www.overcast.io
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:99:b5:c8:e1:6b:99:94:68:24:0f:17:86:b0:8a:dd:df:07 was issued on by Let's Encrypt.
With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.overcast.io
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:99:b5:c8:e1:6b:99:94:68:24:0f:17:86:b0:8a:dd:df:07Serial Number (int): 313641693232860206418256691384133080702727
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 0d:99:57:4d:44:7e:e3:72:3d:97:ca:2b:62:d9:63:cc:e0:b6:5e:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 77:79:a4:2b:bf:a7:0f:c2:44:c6:01:bd:4c:3f:93:f9:7c:22:3e:ce
Fingerprint (sha256): c2:c5:ba:5b:30:60:57:bb:22:4a:70:68:3b:f4:61:ff:1a:30:9d:5a:e6:d2:30:e6:25:ea:e6:ee:3f:50:7d:d2
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.overcast.io
52
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.overcast.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
akureyri.elding.is
annualreport2017.hsorka.is
arsskyrsla2014.hsorka.is
arsskyrsla2015.atvr.is
arsskyrsla2015.hsorka.is
arsskyrsla2016.atvr.is
arsskyrsla2016.hsorka.is
arsskyrsla2017.atvr.is
arsskyrsla2017.hbgrandi.is
arsskyrsla2017.hsorka.is
arsskyrslur.is
atvr2017.overcast.is
audlindagardurinn.is
elding-ak.overcast.is
elding-rvk.overcast.is
fridarsetur.is
garri.is
gestur.is
hbgsamfelag2017.overcast.is
hhiweb.overcast.is
hsorka.is
icelandsif.is
islandsbanki.overcast.is
kjarninn.is
leslistinn.is
markadurinn.overcast.is
overcast.io
overcast.is
resourcepark.is
reykjavik.elding.is
samfelagsskyrsla2017.hbgrandi.is
snjallraedi.is
sustainabilityreport2017.hbgrandi.is
tokyo.is
vesturverk.is
vesturverk.overcast.is
vis.overcast.is
www.arsskyrslur.is
www.audlindagardurinn.is
www.fridarsetur.is
www.garri.is
www.gestur.is
www.hsorka.is
www.icelandsif.is
www.kjarninn.is
www.leslistinn.is
www.overcast.io
www.overcast.is
www.resourcepark.is
www.snjallraedi.is
www.tokyo.is
www.vesturverk.is
annualreport2017.hsorka.is
arsskyrsla2014.hsorka.is
arsskyrsla2015.atvr.is
arsskyrsla2015.hsorka.is
arsskyrsla2016.atvr.is
arsskyrsla2016.hsorka.is
arsskyrsla2017.atvr.is
arsskyrsla2017.hbgrandi.is
arsskyrsla2017.hsorka.is
arsskyrslur.is
atvr2017.overcast.is
audlindagardurinn.is
elding-ak.overcast.is
elding-rvk.overcast.is
fridarsetur.is
garri.is
gestur.is
hbgsamfelag2017.overcast.is
hhiweb.overcast.is
hsorka.is
icelandsif.is
islandsbanki.overcast.is
kjarninn.is
leslistinn.is
markadurinn.overcast.is
overcast.io
overcast.is
resourcepark.is
reykjavik.elding.is
samfelagsskyrsla2017.hbgrandi.is
snjallraedi.is
sustainabilityreport2017.hbgrandi.is
tokyo.is
vesturverk.is
vesturverk.overcast.is
vis.overcast.is
www.arsskyrslur.is
www.audlindagardurinn.is
www.fridarsetur.is
www.garri.is
www.gestur.is
www.hsorka.is
www.icelandsif.is
www.kjarninn.is
www.leslistinn.is
www.overcast.io
www.overcast.is
www.resourcepark.is
www.snjallraedi.is
www.tokyo.is
www.vesturverk.is
Other certificates including the domain name overcast.io
(limited to 100 certificates)
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
sni.cloudflaressl.com
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
*.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
*.overcast.io
overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
sni.cloudflaressl.com
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
*.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
*.overcast.io
overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
Certificate
