www.overcast.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:74:0b:8c:ed:b6:49:b8:04:1d:68:1c:dd:55:10:88:3f:a5 was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.overcast.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:74:0b:8c:ed:b6:49:b8:04:1d:68:1c:dd:55:10:88:3f:a5
Serial Number (int): 300824965608996847162634779940193751809957
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6e:ee:db:ab:8a:34:51:49:bf:17:08:52:03:8f:48:74:be:78:4c:1e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 24:ed:7b:ed:73:6d:33:63:98:42:11:b1:80:60:f1:e6:65:a7:a2:39
Fingerprint (sha256): c3:74:e5:ab:1b:3b:3f:8d:e3:ef:92:a1:87:93:f6:1c:29:5f:08:1e:aa:12:72:43:88:53:d8:6a:73:b5:72:a3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.overcast.io

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.overcast.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akureyri.elding.is
annualreport2017.hsorka.is
annualreport2018.hsorka.is
arsskyrsla2014.hsorka.is
arsskyrsla2015.atvr.is
arsskyrsla2015.hsorka.is
arsskyrsla2016.atvr.is
arsskyrsla2016.hsorka.is
arsskyrsla2017.atvr.is
arsskyrsla2017.hbgrandi.is
arsskyrsla2017.hsorka.is
arsskyrsla2018.atvr.is
arsskyrsla2018.hbgrandi.is
arsskyrsla2018.hsorka.is
arsskyrslur.is
atvr.overcast.is
atvr2017.overcast.is
audlindagardurinn.is
benefitsportal.eurailgroup.org
bru.hsorka.is
elding-ak.overcast.is
elding-rvk.overcast.is
fia.is
fridarsetur.is
garri.is
gestur.is
gjoridsvovel.is
hbgrandi.overcast.is
hbgsamfelag2018.overcast.is
hhiweb.overcast.is
hsorka.is
hsorka2018.overcast.is
hsoverkefni.overcast.is
icelandsif.is
kjarninn.is
leslistinn.is
lfb.is
markadurinn.is
northerndestinations.is
origo.overcast.is
origo2018.overcast.is
overcast.io
overcast.is
resourcepark.is
reykjavik.elding.is
samfelagsskyrsla2017.hbgrandi.is
samfelagsskyrsla2018.hbgrandi.is
si.overcast.is
snjallraedi.is
sustainabilityreport2017.hbgrandi.is
sustainabilityreport2018.hbgrandi.is
vesturverk.is
vesturverk.overcast.is
volcanotrails.overcast.is
www.arsskyrslur.is
www.audlindagardurinn.is
www.fia.is
www.fridarsetur.is
www.garri.is
www.gestur.is
www.hsorka.is
www.icelandsif.is
www.kjarninn.is
www.leslistinn.is
www.lfb.is
www.markadurinn.is
www.northerndestinations.is
www.overcast.io
www.overcast.is
www.resourcepark.is
www.snjallraedi.is
www.vesturverk.is
www.xn--markaurinn-m9a.is
xn--gjrisvovel-l9a3e.is
xn--markaurinn-m9a.is

Other certificates including the domain name overcast.io

(limited to 100 certificates)
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
sni.cloudflaressl.com
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
*.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
*.overcast.io
overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io

