overcast.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3e:c7:9f:6a:f4:31:21:fc:24:29:da:b0:18:52:8c:85:84 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=overcast.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3e:c7:9f:6a:f4:31:21:fc:24:29:da:b0:18:52:8c:85:84
Serial Number (int): 282699708660022925462196027010966516172164
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e7:ab:a4:0f:1e:5c:98:70:aa:89:8a:f9:4e:a7:69:25:6f:91:59:af
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e9:7c:37:62:56:31:a6:c0:7b:b4:da:4c:cd:11:d4:35:13:7f:ba:4b
Fingerprint (sha256): e1:30:b9:6f:41:a6:29:41:a5:fd:2e:b0:ee:f8:8b:fd:cc:a4:b4:ca:f2:70:3c:53:a5:90:ad:33:b8:d3:96:6e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate overcast.io

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for overcast.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

17.is
akureyri.elding.is
allianz-tilbod.overcast.is
allianz.is
annualreport2017.hsorka.is
annualreport2018.hsorka.is
annualreport2019.hsorka.is
annualreport2019.icelandairgroup.is
arsskyrsla2014.hsorka.is
arsskyrsla2015.atvr.is
arsskyrsla2015.hsorka.is
arsskyrsla2016.atvr.is
arsskyrsla2016.hsorka.is
arsskyrsla2017.atvr.is
arsskyrsla2017.hbgrandi.is
arsskyrsla2017.hsorka.is
arsskyrsla2017.origo.is
arsskyrsla2018.atvr.is
arsskyrsla2018.hbgrandi.is
arsskyrsla2018.hsorka.is
arsskyrsla2018.origo.is
arsskyrsla2019.brim.is
arsskyrsla2019.hsorka.is
arsskyrslur.is
atvr.overcast.is
atvr2017.overcast.is
audlindagardurinn.is
avislangtimaleiga.is
benefitsportal.eurail.com
benefitsportal.eurailgroup.org
brim.overcast.is
brimsamfelag.overcast.is
bru.hsorka.is
elding-ak.overcast.is
elding-rvk.overcast.is
eurogym2020.com
fia.is
fridarsetur.is
gestur.is
gjoridsvovel.is
hhiweb.overcast.is
hsorka.com
hsorka.is
hsorka2018.overcast.is
hsoverkefni.overcast.is
icelandair.overcast.is
icelandsif.is
innri.allianz.is
kjarninn.is
langtimaleigaavis.is
leslistinn.is
lfb.is
login.buseti.is
markadurinn.is
northerndestinations.is
overcast.io
overcast.is
prufukerfi.allianz.is
resourcepark.is
reykjavik.elding.is
samfelagsskyrsla2017.hbgrandi.is
samfelagsskyrsla2018.hbgrandi.is
samfelagsskyrsla2019.brim.is
si.overcast.is
skogarvegur.buseti.is
snjallraedi.is
sustainabilityreport2017.hbgrandi.is
sustainabilityreport2018.hbgrandi.is
sustainabilityreport2019.brim.is
tilbod.allianz.is
vesturverk.is
vesturverk.overcast.is
volcanotrails.overcast.is
www.17.is
www.allianz.is
www.arsskyrslur.is
www.audlindagardurinn.is
www.avislangtimaleiga.is
www.eurogym2020.com
www.fia.is
www.fridarsetur.is
www.garri.is
www.gestur.is
www.hsorka.com
www.hsorka.is
www.icelandsif.is
www.kjarninn.is
www.langtimaleigaavis.is
www.leslistinn.is
www.lfb.is
www.markadurinn.is
www.northerndestinations.is
www.overcast.is
www.resourcepark.is
www.snjallraedi.is
www.vesturverk.is
www.xn--markaurinn-m9a.is
xn--gjrisvovel-l9a3e.is
xn--markaurinn-m9a.is

Other certificates including the domain name overcast.io

(limited to 100 certificates)
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
sni.cloudflaressl.com
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
*.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
*.overcast.io
overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io

Certificate

The complete raw certificate details for overcast.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0RnsIcMCb5SSaGv7DHH
N/aNfaQGtAMaB7EM/uQQPr1Vp0XGo1RiW1txWVlIyfIum84Xh+hQmM6jCddB/QTX
g77Kn5zvzmnWQIHHcU766E0ku8Ncu0f6TDH82ryl/7ju2YYChwTQr4ZjqhX3QNGt
ij4H11oEHsiuy9Tws1IcKJRmKB2pjRW2KIjg5VfDZrb9t6nvJBWnZMhCwrrZfla0
ZuzR/Aq07eRafKhl2qQqKabEuC02vGs61nDR/ckf0i8j5kkmJdnOWyVeQdu2hx9s
G0P12zyyx7jind4mZk3K/9Eg6Ig0zkVKhe+q6yUfbcz2WLk8QHa0U7TuR2hiy139
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282699708660022925462196027010966516172164
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-01 12:24:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-30 12:24:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'overcast.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25660107689226062289618172004555282542077885175117007433911133287420692336967983924317944043376387452001849366212646148378302188604593310710519611141921055280759000872477079086580873999598206981326283123790562797960583141794842416535681550897658782678889536396669117271491356432220630537908405910122351712016802459978716265490615867400728591416940843350294824427860886981399617874008927042913760871967992723447533939925422969156194777966551160085725881881512547014211924533734324329031488376755175523596596440658374177407221960082113444804945165456801706197093269228256111792016188432859320699405312472896413049421253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7aba40f1e5c9870aa898af94ea769256f9159af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '17.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akureyri.elding.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianz-tilbod.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianz.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2017.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2018.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2019.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2019.icelandairgroup.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2014.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2015.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2015.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2016.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2016.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.origo.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.origo.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2019.brim.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2019.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrslur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atvr.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atvr2017.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audlindagardurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avislangtimaleiga.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitsportal.eurail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitsportal.eurailgroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brim.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brimsamfelag.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bru.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elding-ak.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elding-rvk.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurogym2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fia.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fridarsetur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gjoridsvovel.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhiweb.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka2018.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsoverkefni.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icelandair.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icelandsif.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innri.allianz.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjarninn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langtimaleigaavis.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leslistinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfb.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.buseti.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markadurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerndestinations.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prufukerfi.allianz.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcepark.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reykjavik.elding.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samfelagsskyrsla2017.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samfelagsskyrsla2018.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samfelagsskyrsla2019.brim.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skogarvegur.buseti.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snjallraedi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabilityreport2017.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabilityreport2018.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabilityreport2019.brim.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tilbod.allianz.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesturverk.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesturverk.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volcanotrails.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.17.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allianz.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arsskyrslur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audlindagardurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avislangtimaleiga.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eurogym2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fia.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fridarsetur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garri.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gestur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsorka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandsif.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjarninn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.langtimaleigaavis.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leslistinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lfb.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markadurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerndestinations.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resourcepark.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snjallraedi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vesturverk.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--markaurinn-m9a.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gjrisvovel-l9a3e.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--markaurinn-m9a.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017135ea87a60000040300473045022059a8777d732f7a81a4991a680d4f82cf9aa1a8af3cfc5d64275792ee2cc1537b022100efb8701b17fab93ec2b81b960e687639cb7e654f41bafddc405949c9d930f30100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017135ea87fa0000040300473045022100a03db2f58f3b2e81b0a3317a3bbffdacac2ebdcda7c15d7ef3839067142e7d5a02203460a039ded46a29eb45945762c9be600b66eab46aee785f07052de38b07ec10
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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