winit.rockfm2.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3d:b9:06:2e:89:df:05:b1:4f:37:e9:7f:01:68:da:a4:ec was issued on by Let's Encrypt.

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=winit.rockfm2.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:b9:06:2e:89:df:05:b1:4f:37:e9:7f:01:68:da:a4:ec
Serial Number (int): 282340021454373468928161025966162214298860
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f7:1d:cf:ac:d7:e0:77:ce:30:65:22:99:b7:55:40:0c:bc:20:38:94
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e3:e7:96:2d:15:a9:aa:ff:82:51:a7:a3:2c:4d:0a:1f:a7:df:af:4f
Fingerprint (sha256): 06:8c:86:3e:d7:f3:44:cf:33:a6:34:b2:d5:40:0e:73:ee:27:82:e0:f9:d2:50:2b:52:18:c9:3e:d8:61:66:91

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate winit.rockfm2.co.uk

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for winit.rockfm2.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

winit.bikemagazine.co.uk
winit.downtowncountry.co.uk
winit.metroradio.co.uk
winit.metroradio2.co.uk
winit.metroradio3.co.uk
winit.mfr.co.uk
winit.mfr2.co.uk
winit.mfr3.co.uk
winit.model-rail.co.uk
winit.moderngardensmagazine.co.uk
winit.mojo4music.com
winit.motherandbaby.co.uk
winit.motorcyclenews.com
winit.northsound1.com
winit.northsound2.com
winit.parkers.co.uk
winit.performancebikes.co.uk
winit.photoanswers.co.uk
winit.planetradio.co.uk
winit.planetrock.com
winit.practicalclassics.co.uk
winit.practicalsportsbikesmag.co.uk
winit.qthemusic.com
winit.radioaire.co.uk
winit.radioaire2.co.uk
winit.radioaire3.co.uk
winit.radioborders.com
winit.radiocity.co.uk
winit.radiocity2.co.uk
winit.radiocity3.co.uk
winit.recipes-plus.co.uk
winit.ride.co.uk
winit.rockfm.co.uk
winit.rockfm2.co.uk
winit.rockfm3.co.uk
winit.steamrailway.co.uk
winit.tay2.co.uk
winit.tay3.co.uk
winit.tayfm.co.uk
winit.tfm2.co.uk
winit.tfm3.co.uk
winit.tfmradio.co.uk
winit.thehitsradio.com
winit.todaysgolfer.co.uk
winit.trailrunningmag.co.uk
winit.viking2.co.uk
winit.viking3.co.uk
winit.vikingfm.co.uk
winit.wave105.com
winit.westfm.co.uk
winit.westsound.co.uk
winit.westsoundradio.com
winit.winchristmas.co.uk
winit.winitforhim.co.uk
winit.winsomething.co.uk
winit.winsummer.co.uk
winit.wintoys.co.uk
winit.yourhorse.co.uk
winit.yours.co.uk

