subscription.theweek.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:61:d9:16:8c:b8:b6:51:22:1d:b4:96:1e:0d:1e:5d:b2 was issued on by Let's Encrypt.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=subscription.theweek.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:61:d9:16:8c:b8:b6:51:22:1d:b4:96:1e:0d:1e:5d:b2
Serial Number (int): 329863675847760929675058123860750976834994
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6a:5c:f2:09:2a:5d:71:39:ae:c7:0c:07:47:31:b4:8d:6b:77:ef:84
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b0:bf:9f:7d:f3:30:1a:93:e8:ab:b6:5c:de:c7:41:6a:24:31:66:a3
Fingerprint (sha256): 06:fb:16:aa:c8:4b:83:e3:bf:24:e9:b2:3a:1e:f6:d4:c0:19:23:cf:23:8d:00:c5:ce:a3:73:69:26:97:39:86

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate subscription.theweek.co.uk

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for subscription.theweek.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

astonmagazine.co.uk
bikesetc.co.uk
crossstitchermag.co.uk
cyclistmag.co.uk
enzo-magazine.co.uk
getcomputeractive.co.uk
magazinedeals.co.uk
minecraftworldmagazine.co.uk
mineworldmagazine.co.uk
schools.theweekjunior.co.uk
sciencenature.theweekjunior.co.uk
subscribe.autoexpress.co.uk
subscribe.computershopper.co.uk
subscribe.enzo-magazine.co.uk
subscribe.evo.co.uk
subscribe.forteantimes.com
subscribe.lrm.co.uk
subscribe.micromart.co.uk
subscribe.octane-magazine.com
subscribe.pcpro.co.uk
subscribe.viz.co.uk
subscribe.webuser.co.uk
subscribe.yourfamilyhistorymag.co.uk
subscription.moneyweek.co.uk
subscription.theweek.co.uk
theweekjunior.co.uk
try.theweek.co.uk
trytheweek.co.uk
www.astonmagazine.co.uk
www.bikesetc.co.uk
www.crossstitchermag.co.uk
www.cyclistmag.co.uk
www.enzo-magazine.co.uk
www.getcomputeractive.co.uk
www.magazinedeals.co.uk
www.minecraftworldmagazine.co.uk
www.mineworldmagazine.co.uk
www.schools.theweekjunior.co.uk
www.subscribe.viz.co.uk
www.theweekjunior.co.uk
www.try.theweek.co.uk
www.trytheweek.co.uk

Other certificates including the domain name theweek.co.uk

(limited to 100 certificates)
www.pugpig.com
aex-mms.autoexpress.co.uk
www.theweek.co.uk
dg-0094-4765bd0.client-tls.adestra.com
subscription.theweek.co.uk
adspecs.dennis.co.uk
ceros3.map.fastly.net
aex-mms.autoexpress.co.uk
www.pugpig.com
aex-mms.autoexpress.co.uk
www.pugpig.com
s5-san.cloudinary.com
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
derstandard-spat.derstandard.at
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
*.pinterestceros.com
dns-vetting1j.map.fastly.net
www.pugpig.com
subscription.theweek.co.uk
s5-san.cloudinary.com
dns-vetting1j.map.fastly.net
r626.womanandhome.com
z980.carthrottle.com
theweek.co.uk
*.theweek.co.uk
dns-vetting1j.map.fastly.net
www.pugpig.com
www.pugpig.com
dns-vetting1j.map.fastly.net
ceros3.map.fastly.net
*.content.pugpig-dev.com
derstandard-spat.derstandard.at
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
aex-mms.autoexpress.co.uk
ceros3.map.fastly.net
ceros3.map.fastly.net
ceros3.map.fastly.net
s5-san.cloudinary.com
dg-0094-4765bd0.client-tls.adestra.com
theweek.co.uk
*.pinterestceros.com
dns-vetting1j.map.fastly.net
aex-mms.autoexpress.co.uk
s5-cloudinary-pin.map.fastly.net
dns-vetting1j.map.fastly.net
aex-mms.autoexpress.co.uk
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
s5-san.cloudinary.com
www.pugpig.com
adspecs.dennis.co.uk
dns-vetting1j.map.fastly.net
s5-cloudinary-pin.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
www.pugpig.com
derstandard-spat.derstandard.at
auth.astonmagazine.co.uk
dns-vetting1j.map.fastly.net
ceros3.map.fastly.net
s5-cloudinary-pin.map.fastly.net
*.content.pugpig-dev.com
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
s5-cloudinary-pin.map.fastly.net
adspecs.dennis.co.uk
ceros3.map.fastly.net
dns-vetting1.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
l468.drivingelectric.com
www.pugpig.com
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
dns-vetting1j.map.fastly.net
adspecs.dennis.co.uk
s5-san.cloudinary.com
s5-san.cloudinary.com
r468.evo.co.uk
s5-san.cloudinary.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
www.pugpig.com
l468.drivingelectric.com
ceros3.map.fastly.net
derstandard-spat.derstandard.at
www.pugpig.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
aex-mms.autoexpress.co.uk
www.pugpig.com
adspecs.dennis.co.uk
www.pugpig.com
auth.autoexpress.co.uk
mmm.theweek.co.uk
dg-0094-4765bd0.client-tls.adestra.com
www.pugpig.com
dg-0094-4765bd0.client-tls.adestra.com

