cmp.northamptonchron.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:36:d3:b1:da:f4:76:29:e2:6e:1b:22:3a:ef:66:f7:82:c0 was issued on by Let's Encrypt.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cmp.northamptonchron.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:d3:b1:da:f4:76:29:e2:6e:1b:22:3a:ef:66:f7:82:c0
Serial Number (int): 279993496193599529996514976374350086111936
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8e:1c:8b:47:a3:4c:62:dd:da:b1:f3:5f:f6:d1:b7:86:da:a6:bf:31
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a4:46:94:27:a9:8c:d0:94:e6:7f:04:b1:0d:9d:a5:5a:b1:2b:d4:ff
Fingerprint (sha256): 10:83:f8:29:24:ac:d4:ca:7c:22:1d:b8:26:ba:d8:a1:77:35:07:f3:a2:f1:f8:2f:9c:72:7a:dc:42:67:da:ec

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cmp.northamptonchron.co.uk

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmp.northamptonchron.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmp.belfastvibe.com
cmp.digitalkitbag.com
cmp.dirtbikerider.com
cmp.jobstoday.co.uk
cmp.jpimedialocal.co.uk
cmp.jpress.co.uk
cmp.northamptonchron.co.uk
cmp.northantstelegraph.co.uk
cmp.northumberlandgazette.co.uk
cmp.northyorkshirenews.com
cmp.pendletoday.co.uk
cmp.pocklingtonpost.co.uk
cmp.pontefractandcastlefordexpress.co.uk
cmp.portadowntimes.co.uk
cmp.portsmouth.co.uk
cmp.retfordtoday.co.uk
cmp.ripleyandheanornews.co.uk
cmp.ripongazette.co.uk
cmp.rugbyadvertiser.co.uk
cmp.ryeandbattleobserver.co.uk
cmp.scotsman.com
cmp.sheffieldtelegraph.co.uk
cmp.shieldsgazette.com
cmp.shorehamherald.co.uk
cmp.skegnessstandard.co.uk
cmp.sleafordstandard.co.uk
cmp.southyorkshiretimes.co.uk
cmp.spenboroughguardian.co.uk
cmp.sthelensreporter.co.uk
cmp.stornowaygazette.co.uk
cmp.sunderlandecho.com
cmp.sussexexpress.co.uk
cmp.thametoday.co.uk
cmp.theaccountancylist.co.uk
cmp.theengineerlist.co.uk
cmp.thescarboroughnews.co.uk
cmp.thesmartlist.co.uk
cmp.thesouthernreporter.co.uk
cmp.thestar.co.uk
cmp.thevisitor.co.uk
cmp.thornegazette.co.uk
cmp.tmxnews.co.uk
cmp.todmordennews.co.uk
cmp.tringtoday.co.uk
cmp.tyronetimes.co.uk
cmp.wakefieldexpress.co.uk
cmp.warwickcourier.co.uk
cmp.westsussextoday.co.uk
cmp.wetherbynews.co.uk
cmp.whitbygazette.co.uk
cmp.wigantoday.net
cmp.worksopguardian.co.uk
cmp.worthingherald.co.uk
cmp.wow247.co.uk
cmp.wscountytimes.co.uk
cmp.yorkshireeveningpost.co.uk
cmp.yorkshirepost.co.uk

Other certificates including the domain name northamptonchron.co.uk

(limited to 100 certificates)
findit.northamptonchron.co.uk
nationalworld.com
newsletters.northamptonchron.co.uk
da.ballymenatimes.com
findit.northamptonchron.co.uk
evenfall.memories.com.au
cmp.northamptonchron.co.uk