Other certificates including the domain name rockfm2.co.uk

(limited to 100 certificates)
winit.planetradio.co.uk
winit.coolfm.co.uk
winit.bauerpublishing.com
winit.rockfm2.co.uk
winit.metroradio2.co.uk
winit-stage.rockfm2.co.uk
winit.metroradio.co.uk
*.atseven.co.uk
winit.todaysgolfer.co.uk
winit-stage.bauerpublishing.com
winit.metroradio.co.uk
*.atseven.co.uk
winit.metroradio.co.uk
winit.westsound.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.tay3.co.uk
*.atseven.co.uk
winit.metroradio.co.uk
winit.model-rail.co.uk
*.atseven.co.uk
app.rockfm2.co.uk
winit.metroradio.co.uk
*.atseven.co.uk
winit.rockfm2.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.planetradio.co.uk
winit.rockfm2.co.uk
clickswin.bellamagazine.co.uk
winit.metroradio.co.uk
*.atseven.co.uk
winit.bikemagazine.co.uk
winit.metroradio.co.uk
winit-stage.bauerpublishing.com
winit.metroradio.co.uk
winit.bauerpublishing.com
winit.mfr3.co.uk
winit.mfr2.co.uk
winit.mfr.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
*.atseven.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
*.atseven.co.uk
winit.planetradio.co.uk
winit.mojo4music.com
winit.mfr2.co.uk
winit.mfr3.co.uk
winit.metroradio.co.uk
app.rockfm2.co.uk
*.atseven.co.uk
app.rockfm2.co.uk
winit.metroradio.co.uk
*.atseven.co.uk
winit.planetrock.com
winit.motorcyclenews.com
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.bauerpublishing.com
*.atseven.co.uk
winit.mojo4music.com
winit.metroradio.co.uk
winit.metroradio.co.uk
*.atseven.co.uk
winit.qthemusic.com
winit.downtowncountry.co.uk
winit-stage.bauerpublishing.com
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.bauerpublishing.com
app.rockfm2.co.uk
*.atseven.co.uk
winit.metroradio.co.uk
winit-stage.rockfm2.co.uk
winit.metroradio3.co.uk
*.atseven.co.uk
*.atseven.co.uk
winit.mfr3.co.uk
*.atseven.co.uk
*.atseven.co.uk
winit.metroradio2.co.uk
winit.radiocity.co.uk
app.rockfm2.co.uk
winit-stage.bauerpublishing.com
app.rockfm2.co.uk
*.atseven.co.uk
clickswin.bellamagazine.co.uk
winit.motorcyclenews.com
winit.metroradio.co.uk
winit.radiocity3.co.uk
winit.metroradio.co.uk
winit.steamrailway.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk

Certificate

The complete raw certificate details for winit.rockfm2.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO9T4GqTvfsgeWYj+GKw
DluaWf3aApahtNJordrJiQxqyW2rgLlJ4POdhxmDACvjH+aChfeM50G72Nbz3XFP
7m/cQ6wKAYVaD1UTbiqvtSor+UuNbS7JAMTrRYjV3jGvVfOgpwejDj3gqdJqxG2N
FSKZ/1BXhOzi5xH65aVo6UzCLmG1NAFN14hJQLerkzofoN2RPfRzfDHAeDue5u1A
nGC5vdSgZCl7CCwR+wOCFz30wC/9rP5DBupQsrgIoiNw1Nv5CpcETnkAQNf3Q57k
w8F3qtV04qjpS+kJWw9b97B24GyWRGA9zhIg6+4c/+9/PRKqX+vwUIg+zQMg/+EI
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282340021454373468928161025966162214298860
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 12:36:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 12:36:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'winit.rockfm2.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24355771412830268671362793814688648430757920464514751705854713671161048591856247243393713397618802672032225973382957969189250137403519403364801768682831084233373984832726415239494857074778512739218585122593374252572198742459041268303776217975411986717221420616321514311230199620595486509580387403313654967201520765649939870227741327909541571239910396744341338024745288062157136388973124747267013989097623348659569917766145470013328083517272713103216426432440251811973229772491344760823856565483196845980653433009689811680428445484169209693513417922078923149241260018950373250717002481257384131425018918808502367488201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f71dcfacd7e077ce30652299b755400cbc203894
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1384 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.bikemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.downtowncountry.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.metroradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.metroradio2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.metroradio3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.model-rail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.moderngardensmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mojo4music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.motherandbaby.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.motorcyclenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.northsound1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.northsound2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.parkers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.performancebikes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.photoanswers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.planetradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.planetrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.practicalclassics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.practicalsportsbikesmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.qthemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioborders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.recipes-plus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.ride.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.steamrailway.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tay2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tay3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tayfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfm2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfm3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfmradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.thehitsradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.todaysgolfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.trailrunningmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.viking2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.viking3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.vikingfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.wave105.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.westfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.westsound.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.westsoundradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winchristmas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winitforhim.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winsomething.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winsummer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.wintoys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.yourhorse.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.yours.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d826373f4000004030047304502210090ab7335328c956c4dc38b412da7cc0881891366c364a6cab11ff75fc51a76d702203faf88f7c5739a5d05949f087d548183cb74902f98cb43592e914e4289ec519200750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d826373fb0000040300463044022077e8b005ecb144b608235bebbb0a0c055563ecf4942470ec1a2bfbcca74a7d620220424ce08d6311197fc2f8e40cabf2440059bab9478a89aaec9950b2adb57abb6d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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