winit.coolfm.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c8:f7:a9:9c:99:03:56:b6:ab:ae:d4:56:7c:3b:d6:44:cf was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=winit.coolfm.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c8:f7:a9:9c:99:03:56:b6:ab:ae:d4:56:7c:3b:d6:44:cf
Serial Number (int): 416834817100535486205277653083180802393295
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0d:54:cc:c0:82:1b:52:3f:a4:77:eb:cc:c8:84:df:b8:72:bb:48:ca
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e2:d5:a5:c4:d0:d0:c8:24:9a:8d:ec:c2:d3:f2:1b:38:68:0b:fd:e3
Fingerprint (sha256): 03:ca:1b:aa:65:45:22:68:ff:89:fc:66:1a:c1:8e:18:dd:db:40:1f:73:03:3b:26:ba:b2:74:53:a2:bc:ac:b1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate winit.coolfm.co.uk

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for winit.coolfm.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clickswin.takeabreak.co.uk
clickswin.tvchoicemagazine.co.uk
winit.bikemagazine.co.uk
winit.classiccargiveaways.co.uk
winit.classiccarsmagazine.co.uk
winit.coolfm.co.uk
winit.downtowncountry.co.uk
winit.eatinmagazine.co.uk
winit.gardennewsmagazine.co.uk
winit.gofishing.co.uk
winit.hallam2.co.uk
winit.metroradio.co.uk
winit.metroradio2.co.uk
winit.metroradio3.co.uk
winit.mfr.co.uk
winit.mfr2.co.uk
winit.mfr3.co.uk
winit.model-rail.co.uk
winit.moderngardensmagazine.co.uk
winit.mojo4music.com
winit.motherandbaby.co.uk
winit.motorcyclenews.com
winit.northsound1.com
winit.northsound2.com
winit.parkers.co.uk
winit.performancebikes.co.uk
winit.photoanswers.co.uk
winit.planetradio.co.uk
winit.planetrock.com
winit.practicalclassics.co.uk
winit.practicalsportsbikesmag.co.uk
winit.qthemusic.com
winit.radioaire.co.uk
winit.radioaire2.co.uk
winit.radioaire3.co.uk
winit.radioborders.com
winit.radiocity.co.uk
winit.radiocity2.co.uk
winit.radiocity3.co.uk
winit.recipes-plus.co.uk
winit.ride.co.uk
winit.rockfm.co.uk
winit.rockfm2.co.uk
winit.rockfm3.co.uk
winit.steamrailway.co.uk
winit.tay2.co.uk
winit.tay3.co.uk
winit.tayfm.co.uk
winit.tfm2.co.uk
winit.tfm3.co.uk
winit.tfmradio.co.uk
winit.thatslife.co.uk
winit.thehitsradio.com
winit.todaysgolfer.co.uk
winit.trailrunningmag.co.uk
winit.tvchoicemagazine.co.uk
winit.viking2.co.uk
winit.viking3.co.uk
winit.vikingfm.co.uk
winit.wave105.com
winit.westfm.co.uk
winit.westsound.co.uk
winit.westsoundradio.com
winit.winautumn.co.uk
winit.winchristmas.co.uk
winit.winitforhim.co.uk
winit.winsomething.co.uk
winit.winspring.co.uk
winit.winsummer.co.uk
winit.wintoys.co.uk
winit.yourhorse.co.uk
winit.yours.co.uk

