auth.subscription.theweek.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:95:2b:a0:06:52:67:9e:aa:7c:16:63:28:cd:56:ca:a6:93 was issued on by Let's Encrypt.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auth.subscription.theweek.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:95:2b:a0:06:52:67:9e:aa:7c:16:63:28:cd:56:ca:a6:93
Serial Number (int): 399209204097800170316955950511244798764691
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3f:41:2b:0c:bf:88:6a:51:30:80:1b:8a:6a:c0:93:43:8a:39:c5:c9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ff:11:3e:a5:51:ae:3e:1f:01:01:08:c3:8f:fc:ad:b3:9d:77:2a:2e
Fingerprint (sha256): 34:e7:cb:82:a4:b6:e5:69:aa:ae:a3:a6:d9:e7:b2:53:7c:b9:58:cd:ff:a4:51:1f:a3:90:b6:e5:67:aa:e1:e3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate auth.subscription.theweek.co.uk

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth.subscription.theweek.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.astonmagazine.co.uk
auth.bikesetc.co.uk
auth.crossstitchermag.co.uk
auth.cyclistmag.co.uk
auth.getcomputeractive.co.uk
auth.magazinedeals.co.uk
auth.minecraftworldmagazine.co.uk
auth.mineworldmagazine.co.uk
auth.schools.theweekjunior.co.uk
auth.subscribe.autoexpress.co.uk
auth.subscribe.computershopper.co.uk
auth.subscribe.custompc.co.uk
auth.subscribe.digitalslrphoto.com
auth.subscribe.evo.co.uk
auth.subscribe.forteantimes.com
auth.subscribe.healthandfitnessonline.co.uk
auth.subscribe.lrm.co.uk
auth.subscribe.mensfitness.co.uk
auth.subscribe.micromart.co.uk
auth.subscribe.octane-magazine.com
auth.subscribe.pcpro.co.uk
auth.subscribe.viz.co.uk
auth.subscribe.webuser.co.uk
auth.subscribe.womensfitness.co.uk
auth.subscribe.yourfamilyhistorymag.co.uk
auth.subscription.moneyweek.co.uk
auth.subscription.theweek.co.uk
auth.subscriptions.dennis.co.uk
auth.theweekjunior.co.uk
auth.try.theweek.co.uk
auth.trytheweek.co.uk

Other certificates including the domain name theweek.co.uk

(limited to 100 certificates)
www.pugpig.com
aex-mms.autoexpress.co.uk
www.theweek.co.uk
dg-0094-4765bd0.client-tls.adestra.com
subscription.theweek.co.uk
adspecs.dennis.co.uk
ceros3.map.fastly.net
aex-mms.autoexpress.co.uk
www.pugpig.com
aex-mms.autoexpress.co.uk
www.pugpig.com
s5-san.cloudinary.com
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
derstandard-spat.derstandard.at
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
*.pinterestceros.com
dns-vetting1j.map.fastly.net
www.pugpig.com
subscription.theweek.co.uk
s5-san.cloudinary.com
dns-vetting1j.map.fastly.net
r626.womanandhome.com
z980.carthrottle.com
theweek.co.uk
*.theweek.co.uk
dns-vetting1j.map.fastly.net
www.pugpig.com
www.pugpig.com
dns-vetting1j.map.fastly.net
ceros3.map.fastly.net
*.content.pugpig-dev.com
derstandard-spat.derstandard.at
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
aex-mms.autoexpress.co.uk
ceros3.map.fastly.net
ceros3.map.fastly.net
ceros3.map.fastly.net
s5-san.cloudinary.com
dg-0094-4765bd0.client-tls.adestra.com
theweek.co.uk
*.pinterestceros.com
dns-vetting1j.map.fastly.net
aex-mms.autoexpress.co.uk
s5-cloudinary-pin.map.fastly.net
dns-vetting1j.map.fastly.net
aex-mms.autoexpress.co.uk
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
s5-san.cloudinary.com
www.pugpig.com
adspecs.dennis.co.uk
dns-vetting1j.map.fastly.net
s5-cloudinary-pin.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
www.pugpig.com
derstandard-spat.derstandard.at
auth.astonmagazine.co.uk
dns-vetting1j.map.fastly.net
ceros3.map.fastly.net
s5-cloudinary-pin.map.fastly.net
*.content.pugpig-dev.com
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
s5-cloudinary-pin.map.fastly.net
adspecs.dennis.co.uk
ceros3.map.fastly.net
dns-vetting1.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
l468.drivingelectric.com
www.pugpig.com
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
dns-vetting1j.map.fastly.net
adspecs.dennis.co.uk
s5-san.cloudinary.com
s5-san.cloudinary.com
r468.evo.co.uk
s5-san.cloudinary.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
www.pugpig.com
l468.drivingelectric.com
ceros3.map.fastly.net
derstandard-spat.derstandard.at
www.pugpig.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
aex-mms.autoexpress.co.uk
www.pugpig.com
adspecs.dennis.co.uk
www.pugpig.com
auth.autoexpress.co.uk
mmm.theweek.co.uk
dg-0094-4765bd0.client-tls.adestra.com
www.pugpig.com
dg-0094-4765bd0.client-tls.adestra.com