The complete raw certificate details for www.overcast.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKEDCCCPigAwIBAgISA5m1yOFrmZRoJA8XhrCK3d8HMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MjYyMzI5MjJaFw0x ODEyMjUyMzI5MjJaMBoxGDAWBgNVBAMTD3d3dy5vdmVyY2FzdC5pbzCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAOFi6VNlz/v5Ib2ERlCliLQGFQwtlRGd mYfI6sCglw927kaCy5tD4edFQv/wGp957UDT9F8e2qE4pQSpHTMmowFtWv7tjOXL EtXz7gsIdz3Hhm5tbWlvo47bhzaABQEuw+ZvcfeOTth3AD3YwkEEeHtOYnuE17D3 Z+hk3WZOvebPLHKg0K881VqPodjlP1yTKXPnYJ3Zg+YUccPWBDR2QQp8I8UbaZCd kzcSxsPjH1nVeaMqvEJMaMrA6QYfbIeOKy+IdEmnMxaouGOXBfCHhnXaoA//Wiln R4B5JAm7jDIXXHHuTqLjPVUwrwPZDFNYSMXW6XJpksv1ppAlnFpeLzUCAwEAAaOC Bx4wggcaMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUDZlXTUR+43I9l8orYtljzOC2 XrgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu b3JnLzCCBB4GA1UdEQSCBBUwggQRghJha3VyZXlyaS5lbGRpbmcuaXOCGmFubnVh bHJlcG9ydDIwMTcuaHNvcmthLmlzghhhcnNza3lyc2xhMjAxNC5oc29ya2EuaXOC FmFyc3NreXJzbGEyMDE1LmF0dnIuaXOCGGFyc3NreXJzbGEyMDE1Lmhzb3JrYS5p c4IWYXJzc2t5cnNsYTIwMTYuYXR2ci5pc4IYYXJzc2t5cnNsYTIwMTYuaHNvcmth LmlzghZhcnNza3lyc2xhMjAxNy5hdHZyLmlzghphcnNza3lyc2xhMjAxNy5oYmdy YW5kaS5pc4IYYXJzc2t5cnNsYTIwMTcuaHNvcmthLmlzgg5hcnNza3lyc2x1ci5p c4IUYXR2cjIwMTcub3ZlcmNhc3QuaXOCFGF1ZGxpbmRhZ2FyZHVyaW5uLmlzghVl bGRpbmctYWsub3ZlcmNhc3QuaXOCFmVsZGluZy1ydmsub3ZlcmNhc3QuaXOCDmZy aWRhcnNldHVyLmlzgghnYXJyaS5pc4IJZ2VzdHVyLmlzghtoYmdzYW1mZWxhZzIw MTcub3ZlcmNhc3QuaXOCEmhoaXdlYi5vdmVyY2FzdC5pc4IJaHNvcmthLmlzgg1p Y2VsYW5kc2lmLmlzghhpc2xhbmRzYmFua2kub3ZlcmNhc3QuaXOCC2tqYXJuaW5u Lmlzgg1sZXNsaXN0aW5uLmlzghdtYXJrYWR1cmlubi5vdmVyY2FzdC5pc4ILb3Zl cmNhc3QuaW+CC292ZXJjYXN0Lmlzgg9yZXNvdXJjZXBhcmsuaXOCE3JleWtqYXZp ay5lbGRpbmcuaXOCIHNhbWZlbGFnc3NreXJzbGEyMDE3LmhiZ3JhbmRpLmlzgg5z bmphbGxyYWVkaS5pc4Ikc3VzdGFpbmFiaWxpdHlyZXBvcnQyMDE3LmhiZ3JhbmRp Lmlzggh0b2t5by5pc4INdmVzdHVydmVyay5pc4IWdmVzdHVydmVyay5vdmVyY2Fz dC5pc4IPdmlzLm92ZXJjYXN0LmlzghJ3d3cuYXJzc2t5cnNsdXIuaXOCGHd3dy5h dWRsaW5kYWdhcmR1cmlubi5pc4ISd3d3LmZyaWRhcnNldHVyLmlzggx3d3cuZ2Fy cmkuaXOCDXd3dy5nZXN0dXIuaXOCDXd3dy5oc29ya2EuaXOCEXd3dy5pY2VsYW5k c2lmLmlzgg93d3cua2phcm5pbm4uaXOCEXd3dy5sZXNsaXN0aW5uLmlzgg93d3cu b3ZlcmNhc3QuaW+CD3d3dy5vdmVyY2FzdC5pc4ITd3d3LnJlc291cmNlcGFyay5p c4ISd3d3LnNuamFsbHJhZWRpLmlzggx3d3cudG9reW8uaXOCEXd3dy52ZXN0dXJ2 ZXJrLmlzMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB 1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsG AQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQg dXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3 aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRz ZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEA dgDbdK/uyynssf7KPnFtLOW5qrs294Rxg8ddnU83th+/ZAAAAWYYbiDsAAAEAwBH MEUCIQDHTi1UBin3aWiWwJOLIgUUsi3+3GNGV2pUHPrB+c+tvgIgbjfXBWz9cksG MJvGHRTuBtxyBeqr7wlmNdyV/k3eozAAdwApPFGWVMg5ZbqqUPxYB9S3b79Yeily 3KTDDPTlRUf0eAAAAWYYbiD9AAAEAwBIMEYCIQCalwRXdvQ4Bgf5jsyoG5mBkFVQ Q7V/O/kWj7/2iN0vIgIhAL7WqtefzwOLslh7y2nWad6+E70srRTVREbBSTsFRsQt MA0GCSqGSIb3DQEBCwUAA4IBAQAv+g98GVbgytMj8Cv7Vm6NS+f0riBWyBq5POmm sOsRBEuSokarQ6LTvaXcNVIPJ5+fqP5w0R2mk5v7TcAa/btyG6awBafaB9sUL5aH IqMTZLxLyCI+R8z8l/msOGc18yiub73Zpn1LyFFHgzOYZ4IGf2P+ByAolXOqew4U GcFa8EL1UG92tJSLKi68YXxK//snbVgbPlHQGSfi/+ck6IkZfoFMraIgiszg7hHS nZon9cNU1/tvIwM0yxAQIa+REIfIMzW22UwSk6VTo2E8qDnUg5wi3mXbUekizbEp BA3SX9vv5HQHt6eq9F2l6lKa73EQs0sGSLgTX2BJlVPO2yry -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WLpU2XP+/khvYRGUKWI tAYVDC2VEZ2Zh8jqwKCXD3buRoLLm0Ph50VC//Aan3ntQNP0Xx7aoTilBKkdMyaj AW1a/u2M5csS1fPuCwh3PceGbm1taW+jjtuHNoAFAS7D5m9x945O2HcAPdjCQQR4 e05ie4TXsPdn6GTdZk695s8scqDQrzzVWo+h2OU/XJMpc+dgndmD5hRxw9YENHZB CnwjxRtpkJ2TNxLGw+MfWdV5oyq8QkxoysDpBh9sh44rL4h0SaczFqi4Y5cF8IeG ddqgD/9aKWdHgHkkCbuMMhdcce5OouM9VTCvA9kMU1hIxdbpcmmSy/WmkCWcWl4v NQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 313641693232860206418256691384133080702727 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-26 23:29:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-25 23:29:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.overcast.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28452393660774240022397861706480917756882089314781644944527395739209716496322850356399240419733326563377463699404409347045184963081400832084609857535852643373597595721036006076849902409884476288849825742902327651549092837213788768145541296312656570766048820723570242110995039371382164123255882454144241637170202941990277659837718109638878756981091620473459395291536888915357942029433779769101128311620672639451285834495310981790999496798854926365205711654402397041971484331999282215214187769442404659306617903853290634699823680042737821287773051362600927650279866399153516419814580434760407732831759937254198058299189 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0d99574d447ee3723d97ca2b62d963cce0b65eb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1045 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akureyri.elding.