Other certificates including the domain name coolfm.co.uk

(limited to 100 certificates)
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.coolfm.co.uk
winit.bauerpublishing.com
plus.coolfm.co.uk
*.atseven.co.uk
app.coolfm.co.uk
winit.bauerpublishing.com
assets.coolfm.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit-stage.bauerpublishing.com
40plus.coolfm.co.uk
winit.bauerpublishing.com
planetradiooffers.co.uk
*.atseven.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
www.key103-offers.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
dating.bauerradio.com
*.atseven.co.uk
*.atseven.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
www.key103-offers.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
dating.bauerradio.com
*.atseven.co.uk
winit.bauerpublishing.com
dating.coolfm.co.uk
winit.bauerpublishing.com
dating.bauerradio.com
www.key103-offers.co.uk
winit.bauerpublishing.com
clickswin.bellamagazine.co.uk
app.coolfm.co.uk
planetradiooffers.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
*.atseven.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit-stage.bauerpublishing.com
planetradiooffers.co.uk
winit.bauerpublishing.com
app.coolfm.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
plus.coolfm.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
*.atseven.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
app.coolfm.co.uk
40plus.coolfm.co.uk
winit.bauerpublishing.com
assets.coolfm.co.uk
*.atseven.co.uk
www.key103-offers.co.uk
winit.bauerpublishing.com
winit.mojo4music.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
assets.coolfm.co.uk
winit.bauerpublishing.com
escapes.plus.coolfm.co.uk
winit.bauerpublishing.com
*.atseven.co.uk
winit.coolfm.co.uk
40plus.coolfm.co.uk
winit.bauerpublishing.com
app.coolfm.co.uk
dating.bauerradio.com
*.atseven.co.uk
winit.bauerpublishing.com
40plus.coolfm.co.uk
winit.bauerpublishing.com
dating.bauerradio.com
winit.bauerpublishing.com
winit.bauerpublishing.com
www.key103-offers.co.uk
40plus.coolfm.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com

Certificate

The complete raw certificate details for winit.coolfm.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorPxugiy+7XafL7Yw+h5
zgBzJJGvBvfY0j8MCuBrGBj9170A9VwdTxGy+xMO6v1QPllNAFTbfQjuhDqBGeuQ
lvPWzlxN/QwlSmqTFz1Y6+iTbwx3qK1/rwfJXD8aqCGQBy5bR7mVnqAYQ6JajBQJ
KxR38r9qlJLlK0E6JFC0tc0gnNAFUNRSI5lw/53+w9MB6HyJHtaZ3GtHx+4o97uh
1lnWMLx+lgFQ2SSb8Rtu/bUAKnhr6JNWjtst+xbhT6Nro6Ca/1yCWFdV41XmDSvV
Oyy7sMZ1/GjMUvuxyVZBYKlzXRLdU/Z9wK5RyiHAWhXAziaEKu7he8LCVa6E7s3U
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416834817100535486205277653083180802393295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 14:05:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 14:05:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'winit.coolfm.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20539339218817851654910382208132679811523293321226786995149277832394166284556488521586964868808871135676058717067831455668669735434458720979533058731445318227040320803615655806360032884785962652711766862404559210557777163948409558598813204791407492743215675310430222778492765783624775507507357230742855240258730777633025286420735511352926721348878113679728215534809235822716856299550643408548057019732366864374908078170321950353524992532238756517386165717650199648326438326520860963604717979800561261200292719959681519303856700830787300460722577930686952587431221914235703634011546880942403175090543771157438814606563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d54ccc0821b523fa477ebccc884dfb872bb48ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1734 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.takeabreak.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.tvchoicemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.bikemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.classiccargiveaways.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.classiccarsmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.coolfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.downtowncountry.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.eatinmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.gardennewsmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.gofishing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.hallam2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.metroradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.metroradio2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.metroradio3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.model-rail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.moderngardensmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mojo4music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.motherandbaby.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.motorcyclenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.northsound1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.northsound2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.parkers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.performancebikes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.photoanswers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.planetradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.planetrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.practicalclassics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.practicalsportsbikesmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.qthemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioborders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.recipes-plus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.ride.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.steamrailway.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tay2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tay3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tayfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfm2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfm3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfmradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.thatslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.thehitsradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.todaysgolfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.trailrunningmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tvchoicemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.viking2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.viking3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.vikingfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.wave105.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.westfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.westsound.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.westsoundradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winautumn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winchristmas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winitforhim.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winsomething.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winspring.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winsummer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.wintoys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.yourhorse.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.yours.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d82b466510000040300463044022012b9225cf55b5aa20f447ab47ce72c74d747bcf815d0eb596535211c1176954b02202e1fece5a8c5b619ecbad7c7abe880f99acb35ba01269aeb139d65261afe84dd00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d82b4664b0000040300473045022100e92bfc492c6018a1040b3ac94730c8ce9de5c586f4ba175f0f1b0e0741f48241022074e04d53b7d2bc00f043f01518a4b05ceb5292f2ac802f821b5dc0a292d4d324
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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