Certificate

The complete raw certificate details for www.overcast.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILbTCCClWgAwIBAgISA3QLjO22SbgEHWgc3VUQiD+lMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MTIxMjIzNDZaFw0x
OTA3MTExMjIzNDZaMBoxGDAWBgNVBAMTD3d3dy5vdmVyY2FzdC5pbzCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAOypb7mQjYNzy3R3XyoKY6iv6IJEEuuN
HwsPeCG0OVmIQ1r+SSBFRLKTu+jjxlUdeg0wD1lboDIz24PrcWHtVNzMZm5XfdSV
N5q6jOQeKuRsMS1LIiZ7iaoLbkMX8BmORqCM/eQFZ4f2/SY1Rc7HSopS5pZR8f0a
XaHV8sFXEAzrHO1U8IMbjbXx7n/QdbbG2yF2qtMenSDKQBRJWBdqn9G5XRxoIeE3
4F1TeVtUHweEbRIyjKOuoN/RjyaMqg8zj1Lr5efWhR8rrkbsh5gds8IDw51Ox/Q+
sq4ramfoT8N0uG5ycO8oRt+evHCYnCjOmYbixdiqcm0kk18h+wUu6kMCAwEAAaOC
CHswggh3MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUbu7bq4o0UUm/FwhSA49IdL54
TB4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzCCBi8GA1UdEQSCBiYwggYighJha3VyZXlyaS5lbGRpbmcuaXOCGmFubnVh
bHJlcG9ydDIwMTcuaHNvcmthLmlzghphbm51YWxyZXBvcnQyMDE4Lmhzb3JrYS5p
c4IYYXJzc2t5cnNsYTIwMTQuaHNvcmthLmlzghZhcnNza3lyc2xhMjAxNS5hdHZy
LmlzghhhcnNza3lyc2xhMjAxNS5oc29ya2EuaXOCFmFyc3NreXJzbGEyMDE2LmF0
dnIuaXOCGGFyc3NreXJzbGEyMDE2Lmhzb3JrYS5pc4IWYXJzc2t5cnNsYTIwMTcu
YXR2ci5pc4IaYXJzc2t5cnNsYTIwMTcuaGJncmFuZGkuaXOCGGFyc3NreXJzbGEy
MDE3Lmhzb3JrYS5pc4IWYXJzc2t5cnNsYTIwMTguYXR2ci5pc4IaYXJzc2t5cnNs
YTIwMTguaGJncmFuZGkuaXOCGGFyc3NreXJzbGEyMDE4Lmhzb3JrYS5pc4IOYXJz
c2t5cnNsdXIuaXOCEGF0dnIub3ZlcmNhc3QuaXOCFGF0dnIyMDE3Lm92ZXJjYXN0
LmlzghRhdWRsaW5kYWdhcmR1cmlubi5pc4IeYmVuZWZpdHNwb3J0YWwuZXVyYWls
Z3JvdXAub3Jngg1icnUuaHNvcmthLmlzghVlbGRpbmctYWsub3ZlcmNhc3QuaXOC
FmVsZGluZy1ydmsub3ZlcmNhc3QuaXOCBmZpYS5pc4IOZnJpZGFyc2V0dXIuaXOC
CGdhcnJpLmlzgglnZXN0dXIuaXOCD2dqb3JpZHN2b3ZlbC5pc4IUaGJncmFuZGku
b3ZlcmNhc3QuaXOCG2hiZ3NhbWZlbGFnMjAxOC5vdmVyY2FzdC5pc4ISaGhpd2Vi
Lm92ZXJjYXN0Lmlzggloc29ya2EuaXOCFmhzb3JrYTIwMTgub3ZlcmNhc3QuaXOC
F2hzb3ZlcmtlZm5pLm92ZXJjYXN0Lmlzgg1pY2VsYW5kc2lmLmlzggtramFybmlu
bi5pc4INbGVzbGlzdGlubi5pc4IGbGZiLmlzgg5tYXJrYWR1cmlubi5pc4IXbm9y
dGhlcm5kZXN0aW5hdGlvbnMuaXOCEW9yaWdvLm92ZXJjYXN0LmlzghVvcmlnbzIw
MTgub3ZlcmNhc3QuaXOCC292ZXJjYXN0LmlvggtvdmVyY2FzdC5pc4IPcmVzb3Vy
Y2VwYXJrLmlzghNyZXlramF2aWsuZWxkaW5nLmlzgiBzYW1mZWxhZ3Nza3lyc2xh
MjAxNy5oYmdyYW5kaS5pc4Igc2FtZmVsYWdzc2t5cnNsYTIwMTguaGJncmFuZGku
aXOCDnNpLm92ZXJjYXN0Lmlzgg5zbmphbGxyYWVkaS5pc4Ikc3VzdGFpbmFiaWxp
dHlyZXBvcnQyMDE3LmhiZ3JhbmRpLmlzgiRzdXN0YWluYWJpbGl0eXJlcG9ydDIw
MTguaGJncmFuZGkuaXOCDXZlc3R1cnZlcmsuaXOCFnZlc3R1cnZlcmsub3ZlcmNh
c3QuaXOCGXZvbGNhbm90cmFpbHMub3ZlcmNhc3QuaXOCEnd3dy5hcnNza3lyc2x1
ci5pc4IYd3d3LmF1ZGxpbmRhZ2FyZHVyaW5uLmlzggp3d3cuZmlhLmlzghJ3d3cu
ZnJpZGFyc2V0dXIuaXOCDHd3dy5nYXJyaS5pc4INd3d3Lmdlc3R1ci5pc4INd3d3
Lmhzb3JrYS5pc4IRd3d3LmljZWxhbmRzaWYuaXOCD3d3dy5ramFybmlubi5pc4IR
d3d3Lmxlc2xpc3Rpbm4uaXOCCnd3dy5sZmIuaXOCEnd3dy5tYXJrYWR1cmlubi5p
c4Ibd3d3Lm5vcnRoZXJuZGVzdGluYXRpb25zLmlzgg93d3cub3ZlcmNhc3QuaW+C
D3d3dy5vdmVyY2FzdC5pc4ITd3d3LnJlc291cmNlcGFyay5pc4ISd3d3LnNuamFs
bHJhZWRpLmlzghF3d3cudmVzdHVydmVyay5pc4IZd3d3LnhuLS1tYXJrYXVyaW5u
LW05YS5pc4IXeG4tLWdqcmlzdm92ZWwtbDlhM2UuaXOCFXhuLS1tYXJrYXVyaW5u
LW05YS5pczBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYG
CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB
1nkCBAIEgfUEgfIA8AB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iN
AAABahG36joAAAQDAEcwRQIgC1xJO6O71D+J7nNuEOMurHKCDa8+Kvfxei12UUuF
BJcCIQDS8L/9D6P780u8mozGz8k4jMBQXt6yH1JYgw5hj14xFgB2AOJpS64m6OlA
CeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABahG37CgAAAQDAEcwRQIhAJots8Jg
bFTQzYKnO/NuIL2wRj8Jgg9bhk+IZ/EG35LFAiANqeLJ5/bYCVdkTc5GxDWl8s/v
eG44+SoFxLgrQbK0CzANBgkqhkiG9w0BAQsFAAOCAQEAGSJb6xmOstEGXzMDFF6L
VRzhfQyMxF1uV+ju8OYagBTNaCKj3HTwfKmceOIlcAlRtHkOUaZzEH6fPXcJ1lqy
MAv0mQmaL5mzYhubPWgyleuSk+5b1XX0HNFvuy6XInP0S+qrkJvdCta+KNkymXIU
U4GNbvvi1ISSNNpClviQHYbuipgnt/rHIGvVYwFvlfLtwuUY2V78roZ7seAVzKIW
XdU6sYA7RFxt+UmgJnRXbogOZTlKcmvxG97WETWsVV8CmVC66bG2jm7KWp8zqkte
xHts6WAljr7X89ycW6GnKUeFOweWdpPYjUIULPwB54MlcWeR0aO5+Q4fPBv4S+5l
GQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KlvuZCNg3PLdHdfKgpj
qK/ogkQS640fCw94IbQ5WYhDWv5JIEVEspO76OPGVR16DTAPWVugMjPbg+txYe1U
3Mxmbld91JU3mrqM5B4q5GwxLUsiJnuJqgtuQxfwGY5GoIz95AVnh/b9JjVFzsdK
ilLmllHx/RpdodXywVcQDOsc7VTwgxuNtfHuf9B1tsbbIXaq0x6dIMpAFElYF2qf
0bldHGgh4TfgXVN5W1QfB4RtEjKMo66g39GPJoyqDzOPUuvl59aFHyuuRuyHmB2z
wgPDnU7H9D6yritqZ+hPw3S4bnJw7yhG3568cJicKM6ZhuLF2KpybSSTXyH7BS7q
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300824965608996847162634779940193751809957