da.ballymenatimes.com
www.inews.co.uk

findit.northamptonchron.co.uk
local.brookingsregister.com
findit.northamptonchron.co.uk
local.northamptonchron.co.uk
consent.aberdeenshireworld.com
evenfall.memories.com.au
cmp.northamptonchron.co.uk
www.miltonkeynes.co.uk
northamptonchron.co.uk
landing.northamptonchron.co.uk
findit.northamptonchron.co.uk
local.fraserburghherald.co.uk
banburyguardian.co.uk
nationalworld.com
landing.northamptonchron.co.uk
newsletters.northamptonchron.co.uk
da.ballymenatimes.com
nationalworld.com
mylocal.journal-news.com
findit.northamptonchron.co.uk
newsletters.northamptonchron.co.uk
beta.banburyguardian.co.uk
newsletters.northamptonchron.co.uk
da.ballymenatimes.com
findit.northamptonchron.co.uk
local.news-journal.com
findit.northamptonchron.co.uk
da.ballymenatimes.com
www.portsmouth.co.uk
da.ballymenatimes.com
newsletters.northamptonchron.co.uk
admin.adforge.com
nationalworld.com
local.kcchronicle.com
landing.northamptonchron.co.uk
local.sentinelsource.com
parrysoundbeacon.parrysound.com
www.peterboroughtoday.co.uk
consent.aberdeenshireworld.com
local.madisoncourier.com
da.ballymenatimes.com
nationalworld.com
da.ballymenatimes.com
3addedminutes.com
www.portsmouth.co.uk
landing.northamptonchron.co.uk
consent.aberdeenshireworld.com
nationalworld.com
landing.northamptonchron.co.uk
landing.northamptonchron.co.uk
consent.aberdeenshireworld.com
www.miltonkeynes.co.uk
newsletters.northamptonchron.co.uk
banburyguardian.co.uk
nationalworld.com
da.ballymenatimes.com
findit.northamptonchron.co.uk
findit.northamptonchron.co.uk
newsletters.northamptonchron.co.uk
cmp.northamptonchron.co.uk
landing.northamptonchron.co.uk
local.theintell.com
da.ballymenatimes.com
banburyguardian.co.uk
da.ballymenatimes.com