Certificate

The complete raw certificate details for auth.subscription.theweek.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJ0DCCCLigAwIBAgISBJUroAZSZ56qfBZjKM1WyqaTMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MTMxMzQzMzNaFw0x
ODEwMTExMzQzMzNaMCoxKDAmBgNVBAMTH2F1dGguc3Vic2NyaXB0aW9uLnRoZXdl
ZWsuY28udWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDymPVyMO1o
eH/lfRh0QMtRiCavS5hrdw195NTDZ/VM6Y1juB3KM9FFm6yB5utRdbb9qTwVy3r+
YrEPAefG3QAuz5Af0bN6qPFRfiFxjn/3KufeisJprd1NknZXpBtRRbQ/XT2eUH8m
2Fj3M0qFVHSSELDtL/+IYRGFmJJDzAN59FqdD+uo31qDGePI0KwpXfuq39+X1USz
HbBraFbD8orQ3uudV6QNhBa53L/CTJgH7DUrd77MIovVy5TXjGoeiBMWm06fdx/0
/ws1hoRBNBle5ps2UiLdcdiTlfXdU9YIFnJHoBOttMU46ZfEb7qFvDSVQqNwzkKp
vdjtly7MS6k7AgMBAAGjggbOMIIGyjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFD9B
Kwy/iGpRMIAbimrAk0OKOcXJMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wggPPBgNVHREEggPGMIIDwoIYYXV0aC5hc3Rv
bm1hZ2F6aW5lLmNvLnVrghNhdXRoLmJpa2VzZXRjLmNvLnVrghthdXRoLmNyb3Nz
c3RpdGNoZXJtYWcuY28udWuCFWF1dGguY3ljbGlzdG1hZy5jby51a4IcYXV0aC5n
ZXRjb21wdXRlcmFjdGl2ZS5jby51a4IYYXV0aC5tYWdhemluZWRlYWxzLmNvLnVr
giFhdXRoLm1pbmVjcmFmdHdvcmxkbWFnYXppbmUuY28udWuCHGF1dGgubWluZXdv
cmxkbWFnYXppbmUuY28udWuCIGF1dGguc2Nob29scy50aGV3ZWVranVuaW9yLmNv
LnVrgiBhdXRoLnN1YnNjcmliZS5hdXRvZXhwcmVzcy5jby51a4IkYXV0aC5zdWJz
Y3JpYmUuY29tcHV0ZXJzaG9wcGVyLmNvLnVrgh1hdXRoLnN1YnNjcmliZS5jdXN0
b21wYy5jby51a4IiYXV0aC5zdWJzY3JpYmUuZGlnaXRhbHNscnBob3RvLmNvbYIY
YXV0aC5zdWJzY3JpYmUuZXZvLmNvLnVrgh9hdXRoLnN1YnNjcmliZS5mb3J0ZWFu
dGltZXMuY29tgithdXRoLnN1YnNjcmliZS5oZWFsdGhhbmRmaXRuZXNzb25saW5l
LmNvLnVrghhhdXRoLnN1YnNjcmliZS5scm0uY28udWuCIGF1dGguc3Vic2NyaWJl
Lm1lbnNmaXRuZXNzLmNvLnVrgh5hdXRoLnN1YnNjcmliZS5taWNyb21hcnQuY28u
dWuCImF1dGguc3Vic2NyaWJlLm9jdGFuZS1tYWdhemluZS5jb22CGmF1dGguc3Vi
c2NyaWJlLnBjcHJvLmNvLnVrghhhdXRoLnN1YnNjcmliZS52aXouY28udWuCHGF1
dGguc3Vic2NyaWJlLndlYnVzZXIuY28udWuCImF1dGguc3Vic2NyaWJlLndvbWVu
c2ZpdG5lc3MuY28udWuCKWF1dGguc3Vic2NyaWJlLnlvdXJmYW1pbHloaXN0b3J5
bWFnLmNvLnVrgiFhdXRoLnN1YnNjcmlwdGlvbi5tb25leXdlZWsuY28udWuCH2F1
dGguc3Vic2NyaXB0aW9uLnRoZXdlZWsuY28udWuCH2F1dGguc3Vic2NyaXB0aW9u
cy5kZW5uaXMuY28udWuCGGF1dGgudGhld2Vla2p1bmlvci5jby51a4IWYXV0aC50
cnkudGhld2Vlay5jby51a4IVYXV0aC50cnl0aGV3ZWVrLmNvLnVrMIH+BgNVHSAE
gfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhp
cyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5n
IFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZp
Y2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVw
b3NpdG9yeS8wggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwApPFGWVMg5ZbqqUPxY
B9S3b79Yeily3KTDDPTlRUf0eAAAAWSUGNmtAAAEAwBIMEYCIQDiwuOvTyziVVD6
bpEz7nH1n4maESoJfHbOedLjLmX6hQIhAPplmdrC9DRfI/+Ct8hmgaGcKvQ4oNNi
LeXUDAi8dtcrAHUA23Sv7ssp7LH+yj5xbSzluaq7NveEcYPHXZ1PN7Yfv2QAAAFk
lBjdvgAABAMARjBEAiA0fRPIGtYONU2LlD8OCXIgpxIlRxqgHOygMh/p7/wouwIg
OkjrMtqAQA9UQpbAge5NRI/BwKQ4JFbLXOlRc2XymWIwDQYJKoZIhvcNAQELBQAD
ggEBAD+h8o6zRC7OIV3FKSudf7o2oIT37yf/OvpyYSfAmzm9QjC0nKr16bJrK+7s
9bPl3i/imgrImjUEC08deAvRwrtBjCAxkgHAUYtqeZqnSfBE2jBkzQg4SnZpvQE/
5wTkVDyQC/tb+VRIxQCZkk3kWg36wbXz/0ts3FfAYuB0txNYDW5HZY8IwfRRJ6gP
PG6QfQ03F6YCv5qvfSJ/p+aNJhTskkxdfoWawqJe+e/vBgkJAap/EcAddKfafSMZ
Cj7S1Fa7OfzJv/PD+YzGzAZ+5t+wENqoXEBmZR7BxfZ0tQYKdQ4jh0UCa5+KPP4n
ci1CFH3ifV5Hbi2q6lq3JOHj6Jw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pj1cjDtaHh/5X0YdEDL
UYgmr0uYa3cNfeTUw2f1TOmNY7gdyjPRRZusgebrUXW2/ak8Fct6/mKxDwHnxt0A
Ls+QH9GzeqjxUX4hcY5/9yrn3orCaa3dTZJ2V6QbUUW0P109nlB/JthY9zNKhVR0
khCw7S//iGERhZiSQ8wDefRanQ/rqN9agxnjyNCsKV37qt/fl9VEsx2wa2hWw/KK
0N7rnVekDYQWudy/wkyYB+w1K3e+zCKL1cuU14xqHogTFptOn3cf9P8LNYaEQTQZ
XuabNlIi3XHYk5X13VPWCBZyR6ATrbTFOOmXxG+6hbw0lUKjcM5Cqb3Y7ZcuzEup
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399209204097800170316955950511244798764691