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-12 12:23:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 12:23:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.overcast.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29875792187310372521514626930416094151542741527564978111702423680260035723492874046799200966171558272453662475655972220470798403140631681310385169038192580017705734898217327386532406502646482002606948381228688174540204198535911786423209870548809885845083377064217471584221440240022603715386235176685495168991142784859562224058020983205095070406609746664874832401987510531723305060470536193164051692693222335697642286056144296390761857791613415764361557904103969716641940813622619361784601602059579727555108515413533247173577601604172150838610343878254418284673701536894624347312367888662972485337067569392712535697987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6eeedbab8a345149bf170852038f4874be784c1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1574 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akureyri.elding.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2017.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2018.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2014.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2015.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2015.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2016.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2016.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrslur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atvr.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atvr2017.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audlindagardurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitsportal.eurailgroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bru.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elding-ak.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elding-rvk.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fia.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fridarsetur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garri.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gjoridsvovel.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbgrandi.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbgsamfelag2018.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhiweb.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka2018.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsoverkefni.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icelandsif.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjarninn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leslistinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfb.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markadurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerndestinations.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origo.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origo2018.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcepark.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reykjavik.elding.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samfelagsskyrsla2017.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samfelagsskyrsla2018.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snjallraedi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabilityreport2017.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabilityreport2018.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesturverk.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesturverk.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volcanotrails.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arsskyrslur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audlindagardurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fia.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fridarsetur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garri.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gestur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandsif.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjarninn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leslistinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lfb.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markadurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerndestinations.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resourcepark.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snjallraedi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vesturverk.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--markaurinn-m9a.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gjrisvovel-l9a3e.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--markaurinn-m9a.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a11b7ea3a000004030047304502200b5c493ba3bbd43f89ee736e10e32eac72820daf3e2af7f17a2d76514b850497022100d2f0bffd0fa3fbf34bbc9a8cc6cfc9388cc0505edeb21f5258830e618f5e3116007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a11b7ec2800000403004730450221009a2db3c2606c54d0cd82a73bf36e20bdb0463f09820f5b864f8867f106df92c502200da9e2c9e7f6d80957644dce46c435a5f2cfef786e38f92a05c4b82b41b2b40b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0019225beb198eb2d1065f3303145e8b551ce17d0c8cc45d6e57e8eef0e61a8014cd6822a3dc74f07ca99c78e225700951b4790e51a673107e9f3d7709d65ab2300bf499099a2f99b3621b9b3d683295eb9293ee5bd575f41cd16fbb2e972273f44beaab909bdd0ad6be28d93299721453818d6efbe2d4849234da4296f8901d86ee8a9827b7fac7206bd563016f95f2edc2e518d95efcae867bb1e015cca2165dd53ab1803b445c6df949a02674576e880e65394a726bf11bded61135ac555f029950bae9b1b68e6eca5a9f33aa4b5ec47b6ce960258ebed7f3dc9c5ba1a72947853b07967693d88d42142cfc01e78325716791d1a3b9f90e1f3c1bf84bee6519