Certificate

The complete raw certificate details for cmp.northamptonchron.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILFzCCCf+gAwIBAgISAzbTsdr0dinibhsiOu9m94LAMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMjUxNzEyMzRaFw0y
MDA0MjQxNzEyMzRaMCUxIzAhBgNVBAMTGmNtcC5ub3J0aGFtcHRvbmNocm9uLmNv
LnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKJVovJM9dXC7S2B
nhlQ8JTR37FPJh2ms7anYL1bncPXmbo3BzAMJXCrkVwB3JiRxaBtRBYn07WrVsYr
qaMCnCOXgLRFb4btP0Y14JM8o0Vu3qROrZ6jgbz1GWp15/3xtWLtJdULxFH54aN+
EjTOPjDaAe0EXCkkuXHMJlXJyWiGbXLRbUBJIXuWgk8rPY2LW/g3WXYvJb84BwTE
59A7Tpga1EmEuJex0gOhPRxzo/invNuVR63y3i5kmJuT3CO2qcMRCH+Iwb+uSXRk
05yUjEjVElbPhdHGOSKdlXZSQoavBxLCVhn3xEI7tasY7rDJHhMKQZ3XQX7vXeWt
ZKzdbwIDAQABo4IIGjCCCBYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSOHItHo0xi
3dqx81/20beG2qa/MTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMIIFzAYDVR0RBIIFwzCCBb+CE2NtcC5iZWxmYXN0dmli
ZS5jb22CFWNtcC5kaWdpdGFsa2l0YmFnLmNvbYIVY21wLmRpcnRiaWtlcmlkZXIu
Y29tghNjbXAuam9ic3RvZGF5LmNvLnVrghdjbXAuanBpbWVkaWFsb2NhbC5jby51
a4IQY21wLmpwcmVzcy5jby51a4IaY21wLm5vcnRoYW1wdG9uY2hyb24uY28udWuC
HGNtcC5ub3J0aGFudHN0ZWxlZ3JhcGguY28udWuCH2NtcC5ub3J0aHVtYmVybGFu
ZGdhemV0dGUuY28udWuCGmNtcC5ub3J0aHlvcmtzaGlyZW5ld3MuY29tghVjbXAu
cGVuZGxldG9kYXkuY28udWuCGWNtcC5wb2NrbGluZ3RvbnBvc3QuY28udWuCKGNt
cC5wb250ZWZyYWN0YW5kY2FzdGxlZm9yZGV4cHJlc3MuY28udWuCGGNtcC5wb3J0
YWRvd250aW1lcy5jby51a4IUY21wLnBvcnRzbW91dGguY28udWuCFmNtcC5yZXRm
b3JkdG9kYXkuY28udWuCHWNtcC5yaXBsZXlhbmRoZWFub3JuZXdzLmNvLnVrghZj
bXAucmlwb25nYXpldHRlLmNvLnVrghljbXAucnVnYnlhZHZlcnRpc2VyLmNvLnVr
gh5jbXAucnllYW5kYmF0dGxlb2JzZXJ2ZXIuY28udWuCEGNtcC5zY290c21hbi5j
b22CHGNtcC5zaGVmZmllbGR0ZWxlZ3JhcGguY28udWuCFmNtcC5zaGllbGRzZ2F6
ZXR0ZS5jb22CGGNtcC5zaG9yZWhhbWhlcmFsZC5jby51a4IaY21wLnNrZWduZXNz
c3RhbmRhcmQuY28udWuCGmNtcC5zbGVhZm9yZHN0YW5kYXJkLmNvLnVrgh1jbXAu
c291dGh5b3Jrc2hpcmV0aW1lcy5jby51a4IdY21wLnNwZW5ib3JvdWdoZ3VhcmRp
YW4uY28udWuCGmNtcC5zdGhlbGVuc3JlcG9ydGVyLmNvLnVrghpjbXAuc3Rvcm5v
d2F5Z2F6ZXR0ZS5jby51a4IWY21wLnN1bmRlcmxhbmRlY2hvLmNvbYIXY21wLnN1
c3NleGV4cHJlc3MuY28udWuCFGNtcC50aGFtZXRvZGF5LmNvLnVrghxjbXAudGhl
YWNjb3VudGFuY3lsaXN0LmNvLnVrghljbXAudGhlZW5naW5lZXJsaXN0LmNvLnVr
ghxjbXAudGhlc2NhcmJvcm91Z2huZXdzLmNvLnVrghZjbXAudGhlc21hcnRsaXN0
LmNvLnVrgh1jbXAudGhlc291dGhlcm5yZXBvcnRlci5jby51a4IRY21wLnRoZXN0
YXIuY28udWuCFGNtcC50aGV2aXNpdG9yLmNvLnVrghdjbXAudGhvcm5lZ2F6ZXR0
ZS5jby51a4IRY21wLnRteG5ld3MuY28udWuCF2NtcC50b2Rtb3JkZW5uZXdzLmNv
LnVrghRjbXAudHJpbmd0b2RheS5jby51a4IVY21wLnR5cm9uZXRpbWVzLmNvLnVr
ghpjbXAud2FrZWZpZWxkZXhwcmVzcy5jby51a4IYY21wLndhcndpY2tjb3VyaWVy
LmNvLnVrghljbXAud2VzdHN1c3NleHRvZGF5LmNvLnVrghZjbXAud2V0aGVyYnlu
ZXdzLmNvLnVrghdjbXAud2hpdGJ5Z2F6ZXR0ZS5jby51a4ISY21wLndpZ2FudG9k
YXkubmV0ghljbXAud29ya3NvcGd1YXJkaWFuLmNvLnVrghhjbXAud29ydGhpbmdo
ZXJhbGQuY28udWuCEGNtcC53b3cyNDcuY28udWuCF2NtcC53c2NvdW50eXRpbWVz
LmNvLnVrgh5jbXAueW9ya3NoaXJlZXZlbmluZ3Bvc3QuY28udWuCF2NtcC55b3Jr
c2hpcmVwb3N0LmNvLnVrMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T
AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB
BgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQ
NKawqKqOsnMAAAFv3efPYwAABAMASDBGAiEA51YGu1Ihlsd2DHxfbZU+XkBOHPgh
DCW8POc4Jr6GrIYCIQCrK8aOmf0KZR5t5NOXR0lQgyNGdYXyzdFUmpAU2MHmZgB3
ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABb93nz1kAAAQDAEgw
RgIhAMgMeINOnPV09s/bJBZhLYyGEooBOpVM9Zl8kmnVQqYaAiEAhsmjB7wxZ8ii
aZuvZTND6Z0tj1MqMk1bPQbtSy6+v5wwDQYJKoZIhvcNAQELBQADggEBAJlH9JNf
XN2pvmLraO/nx1jZKOZ+GAsZiA/VVHuOSMMieWbelUNcrfkV91oK4IQbfOaF3rP2
gJIoDqnqVcbQ8tCGJs18tgdS7bNQTtwaxUb9cF0eJ39P6UMRqksMNOzMer++8Zf8
hQJjDG4t1sSfKlzircSepiM5H0GllHpTa9d2V8TYUM3UG24IYPbKAS7nt5iPyaSR
0lXGGDfJ2irK3TPs3DrMkhNlnwbPsDkdFYj5hqHvmQ34zdefZGYNH4WYc52wQmPy
bFJSnNyvrAMlxR22qlYvLewbfmjQzQQAmTx9KzXTqlNSuqNnou3EFeOqtFfQ1KgP
9lC3Nj9f2jiU2Qc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKJVovJM9dXC7S2BnhlQ
8JTR37FPJh2ms7anYL1bncPXmbo3BzAMJXCrkVwB3JiRxaBtRBYn07WrVsYrqaMC
nCOXgLRFb4btP0Y14JM8o0Vu3qROrZ6jgbz1GWp15/3xtWLtJdULxFH54aN+EjTO
PjDaAe0EXCkkuXHMJlXJyWiGbXLRbUBJIXuWgk8rPY2LW/g3WXYvJb84BwTE59A7
Tpga1EmEuJex0gOhPRxzo/invNuVR63y3i5kmJuT3CO2qcMRCH+Iwb+uSXRk05yU
jEjVElbPhdHGOSKdlXZSQoavBxLCVhn3xEI7tasY7rDJHhMKQZ3XQX7vXeWtZKzd
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279993496193599529996514976374350086111936