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2017.hsorka.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2014.hsorka.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2015.atvr.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2015.hsorka.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2016.atvr.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2016.hsorka.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.atvr.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.hbgrandi.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.hsorka.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrslur.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atvr2017.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audlindagardurinn.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elding-ak.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elding-rvk.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fridarsetur.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garri.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestur.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbgsamfelag2017.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhiweb.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icelandsif.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'islandsbanki.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjarninn.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leslistinn.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markadurinn.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcast.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcepark.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reykjavik.elding.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samfelagsskyrsla2017.hbgrandi.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snjallraedi.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabilityreport2017.hbgrandi.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokyo.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesturverk.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesturverk.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vis.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arsskyrslur.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audlindagardurinn.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fridarsetur.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garri.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gestur.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsorka.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandsif.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjarninn.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leslistinn.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcast.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcast.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resourcepark.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snjallraedi.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokyo.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vesturverk.is' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000166186e20ec0000040300473045022100c74e2d540629f7696896c0938b220514b22dfedc6346576a541cfac1f9cfadbe02206e37d7056cfd724b06309bc61d14ee06dc7205eaabef096635dc95fe4ddea330007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166186e20fd00000403004830460221009a97045776f4380607f98ecca81b998190555043b57f3bf9168fbff688dd2f22022100bed6aad79fcf038bb2587bcb69d669debe13bd2cad14d54446c1493b0546c42d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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