www.overcast.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:45:c3:3a:3f:d5:60:cb:e8:44:a2:fb:06:27:1a:04:64:aa was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.overcast.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:45:c3:3a:3f:d5:60:cb:e8:44:a2:fb:06:27:1a:04:64:aa
Serial Number (int): 285075843019918708249396161688341739496618
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:cf:d3:a4:1e:b1:b4:0d:1d:95:25:0b:62:00:bd:15:f2:1e:b0:74
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7e:25:a5:1f:ed:81:4b:5a:fb:81:43:86:40:aa:64:1b:c6:3e:e8:83
Fingerprint (sha256): ec:90:32:11:18:a0:19:1c:cf:18:67:63:68:31:2c:1c:9c:93:2e:20:ae:f4:5e:c4:20:16:25:32:f8:4a:ec:f8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.overcast.io

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.overcast.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akureyri.elding.is
annualreport2017.hsorka.is
annualreport2018.hsorka.is
arsskyrsla2014.hsorka.is
arsskyrsla2015.atvr.is
arsskyrsla2015.hsorka.is
arsskyrsla2016.atvr.is
arsskyrsla2016.hsorka.is
arsskyrsla2017.atvr.is
arsskyrsla2017.hbgrandi.is
arsskyrsla2017.hsorka.is
arsskyrsla2018.hbgrandi.is
arsskyrsla2018.hsorka.is
arsskyrslur.is
atvr.overcast.is
atvr2017.overcast.is
audlindagardurinn.is
benefitsportal.eurailgroup.org
bru.hsorka.is
elding-ak.overcast.is
elding-rvk.overcast.is
fia.is
fridarsetur.is
garri.is
gestur.is
gjoridsvovel.is
hbgrandi.overcast.is
hbgsamfelag2018.overcast.is
hhiweb.overcast.is
hsorka.is
hsorka2018.overcast.is
hsoverkefni.overcast.is
icelandsif.is
kjarninn.is
leslistinn.is
lfb.is
markadurinn.is
origo.overcast.is
origo2018.overcast.is
overcast.io
overcast.is
resourcepark.is
reykjavik.elding.is
samfelagsskyrsla2017.hbgrandi.is
samfelagsskyrsla2018.hbgrandi.is
si.overcast.is
snjallraedi.is
sustainabilityreport2017.hbgrandi.is
vesturverk.is
vesturverk.overcast.is
www.arsskyrslur.is
www.audlindagardurinn.is
www.fia.is
www.fridarsetur.is
www.garri.is
www.gestur.is
www.hsorka.is
www.icelandsif.is
www.kjarninn.is
www.leslistinn.is
www.lfb.is
www.markadurinn.is
www.overcast.io
www.overcast.is
www.resourcepark.is
www.snjallraedi.is
www.vesturverk.is
www.xn--markaurinn-m9a.is
xn--gjrisvovel-l9a3e.is
xn--markaurinn-m9a.is

Other certificates including the domain name overcast.io

(limited to 100 certificates)
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
sni.cloudflaressl.com
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
*.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
*.overcast.io
overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
overcast.io
overcast.io
overcast.io
www.overcast.io
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
sni.cloudflaressl.com
overcast.io
www.overcast.io
www.overcast.io
www.overcast.io
www.overcast.io

Certificate

The complete raw certificate details for www.overcast.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4v2KIRBP3Uvs+8JvrFoo
nDKRK1O9YitqfUKnQcf33wgMvpOtUl5M8d7ESQlDOVdC+MB84am5hN10gvO1C1lj
wr6Tt5LfUZUISmgzFzpXxBe0o05HAdVNzjdjBUh/0xu7sDc2zyidX6iEIj1wkJ5d
5jUmsVCEtYjBDgHGLHxstG4eav8rpzlk571vvwyvgFlyGRuxi1cyJFckql1MAOF1
N6trebdNBoeWLEP/XVVthxb8j0jOQzMxsxrSpUIgS94WBfHZjHww46LchAxKZlKH
KhOMz46AGiJHE69ffbtrBEV5IUbexNvd4Ekth1/HEgfi0CU1pSazn2bnYsyvao/D
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285075843019918708249396161688341739496618
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-19 19:20:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-17 19:20:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.overcast.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28654881942569335459435848983706141354799686922104063941570675774220932732066487094191857376870067884834273372979798789782569641155294395196339530022172128565493581504916465690105281369236290808578296630784596802031862452573127869645212696979126076415339544567214292395351187217904741398269644166291850877338676527990370721821926321960295379555350928947018481835973538582812922232841271970599622760795516240450730304192535123024866892571801102464400330452205620091618023096764044830216513859062538335058198399733821937879617215050425567137599026355362047712558905826615644657745973243085239248516530843214661280580461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70cfd3a41eb1b40d1d95250b6200bd15f21eb074
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1431 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akureyri.elding.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2017.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2018.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2014.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2015.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2015.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2016.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2016.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2018.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrslur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atvr.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atvr2017.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audlindagardurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitsportal.eurailgroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bru.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elding-ak.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elding-rvk.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fia.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fridarsetur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garri.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gjoridsvovel.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbgrandi.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbgsamfelag2018.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhiweb.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka2018.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsoverkefni.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icelandsif.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjarninn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leslistinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfb.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markadurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origo.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origo2018.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcepark.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reykjavik.elding.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samfelagsskyrsla2017.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samfelagsskyrsla2018.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snjallraedi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabilityreport2017.hbgrandi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesturverk.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesturverk.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arsskyrslur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audlindagardurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fia.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fridarsetur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garri.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gestur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandsif.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjarninn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leslistinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lfb.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markadurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resourcepark.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snjallraedi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vesturverk.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--markaurinn-m9a.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gjrisvovel-l9a3e.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--markaurinn-m9a.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169979cc11d0000040300473045022100a9bb246fa58aaed4d506bc718ee7e09565ac304badcb07f53b789d2fdfefb6ac02206ed2b05cb7743f5aa6455c97c3a74690f321941a155bcc8426c21c0fd34c2cfc00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169979cc14a000004030046304402202e993bdd84e04c20c2164717de2ff7bce4562ff04907d01af1bb90e167cea4ac02200e0f211b40a44144cd576d4ccf59227dfd4e5c79f5e373cde6132efc3d444791
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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