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-25 17:12:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-24 17:12:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmp.northamptonchron.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24822757907493332038295355266218097709810228264151417324838669605767841007218866886370158331188377082913154753867685954045752765950420757636835034991868752953054332061587523227231586282583017557718086658821246389581129370760818077258020034527269643573907567547032074771341734852055774987648229572876366976983317909485214893049458277878772728245697861698109827541164134691840859064376713000096224757182986712557075097513594775374601293316741541403280031118474814097758910279896543615618838489528554704669613491840077965262590850888036935527771247755423178151212575467706652959295294693319834905610355465664881442479471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e1c8b47a34c62dddab1f35ff6d1b786daa6bf31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1475 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.belfastvibe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.digitalkitbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.dirtbikerider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.jobstoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.jpimedialocal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.jpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.northamptonchron.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.northantstelegraph.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.northumberlandgazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.northyorkshirenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pendletoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pocklingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pontefractandcastlefordexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.portadowntimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.portsmouth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.retfordtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.ripleyandheanornews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.ripongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.rugbyadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.ryeandbattleobserver.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.scotsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sheffieldtelegraph.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.shieldsgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.shorehamherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.skegnessstandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sleafordstandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.southyorkshiretimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.spenboroughguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sthelensreporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.stornowaygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sunderlandecho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sussexexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thametoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.theaccountancylist.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.theengineerlist.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thescarboroughnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thesmartlist.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thesouthernreporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thestar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thevisitor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thornegazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tmxnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.todmordennews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tringtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tyronetimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.wakefieldexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.warwickcourier.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.westsussextoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.wetherbynews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.whitbygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.wigantoday.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.worksopguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.worthingherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.wow247.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.wscountytimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.yorkshireeveningpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.yorkshirepost.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fdde7cf630000040300483046022100e75606bb522196c7760c7c5f6d953e5e404e1cf8210c25bc3ce73826be86ac86022100ab2bc68e99fd0a651e6de4d3974749508323467585f2cdd1549a9014d8c1e666007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fdde7cf590000040300483046022100c80c78834e9cf574f6cfdb2416612d8c86128a013a954cf5997c9269d542a61a02210086c9a307bc3167c8a2699baf653343e99d2d8f532a324d5b3d06ed4b2ebebf9c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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