auth.astonmagazine.co.uk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:64:0d:d1:61:04:d3:88:79:e1:83:5e:33:e4:bc:bf:d9:3f was issued on by Let's Encrypt.
With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=auth.astonmagazine.co.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:64:0d:d1:61:04:d3:88:79:e1:83:5e:33:e4:bc:bf:d9:3fSerial Number (int): 295383461609139334502350459392953509992767
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: db:83:ca:97:3a:0b:e0:5b:de:19:1a:4c:2b:fe:3c:f1:df:13:89:2d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 08:51:5f:d2:84:fb:1a:f8:81:c6:fc:b7:18:a5:2b:15:4a:11:89:aa
Fingerprint (sha256): 11:b0:9b:73:6e:c9:67:15:f9:74:81:11:ff:7d:0b:4f:da:a3:1f:de:9f:1b:a8:e7:42:1d:7e:d0:b6:82:cc:a1
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate auth.astonmagazine.co.uk
26
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for auth.astonmagazine.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
auth.astonmagazine.co.uk
auth.bikesetc.co.uk
auth.crossstitchermag.co.uk
auth.cyclistmag.co.uk
auth.getcomputeractive.co.uk
auth.magazinedeals.co.uk
auth.minecraftworldmagazine.co.uk
auth.mineworldmagazine.co.uk
auth.schools.theweekjunior.co.uk
auth.subscribe.autoexpress.co.uk
auth.subscribe.computershopper.co.uk
auth.subscribe.evo.co.uk
auth.subscribe.forteantimes.com
auth.subscribe.lrm.co.uk
auth.subscribe.micromart.co.uk
auth.subscribe.octane-magazine.com
auth.subscribe.pcpro.co.uk
auth.subscribe.viz.co.uk
auth.subscribe.webuser.co.uk
auth.subscribe.yourfamilyhistorymag.co.uk
auth.subscription.moneyweek.co.uk
auth.subscription.theweek.co.uk
auth.subscriptions.dennis.co.uk
auth.theweekjunior.co.uk
auth.try.theweek.co.uk
auth.trytheweek.co.uk
auth.bikesetc.co.uk
auth.crossstitchermag.co.uk
auth.cyclistmag.co.uk
auth.getcomputeractive.co.uk
auth.magazinedeals.co.uk
auth.minecraftworldmagazine.co.uk
auth.mineworldmagazine.co.uk
auth.schools.theweekjunior.co.uk
auth.subscribe.autoexpress.co.uk
auth.subscribe.computershopper.co.uk
auth.subscribe.evo.co.uk
auth.subscribe.forteantimes.com
auth.subscribe.lrm.co.uk
auth.subscribe.micromart.co.uk
auth.subscribe.octane-magazine.com
auth.subscribe.pcpro.co.uk
auth.subscribe.viz.co.uk
auth.subscribe.webuser.co.uk
auth.subscribe.yourfamilyhistorymag.co.uk
auth.subscription.moneyweek.co.uk
auth.subscription.theweek.co.uk
auth.subscriptions.dennis.co.uk
auth.theweekjunior.co.uk
auth.try.theweek.co.uk
auth.trytheweek.co.uk
Other certificates including the domain name astonmagazine.co.uk
(limited to 100 certificates)
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
subscription.theweek.co.uk
adspecs.dennis.co.uk
dns-vetting1-mims-pawel.map.fastly.net
abafrica.accaglobal.com
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
subscription.theweek.co.uk
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
adspecs.dennis.co.uk
dns-vetting1-mims-pawel.map.fastly.net
auth.astonmagazine.co.uk
dns-vetting1-mims-pawel.map.fastly.net
adspecs.dennis.co.uk
www2.pugpig.com
adspecs.dennis.co.uk
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
adspecs.dennis.co.uk
www2.pugpig.com
abafrica.accaglobal.com
www2.pugpig.com
www2.pugpig.com
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
astonmagazine.co.uk
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
abafrica.accaglobal.com
