clickswin.bellamagazine.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:9d:29:65:3f:2a:55:12:8b:c7:b6:55:bb:a9:75:ad:07:91 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=clickswin.bellamagazine.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9d:29:65:3f:2a:55:12:8b:c7:b6:55:bb:a9:75:ad:07:91
Serial Number (int): 401928499384583935420871837131664738027409
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e0:b1:b7:64:3b:33:17:1b:41:23:1e:93:a2:b3:85:f4:3c:26:51:3d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d5:5b:58:5b:bb:4b:b9:91:42:a4:ee:b8:e8:e0:97:59:45:9c:63:11
Fingerprint (sha256): 43:4a:7a:53:53:9d:2f:de:bb:8c:bb:0e:42:de:bf:fe:5f:c9:c5:7c:6c:88:53:20:fa:c2:bb:b8:31:c2:8e:40

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate clickswin.bellamagazine.co.uk

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clickswin.bellamagazine.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clickswin.bellamagazine.co.uk
clickswin.eatinmagazine.co.uk
clickswin.fateandfortunemagazine.co.uk
clickswin.myfavouriterecipes.net
clickswin.puzzlemagazines.co.uk
clickswin.spiritanddestiny.co.uk
clickswin.takeabreak.co.uk
clickswin.thatslife.co.uk
clickswin.tvchoicemagazine.co.uk
winit.absoluteradio.co.uk
winit.bauerpublishing.com
winit.bikemagazine.co.uk
winit.birdwatching.co.uk
winit.builtmag.co.uk
winit.carmagazine.co.uk
winit.carmechanicsmag.co.uk
winit.cfmradio.co.uk
winit.citytalk.fm
winit.classicbike.co.uk
winit.classiccargiveaways.co.uk
winit.classiccarsforsale.co.uk
winit.classiccarsmagazine.co.uk
winit.classiccarweekly.co.uk
winit.closeronline.co.uk
winit.clyde1.com
winit.clyde2.com
winit.clyde3.com
winit.coolfm.co.uk
winit.downtown.co.uk
winit.downtowncountry.co.uk
winit.eatinmagazine.co.uk
winit.empireonline.com
winit.fateandfortunemagazine.co.uk
winit.forth2.com
winit.forth3.com
winit.forthone.com
winit.gardenanswersmagazine.co.uk
winit.gardennewsmagazine.co.uk
winit.gofishing.co.uk
winit.graziadaily.co.uk
winit.hallam2.co.uk
winit.hallam3.co.uk
winit.hallamfm.co.uk
winit.heatworld.com
winit.horsedeals.co.uk
winit.kerrangradio.co.uk
winit.key103.co.uk
winit.key2radio.co.uk
winit.key3radio.co.uk
winit.kissfmuk.com
winit.landscapemagazine.co.uk
winit.livefortheoutdoors.com
winit.lro.com
winit.magic.co.uk
winit.magicchilled.co.uk
winit.mcnsport.co.uk
winit.metroradio.co.uk
winit.metroradio2.co.uk
winit.metroradio3.co.uk
winit.mfr.co.uk
winit.mfr2.co.uk
winit.mfr3.co.uk
winit.model-rail.co.uk
winit.moderngardensmagazine.co.uk
winit.mojo4music.com
winit.motherandbaby.co.uk
winit.motorcyclenews.com
winit.northsound1.com
winit.northsound2.com
winit.parkers.co.uk
winit.performancebikes.co.uk
winit.petsandprizes.co.uk
winit.photoanswers.co.uk
winit.planetradio.co.uk
winit.planetrock.com
winit.practicalclassics.co.uk
winit.practicalfishkeeping.co.uk
winit.practicalsportsbikesmag.co.uk
winit.qthemusic.com
winit.radioaire.co.uk
winit.radioaire2.co.uk
winit.radioaire3.co.uk
winit.radioborders.com
winit.radiocity.co.uk
winit.radiocity2.co.uk
winit.radiocity3.co.uk
winit.recipes-plus.co.uk
winit.ride.co.uk
winit.rockfm.co.uk
winit.rockfm2.co.uk
winit.rockfm3.co.uk
winit.steamrailway.co.uk
winit.takeabreak.co.uk
winit.tay2.co.uk
winit.tay3.co.uk
winit.tayfm.co.uk
winit.tfm2.co.uk
winit.tfm3.co.uk
winit.tfmradio.co.uk
winit.thatslife.co.uk

