broaddy.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:76:ad:73:58:88:8f:7c:0f:d1:16:bf:8f:1d:07:0f:85:24 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=broaddy.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:76:ad:73:58:88:8f:7c:0f:d1:16:bf:8f:1d:07:0f:85:24
Serial Number (int): 301720732445032482140925079532572588868900
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3b:3a:3f:d4:fb:05:d2:3e:3a:c1:e5:5c:42:e7:a1:69:52:0d:31:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3b:20:07:f4:6b:ee:cb:6f:a6:53:24:24:f5:94:81:a9:11:7f:71:a3
Fingerprint (sha256): bf:aa:4e:d1:80:cb:5d:00:8e:f5:c6:35:66:2b:36:4f:95:45:1d:b6:02:f1:ce:d9:54:c3:fe:ae:23:06:b2:3e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate broaddy.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for broaddy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agder.broaddy.com
broaddy.com
buddynetwork-salzburg.broaddy.com
cuni.broaddy.com
demo.broaddy.com
esci-upf.broaddy.com
esn-rijeka.broaddy.com
esnauth.broaddy.com
esnbarcelonaub.broaddy.com
esnbergen.broaddy.com
esncorvinus.broaddy.com
esneu.broaddy.com
esnhaderslev.broaddy.com
esnhamburg.broaddy.com
esnhsemsk.broaddy.com
esnism.broaddy.com
esnminho.broaddy.com
esnpardubice.broaddy.com
esnpcz.broaddy.com
esnpd.broaddy.com
esnsghwarsaw.broaddy.com
esnspb.broaddy.com
esnsplit.broaddy.com
esntut.broaddy.com
esnuct.broaddy.com
esnupc.broaddy.com
esnzadar.broaddy.com
esnzagreb.broaddy.com
liberec.broaddy.com
rc.broaddy.com
studyatswps.broaddy.com
swps.broaddy.com
umprum.broaddy.com
unicatt.broaddy.com
unilu.broaddy.com
univ.grenoblealpes.a.broaddy.com
univ.grenoblealpes.broaddy.com
upol.broaddy.com
uskatowice.broaddy.com
utb.broaddy.com
vistula.broaddy.com
vsh.broaddy.com
wiki.broaddy.com
www.agder.broaddy.com
www.broaddy.com
www.buddynetwork-salzburg.broaddy.com
www.cuni.broaddy.com
www.demo.broaddy.com
www.esci-upf.broaddy.com
www.esn-rijeka.broaddy.com
www.esnauth.broaddy.com
www.esnbarcelonaub.broaddy.com
www.esnbergen.broaddy.com
www.esncorvinus.broaddy.com
www.esneu.broaddy.com
www.esnhaderslev.broaddy.com
www.esnhamburg.broaddy.com
www.esnhsemsk.broaddy.com
www.esnism.broaddy.com
www.esnminho.broaddy.com
www.esnpardubice.broaddy.com
www.esnpcz.broaddy.com
www.esnpd.broaddy.com
www.esnsghwarsaw.broaddy.com
www.esnspb.broaddy.com
www.esnsplit.broaddy.com
www.esntut.broaddy.com
www.esnuct.broaddy.com
www.esnupc.broaddy.com
www.esnzadar.broaddy.com
www.esnzagreb.broaddy.com
www.liberec.broaddy.com
www.rc.broaddy.com
www.studyatswps.broaddy.com
www.swps.broaddy.com
www.umprum.broaddy.com
www.unicatt.broaddy.com
www.unilu.broaddy.com
www.univ.grenoblealpes.a.broaddy.com
www.univ.grenoblealpes.broaddy.com
www.upol.broaddy.com
www.uskatowice.broaddy.com
www.utb.broaddy.com
www.vistula.broaddy.com
www.vsh.broaddy.com
www.wiki.broaddy.com

