.broaddy.com
esntut.broaddy.com
esnuct.broaddy.com
esnupc.broaddy.com
esnzadar.broaddy.com
esnzagreb.broaddy.com
liberec.broaddy.com
rc.broaddy.com
react.broaddy.com
studyatswps.broaddy.com
swps.broaddy.com
umprum.broaddy.com
unicatt.broaddy.com
unilu.broaddy.com
univ.grenoblealpes.a.broaddy.com
univ.grenoblealpes.broaddy.com
upol.broaddy.com
uskatowice.broaddy.com
utb.broaddy.com
vistula.broaddy.com
vsh.broaddy.com
wiki.broaddy.com
www.agder.broaddy.com
www.broaddy.com
www.buddynetwork-salzburg.broaddy.com
www.cuni.broaddy.com
www.demo.broaddy.com
www.esci-upf.broaddy.com
www.esn-rijeka.broaddy.com
www.esnauth.broaddy.com
www.esnbarcelonaub.broaddy.com
www.esnbergen.broaddy.com
www.esncorvinus.broaddy.com
www.esneu.broaddy.com
www.esnhaderslev.broaddy.com
www.esnhamburg.broaddy.com
www.esnhsemsk.broaddy.com
www.esnism.broaddy.com
www.esnminho.broaddy.com
www.esnpardubice.broaddy.com
www.esnpcz.broaddy.com
www.esnpd.broaddy.com
www.esnsghwarsaw.broaddy.com
www.esnspb.broaddy.com
www.esnsplit.broaddy.com
www.esntut.broaddy.com
www.esnuct.broaddy.com
www.esnupc.broaddy.com
www.esnzadar.broaddy.com
www.esnzagreb.broaddy.com
www.liberec.broaddy.com
www.rc.broaddy.com
www.react.broaddy.com
www.studyatswps.broaddy.com
www.swps.broaddy.com
www.umprum.broaddy.com
www.unicatt.broaddy.com
www.unilu.broaddy.com
www.univ.grenoblealpes.a.broaddy.com
www.univ.grenoblealpes.broaddy.com
www.upol.broaddy.com
www.uskatowice.broaddy.com
www.utb.broaddy.com
www.vistula.broaddy.com
www.vsh.broaddy.com
www.wiki.broaddy.com

Other certificates including the domain name broaddy.com

(limited to 100 certificates)
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
*.broaddy.com
broaddy.com
czv.broaddy.com
app.broaddy.com
www.madamemargohairdesign.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
recipebox.gummi.site
broaddy.com
aws.broaddy.com
rcmavalet.com
www.en-gager.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
czv.broaddy.com
czv.broaddy.com
broaddy.com
broaddy.com
get.colorain.app
broaddy.com
broaddy.com
demo.broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
samyuktha.live
broaddy.com
broaddy.com
broaddy.com
aws.broaddy.com
iteration-demo.carto.solutions
soflime.in
broaddy.com
rcmavalet.com
broaddy.com
www.bingo.aratiendas.com

Certificate

The complete raw certificate details for broaddy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+FMM1LWmxdKHofF+SYT
7CCoE2ToFcjUuutFgZSeoilYVNwiN5NENZHJqeKehrBHIQRR1h8w3JueihoXm3Tl
vYXgxoNkIORluFgsIO+EyL2rftLdGnqlnF4lF4Owd3CExjo8HljxXfnVjCijE6GX
N7l6TDYJsLfbAB9iJr+7WsoFzRR45Wq0K7ZKrWf6/SBaeGaz/ytOUlmrbfaeyfDu
jKQ0ehP6Ltcd48IkWwxSaoX6XRUsakUbDS0Cm4g+KmdoJVlKjTDAYqYSPbDfgflu
qAUiV7tBg5Kqq0CR3SkhYrSTgv7A0vncnUYsBs5UvJQfbJEp52T7gn5DeeFmKZLF
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306381100881353231987067072359957042994330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-27 15:48:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 15:48:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'broaddy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20182988905524745394839133299382211237430322949471325726140326917551011298571765035112984547976847470640140232095723949699233720473358704533118589510267371054540926003648671758173515066898709284898811506567747975801095874798633205026332875465597277378575230607647060794851889383440623236147313666905278590879048906317821938243547691758136553876940538550333138561138613056883699010510381980444737811258729134954007951073992829488216262144961231050725791075789081628975288251896073087368697379473248593578220030651551885777033902979664268980234455619331611542147325486393572035560444651002125130112116109846715082917133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3821d88d615a1cff7c132319ae01b698c06cdee4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2096 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agder.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddynetwork-salzburg.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuni.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esci-upf.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esn-rijeka.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnauth.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnbarcelonaub.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnbergen.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esncorvinus.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esneu.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnhaderslev.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnhamburg.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnhsemsk.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnism.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnminho.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnpardubice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnpcz.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnpd.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnsghwarsaw.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnspb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnsplit.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esntut.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnuct.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnupc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnzadar.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnzagreb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberec.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'react.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studyatswps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umprum.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unicatt.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unilu.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'univ.grenoblealpes.a.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'univ.grenoblealpes.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upol.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uskatowice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistula.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vsh.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agder.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buddynetwork-salzburg.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuni.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demo.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esci-upf.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esn-rijeka.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnauth.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnbarcelonaub.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnbergen.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esncorvinus.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esneu.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnhaderslev.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnhamburg.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnhsemsk.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnism.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnminho.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnpardubice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnpcz.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnpd.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnsghwarsaw.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnspb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnsplit.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esntut.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnuct.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnupc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnzadar.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnzagreb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberec.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.react.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studyatswps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umprum.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unicatt.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unilu.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.univ.grenoblealpes.a.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.univ.grenoblealpes.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upol.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uskatowice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vistula.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vsh.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiki.broaddy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001692fdb857f0000040300463044022034bdb090cb8ecb71ff967d0a20a7ab90c1bb9c9cee030274820fd131465acab8022063d470b26d6e1c10a2dfd9084c0274132aa84acc3e1b974103bb4427da3c9ec700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001692fdb83d60000040300473045022002a7626ced46483bae567354d3c071a0dec24782b37c069a79a941ea16cf9c8e022100aba27534fd50d94d07a88efeef414f816736cfd75ba5a3424abe361ce881d460
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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