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-13 13:43:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-11 13:43:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.subscription.theweek.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30625096584276683179811170781391085461138301645116872628007755637745679115423259848231200191692487059766865863183964060396455050483255675889157889959445857216969209957460138332227969865482120958398264237661846651598713581312014531267575191037912676116256842482343558531970273720276766602339482983816915705526691056663010692800621361422180764578104900065401338673997848242158231764593481213353890527943420998276114589880288787930334192469862767773659636002797291939414480967643281965749990793433376358582544738170167731801003141026362859949424514128853332621615214679188466706159105735592770167850557383406982720629051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f412b0cbf886a5130801b8a6ac093438a39c5c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (966 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.astonmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.bikesetc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.crossstitchermag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.cyclistmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.getcomputeractive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.magazinedeals.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.minecraftworldmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mineworldmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.schools.theweekjunior.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.autoexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.computershopper.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.custompc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.digitalslrphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.evo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.forteantimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.healthandfitnessonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.lrm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.mensfitness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.micromart.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.octane-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.pcpro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.viz.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.webuser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.womensfitness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscribe.yourfamilyhistorymag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscription.moneyweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscription.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.subscriptions.dennis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.theweekjunior.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.try.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.trytheweek.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001649418d9ad0000040300483046022100e2c2e3af4f2ce25550fa6e9133ee71f59f899a112a097c76ce79d2e32e65fa85022100fa6599dac2f4345f23ff82b7c86681a19c2af438a0d3622de5d40c08bc76d72b007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001649418ddbe00000403004630440220347d13c81ad60e354d8b943f0e097220a71225471aa01ceca0321fe9effc28bb02203a48eb32da80400f544296c081ee4d448fc1c0a4382456cb5ce9517365f29962
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003fa1f28eb3442ece215dc5292b9d7fba36a084f7ef27ff3afa726127c09b39bd4230b49caaf5e9b26b2beeecf5b3e5de2fe29a0ac89a35040b4f1d780bd1c2bb418c20319201c0518b6a799aa749f044da3064cd08384a7669bd013fe704e4543c900bfb5bf95448c50099924de45a0dfac1b5f3ff4b6cdc57c062e074b713580d6e47658f08c1f45127a80f3c6e907d0d3717a602bf9aaf7d227fa7e68d2614ec924c5d7e859ac2a25ef9efef06090901aa7f11c01d74a7da7d23190a3ed2d456bb39fcc9bff3c3f98cc6cc067ee6dfb010daa85c4066651ec1c5f674b5060a750e238745026b9f8a3cfe27722d42147de27d5e476e2daaea5ab724e1e3e89c