Certificate

The complete raw certificate details for subscription.theweek.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+KV9MBZ82rdXUHmocNF
ZMsWfUd2xMPph8ArJjdGXbniEDvEZ1wkpkVbhHgcPKJ903Ew94mI60vFa2WGi2QT
spPyuhgrfV3LqKPQvTJdqgWpTJcIkSAwaL1TuikW+8Ved2j+oQyZZb4wGYMeoWA6
LcDKvnFv37YwJoRudf+FSFgEvLbJ4gXJ58LKufLSBF36R6kMg00NwWwPQYYYjiCC
cDdlTbShZZDERRxX+G7Yqp/CRKcOnhQc/lxwLYC2g99sVg3et+A6HiJbdsnux9AY
pRdK8aDsxE/Cekd2wxF496JbLXmOlWge4yNNvBRtaCAU+EEOsVO348sSiNnQBtzR
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329863675847760929675058123860750976834994
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-27 08:44:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-25 08:44:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subscription.theweek.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26243062733487993764187855446123220998796202102239940036771701878967946465106996694652832307001485468430145260906275027789662428683869500757505016715681213971249909567786371104184505551211063479623905724109868196326903604648238408604637091520797108278054353586469375788777505614367977268861719141458619894280711433909721326668300091858330132921794335969160523945463714089615820250844243448253030836179170540368541348972213497918724287165873221699985201465034386395139662733392576062734038039536665719385677175333519031708176308655683326407929744598965637260708197975910634603032543499790673644996851853047910251680081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a5cf2092a5d7139aec70c074731b48d6b77ef84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1078 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astonmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikesetc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossstitchermag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclistmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enzo-magazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getcomputeractive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazinedeals.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minecraftworldmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineworldmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schools.theweekjunior.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciencenature.theweekjunior.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.autoexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.computershopper.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.enzo-magazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.evo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.forteantimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.lrm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.micromart.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.octane-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.pcpro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.viz.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.webuser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.yourfamilyhistorymag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.moneyweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theweekjunior.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trytheweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astonmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bikesetc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crossstitchermag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyclistmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enzo-magazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getcomputeractive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazinedeals.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minecraftworldmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mineworldmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schools.theweekjunior.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subscribe.viz.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theweekjunior.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.try.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trytheweek.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b9852bbf3000004030046304402204718493bd526d7709c5d4fd79c5c0b85bcc7a48858a793a7398d767f5e57eab20220329512bba1c157718322b28d6013e62fcdfe5e331d21806cad2d47dc9fcbf42d00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b9852bbe000000403004630440220075d4b36323082bd05e2bcc3ff233cbbe89ba4ee2b4cf4d4728e11faa2d9c44f02205c706d03cdeab38963182516039ed4a7aa9671feb7dd5ddec0dc9d9eeae66891
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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