Other certificates including the domain name broaddy.com

(limited to 100 certificates)
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
*.broaddy.com
broaddy.com
czv.broaddy.com
app.broaddy.com
www.madamemargohairdesign.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
recipebox.gummi.site
broaddy.com
aws.broaddy.com
rcmavalet.com
www.en-gager.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
czv.broaddy.com
czv.broaddy.com
broaddy.com
broaddy.com
get.colorain.app
broaddy.com
broaddy.com
demo.broaddy.com
broaddy.com
broaddy.com
broaddy.com
broaddy.com
samyuktha.live
broaddy.com
broaddy.com
broaddy.com
aws.broaddy.com
iteration-demo.carto.solutions
soflime.in
broaddy.com
rcmavalet.com
broaddy.com
www.bingo.aratiendas.com

Certificate

The complete raw certificate details for broaddy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AP/cDHjt296vxp/1A1f
0wp7+i8qUKc8zEHIiVBrmbFMH7qYLx9vaJo4XZNvIcj7F7m/LQWDPUo/CSWx3RkA
FuG+ovFrWg2nDmYPNqAur0yQabysCxgsC3gtxOjVSXzrJznX/SKxCKdJs+qtPh87
5KoaBi8CcwKxiFTUPiC8nGNgQp8DGOe/ug5OBuSo/2u8spN07UJM1e4g0jhkudwc
2fCUC1JoRRFwUfSdH6c4JY4eeLSwwel2qlMWTPecSwtJWhR4O74H0OEdJqkK/BaX
4Uwwh0vNcvNZDavkXltWggSef9c6NsFoRpB5xiZTl3GP7khYHBMyYMlk7DkP+hi+
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301720732445032482140925079532572588868900
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-17 15:40:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 15:40:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'broaddy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30804117803187695744001526403108453229601665088827260418038724647953866632418187972396745973815289515531119065001886204647514537246161255889167950441668291461532094897490085410419358226007399476109797463009447784388736899553791912117134101026710187417483670929751441328846833069423603423540295381555483137708145797215137194464274492674298817854474350341562419108181168530765499766804902762943983020527894438106724267400977863666745899632774190913373750518632842038992324072836083954691673378605039230501199059544003618071095557381020834764891782880815465048896505662952657282430407344282869959662600029355284601814637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b3a3fd4fb05d23e3ac1e55c42e7a169520d31e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2054 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agder.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddynetwork-salzburg.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuni.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esci-upf.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esn-rijeka.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnauth.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnbarcelonaub.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnbergen.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esncorvinus.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esneu.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnhaderslev.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnhamburg.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnhsemsk.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnism.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnminho.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnpardubice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnpcz.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnpd.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnsghwarsaw.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnspb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnsplit.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esntut.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnuct.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnupc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnzadar.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnzagreb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberec.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studyatswps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umprum.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unicatt.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unilu.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'univ.grenoblealpes.a.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'univ.grenoblealpes.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upol.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uskatowice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistula.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vsh.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agder.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buddynetwork-salzburg.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuni.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demo.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esci-upf.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esn-rijeka.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnauth.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnbarcelonaub.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnbergen.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esncorvinus.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esneu.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnhaderslev.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnhamburg.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnhsemsk.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnism.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnminho.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnpardubice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnpcz.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnpd.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnsghwarsaw.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnspb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnsplit.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esntut.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnuct.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnupc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnzadar.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esnzagreb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberec.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rc.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studyatswps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swps.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umprum.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unicatt.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unilu.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.univ.grenoblealpes.a.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.univ.grenoblealpes.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upol.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uskatowice.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utb.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vistula.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vsh.broaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiki.broaddy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ac6aa475d00000403004730450221009686306957098f1a55d5a17e857da47e31785595901cf3ae0bde21d1fc3d1ddb0220282ea57ee84174cf06301779f368c9b1099e6132a20d78ec00457d3cc81b5f6f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ac6aa47420000040300473045022100980131adb910cc2d47a20ce27dcfcdc988c7ab3a929b8c1a02a05e8a82b16aaf022060766284016e3d467a54060ecc26fd3b3da31335443a274e1e609780beb8ab29
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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