dns-vetting1-mims-pawel.map.fastly.net
subscription.theweek.co.uk
subscription.theweek.co.uk
auth.subscription.theweek.co.uk
www2.pugpig.com
www2.pugpig.com
www2.pugpig.com
auth.astonmagazine.co.uk
www2.pugpig.com
www2.pugpig.com
adspecs.dennis.co.uk
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
www2.pugpig.com
www2.pugpig.com
www2.pugpig.com
abafrica.accaglobal.com
www2.pugpig.com
www2.pugpig.com
www2.pugpig.com
www2.pugpig.com
aneveningwithastonmartin.co.uk
www2.pugpig.com
www2.pugpig.com
astonmagazine.co.uk
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
astonmagazine.co.uk
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
astonmagazine.co.uk
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
abafrica.accaglobal.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
www2.pugpig.com
auth.subscription.theweek.co.uk
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
subscription.theweek.co.uk
dns-vetting1-mims-pawel.map.fastly.net
aneveningwithastonmartin.co.uk
adspecs.dennis.co.uk
auth.astonmagazine.co.uk
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
subscription.theweek.co.uk
adspecs.dennis.co.uk
dns-vetting1-mims-pawel.map.fastly.net
abafrica.accaglobal.com
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
subscription.theweek.co.uk
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
adspecs.dennis.co.uk
dns-vetting1-mims-pawel.map.fastly.net
auth.astonmagazine.co.uk
dns-vetting1-mims-pawel.map.fastly.net
adspecs.dennis.co.uk
www2.pugpig.com
adspecs.dennis.co.uk
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
adspecs.dennis.co.uk
www2.pugpig.com
abafrica.accaglobal.com
www2.pugpig.com
www2.pugpig.com
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
astonmagazine.co.uk
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
abafrica.accaglobal.com
dns-vetting1-mims-pawel.map.fastly.net
subscription.theweek.co.uk
subscription.theweek.co.uk
auth.subscription.theweek.co.uk
www2.pugpig.com
www2.pugpig.com
www2.pugpig.com
auth.astonmagazine.co.uk
www2.pugpig.com
www2.pugpig.com
adspecs.dennis.co.uk
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
www2.pugpig.com
www2.pugpig.com
www2.pugpig.com
abafrica.accaglobal.com
www2.pugpig.com
www2.pugpig.com
www2.pugpig.com
www2.pugpig.com
aneveningwithastonmartin.co.uk
www2.pugpig.com
www2.pugpig.com
astonmagazine.co.uk
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
astonmagazine.co.uk
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
astonmagazine.co.uk
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
abafrica.accaglobal.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
www2.pugpig.com
auth.subscription.theweek.co.uk
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
subscription.theweek.co.uk
dns-vetting1-mims-pawel.map.fastly.net
aneveningwithastonmartin.co.uk
adspecs.dennis.co.uk
auth.astonmagazine.co.uk
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
Certificate
The complete raw certificate details for auth.astonmagazine.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIXzCCB0egAwIBAgISA2QN0WEE04h54YNeM+S8v9k/MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjMxNTA0MzVaFw0x OTA4MjExNTA0MzVaMCMxITAfBgNVBAMTGGF1dGguYXN0b25tYWdhemluZS5jby51 azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ9U4wyF0nQShqzzeObi aC4C5MjLtfu4cZDyT1iNEBfLmVACv5d3PHncEHPPpRPkqquUnuaYU/tV+rZcunyA 5+9gMTjWYNypxPhNFV2jzvYWqoQaSrTcKWlsZnOONOPq0ELiHE+tVKCJnnmVGWU/ hTJ2YJyFZXpr1g1Exw3NsOSlAG7g1RPbZohrgqgPiQVsrohrDj2T4j9Qqn0RtGY0 ADiEzFn5IkStVuyrbkbdbUmEuGovBeDtGWxxMRatpzFZY7KxmFaQo2+GI6NbVnmH ExVxKbR8Ex1hc1H0ehlYKem2VSY5Tx23fv3hrrJeW0n8jUoGFe+Ig0c/ZtUGyESf 2DUCAwEAAaOCBWQwggVgMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU24PKlzoL4Fve GRpMK/488d8TiS0wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0 c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0 c2VuY3J5cHQub3JnLzCCAxkGA1UdEQSCAxAwggMMghhhdXRoLmFzdG9ubWFnYXpp bmUuY28udWuCE2F1dGguYmlrZXNldGMuY28udWuCG2F1dGguY3Jvc3NzdGl0Y2hl cm1hZy5jby51a4IVYXV0aC5jeWNsaXN0bWFnLmNvLnVrghxhdXRoLmdldGNvbXB1 dGVyYWN0aXZlLmNvLnVrghhhdXRoLm1hZ2F6aW5lZGVhbHMuY28udWuCIWF1dGgu bWluZWNyYWZ0d29ybGRtYWdhemluZS5jby51a4IcYXV0aC5taW5ld29ybGRtYWdh emluZS5jby51a4IgYXV0aC5zY2hvb2xzLnRoZXdlZWtqdW5pb3IuY28udWuCIGF1 dGguc3Vic2NyaWJlLmF1dG9leHByZXNzLmNvLnVrgiRhdXRoLnN1YnNjcmliZS5j b21wdXRlcnNob3BwZXIuY28udWuCGGF1dGguc3Vic2NyaWJlLmV2by5jby51a4If YXV0aC5zdWJzY3JpYmUuZm9ydGVhbnRpbWVzLmNvbYIYYXV0aC5zdWJzY3JpYmUu bHJtLmNvLnVrgh5hdXRoLnN1YnNjcmliZS5taWNyb21hcnQuY28udWuCImF1dGgu c3Vic2NyaWJlLm9jdGFuZS1tYWdhemluZS5jb22CGmF1dGguc3Vic2NyaWJlLnBj cHJvLmNvLnVrghhhdXRoLnN1YnNjcmliZS52aXouY28udWuCHGF1dGguc3Vic2Ny aWJlLndlYnVzZXIuY28udWuCKWF1dGguc3Vic2NyaWJlLnlvdXJmYW1pbHloaXN0 b3J5bWFnLmNvLnVrgiFhdXRoLnN1YnNjcmlwdGlvbi5tb25leXdlZWsuY28udWuC H2F1dGguc3Vic2NyaXB0aW9uLnRoZXdlZWsuY28udWuCH2F1dGguc3Vic2NyaXB0 aW9ucy5kZW5uaXMuY28udWuCGGF1dGgudGhld2Vla2p1bmlvci5jby51a4IWYXV0 aC50cnkudGhld2Vlay5jby51a4IVYXV0aC50cnl0aGV3ZWVrLmNvLnVrMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv AHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFq5W/gkAAABAMA RjBEAiAzWjvOus/6iqhqgwg2vL8YkmCvsveE1j9FCr5Cb/QSWgIgZ5a/hzIjNh0T Ww+W2I8KJ8aEMiPiQ6+5bk+fAkAhq/MAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily 3KTDDPTlRUf0eAAAAWrlb+B9AAAEAwBHMEUCIDe66t05artN3g4bdXMNymiThKbI OLNo1RcEJiuGb075AiEAhdHPjWou9QByOqmMNT15HjYNEO1c39AZwO7QVs7hqv0w DQYJKoZIhvcNAQELBQADggEBAJCBde0KmGJmFm3O7oruCGVzsU6wVHdBdXqErFZ/ NEH4WzyYF9v2abvwMVDsbjiZ66W2ejRidFu+c8UpM/rtKLxesls67j2pw6QgAt+u ehG3rL672HsOmLfH/cHz2xpvLmbFx/9H6rT55FIPRMiyVYMgHsoNrZrXZ1TxgRr0 cs79y4YGTTtwUMm6xD+X4gd2bbtaMnPfsr7M50I/3MriwNR/Y0Jg70G2Hi8+PGTR xH3mIKuJ6WAoWxRTfmQOzbOG/NsS77rSiH0+XGubNeFyo12bakJ0A2lG0KTn9nVb VMsQ7tWqt0fUKz+oDtCh7kv7mfi0U47fWOvf94FavgQvZkk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1TjDIXSdBKGrPN45uJo LgLkyMu1+7hxkPJPWI0QF8uZUAK/l3c8edwQc8+lE+Sqq5Se5phT+1X6tly6fIDn 72AxONZg3KnE+E0VXaPO9haqhBpKtNwpaWxmc4404+rQQuIcT61UoImeeZUZZT+F MnZgnIVlemvWDUTHDc2w5KUAbuDVE9tmiGuCqA+JBWyuiGsOPZPiP1CqfRG0ZjQA OITMWfkiRK1W7KtuRt1tSYS4ai8F4O0ZbHExFq2nMVljsrGYVpCjb4Yjo1tWeYcT FXEptHwTHWFzUfR6GVgp6bZVJjlPHbd+/eGusl5bSfyNSgYV74iDRz9m1QbIRJ/Y NQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 295383461609139334502350459392953509992767 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-23 15:04:35 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-21 15:04:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.astonmagazine.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20113749784958727225786917467513737018370257711461605293946938735002222106144650783352569984639827510096198282851714561872760805606276921570539585455436957625299462551636650677547568240439216312731583201927650253372368503945910919368541661119993568651041862850678112956513905652982680875920274226618281908087286495323678063034680462052068960300715628903403029283100174182005760333429747181061234534228355682021108311041985113095009609480191016743130279565504451776363290003303262072794875504139816983240020548996791297966659352935137617106820246870035342995578441662116383488240126456853145902325766692925464247261237 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) db83ca973a0be05bde191a4c2bfe3cf1df13892d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (784 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.astonmagazine.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.bikesetc.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.crossstitchermag.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.cyclistmag.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.getcomputeractive.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.magazinedeals.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.minecraftworldmagazine.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mineworldmagazine.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.schools.theweekjunior.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.autoexpress.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.computershopper.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.evo.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.forteantimes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.lrm.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.micromart.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.octane-magazine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.pcpro.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.viz.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.webuser.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.yourfamilyhistorymag.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscription.moneyweek.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscription.theweek.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscriptions.dennis.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.theweekjunior.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.try.theweek.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.trytheweek.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ae56fe09000000403004630440220335a3bcebacffa8aa86a830836bcbf189260afb2f784d63f450abe426ff4125a02206796bf873223361d135b0f96d88f0a27c6843223e243afb96e4f9f024021abf3007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ae56fe07d0000040300473045022037baeadd396abb4dde0e1b75730dca689384a6c838b368d51704262b866f4ef902210085d1cf8d6a2ef500723aa98c353d791e360d10ed5cdfd019c0eed056cee1aafd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00908175ed0a986266166dceee8aee086573b14eb0547741757a84ac567f3441f85b3c9817dbf669bbf03150ec6e3899eba5b67a3462745bbe73c52933faed28bc5eb25b3aee3da9c3a42002dfae7a11b7acbebbd87b0e98b7c7fdc1f3db1a6f2e66c5c7ff47eab4f9e4520f44c8b25583201eca0dad9ad76754f1811af472cefdcb86064d3b7050c9bac43f97e207766dbb5a3273dfb2becce7423fdccae2c0d47f634260ef41b61e2f3e3c64d1c47de620ab89e960285b14537e640ecdb386fcdb12efbad2887d3e5c6b9b35e172a35d9b6a4274036946d0a4e7f6755b54cb10eed5aab747d42b3fa80ed0a1ee4bfb99f8b4538edf58ebdff7815abe042f6649