Other certificates including the domain name bellamagazine.co.uk

(limited to 100 certificates)
shop.bellamagazine.co.uk
cmp.am-online.com
winit.bauerpublishing.com
winit.bauerpublishing.com
bellamagazine.co.uk
bellamagazine.co.uk
bellamagazine.co.uk
www.bellamagazine.co.uk
winit.bauerpublishing.com
www.bellamagazine.co.uk
*.bellamagazine.co.uk
www.bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
www.bellamagazine.co.uk
winit.bauerpublishing.com
www.bauermedia.co.uk
bellamagazine.co.uk
www.bauermedia.co.uk
winit.bauerpublishing.com
winit-stage.bauerpublishing.com
winit.bauerpublishing.com
dating.bellamagazine.co.uk
winit.bauerpublishing.com
clickswin-stage.bellamagazine.co.uk
winit.bauerpublishing.com
bellamagazine.co.uk
www.bauermedia.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
bellamagazine.co.uk
winit.bauerpublishing.com
bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
bellamagazine.co.uk
clickswin.eatinmagazine.co.uk
clickswin-stage.bellamagazine.co.uk
www.bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
bellamagazine.co.uk
winit.bauerpublishing.com
www.bellamagazine.co.uk
bellamagazine.co.uk
winit.bauerpublishing.com
www.bellamagazine.co.uk
winit.bauerpublishing.com
clickswin.bellamagazine.co.uk
www.bellamagazine.co.uk
dating.bellamagazine.co.uk
www.bauermedia.co.uk
dating.bellamagazine.co.uk
bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
dating.bellamagazine.co.uk
bellamagazine.co.uk
www.bellamagazine.co.uk
www.bauermedia.co.uk
winit.bauerpublishing.com
winit-stage.bauerpublishing.com
clickswin-stage-uk.bellamagazine.co.uk
winit.bauerpublishing.com
bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
clickswin.bellamagazine.co.uk
bellamagazine.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
winit.bauerpublishing.com
dating.bellamagazine.co.uk
www.bellamagazine.co.uk
www.bellamagazine.co.uk
bellamagazine.co.uk
shop.bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
www.bellamagazine.co.uk
winit.bauerpublishing.com
bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
clickswin.bellamagazine.co.uk
dating.bellamagazine.co.uk

Certificate

The complete raw certificate details for clickswin.bellamagazine.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPvTCCDqWgAwIBAgISBJ0pZT8qVRKLx7ZVu6l1rQeRMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMDYwNDQ4MDdaFw0x
OTAyMDQwNDQ4MDdaMCgxJjAkBgNVBAMTHWNsaWNrc3dpbi5iZWxsYW1hZ2F6aW5l
LmNvLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CrWwGMM77a/
pZRDBFFqfWtHbw7m3yKi9XsfxGybK+2cEsqZ+kcI7OOUi2wNJDk/rTyxmBUW0jhe
Ldipt8pj40nt8WwFJNnpeQo6pWFh4J8YC4LCnqYOFk+ufwCPOOLsTWGTlrl2nyDb
S9/LAlHDieEb0TVB5/aQur5unm04E1/UTbk+IMDT7MIP9I3gX9aKhay5iknYdw7j
32Zb1rdeNP+lhMQ+SNzGfFBcDmYEg6z0rxUyY0XVIRon51JSlgz85RE97qR1jqr9
SoU6RqzGaNMK5ToKBzwOoI4TETUJ1yc/uZrOET9V9xJPzB8cQNdnV0QisbncP0Vs
03Q0oPMX/wIDAQABo4IMvTCCDLkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTgsbdk
OzMXG0EjHpOis4X0PCZRPTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMIIJvQYDVR0RBIIJtDCCCbCCHWNsaWNrc3dpbi5i
ZWxsYW1hZ2F6aW5lLmNvLnVrgh1jbGlja3N3aW4uZWF0aW5tYWdhemluZS5jby51
a4ImY2xpY2tzd2luLmZhdGVhbmRmb3J0dW5lbWFnYXppbmUuY28udWuCIGNsaWNr
c3dpbi5teWZhdm91cml0ZXJlY2lwZXMubmV0gh9jbGlja3N3aW4ucHV6emxlbWFn
YXppbmVzLmNvLnVrgiBjbGlja3N3aW4uc3Bpcml0YW5kZGVzdGlueS5jby51a4Ia
Y2xpY2tzd2luLnRha2VhYnJlYWsuY28udWuCGWNsaWNrc3dpbi50aGF0c2xpZmUu
Y28udWuCIGNsaWNrc3dpbi50dmNob2ljZW1hZ2F6aW5lLmNvLnVrghl3aW5pdC5h
YnNvbHV0ZXJhZGlvLmNvLnVrghl3aW5pdC5iYXVlcnB1Ymxpc2hpbmcuY29tghh3
aW5pdC5iaWtlbWFnYXppbmUuY28udWuCGHdpbml0LmJpcmR3YXRjaGluZy5jby51
a4IUd2luaXQuYnVpbHRtYWcuY28udWuCF3dpbml0LmNhcm1hZ2F6aW5lLmNvLnVr
ght3aW5pdC5jYXJtZWNoYW5pY3NtYWcuY28udWuCFHdpbml0LmNmbXJhZGlvLmNv
LnVrghF3aW5pdC5jaXR5dGFsay5mbYIXd2luaXQuY2xhc3NpY2Jpa2UuY28udWuC
H3dpbml0LmNsYXNzaWNjYXJnaXZlYXdheXMuY28udWuCHndpbml0LmNsYXNzaWNj
YXJzZm9yc2FsZS5jby51a4Ifd2luaXQuY2xhc3NpY2NhcnNtYWdhemluZS5jby51
a4Icd2luaXQuY2xhc3NpY2NhcndlZWtseS5jby51a4IYd2luaXQuY2xvc2Vyb25s
aW5lLmNvLnVrghB3aW5pdC5jbHlkZTEuY29tghB3aW5pdC5jbHlkZTIuY29tghB3
aW5pdC5jbHlkZTMuY29tghJ3aW5pdC5jb29sZm0uY28udWuCFHdpbml0LmRvd250
b3duLmNvLnVrght3aW5pdC5kb3dudG93bmNvdW50cnkuY28udWuCGXdpbml0LmVh
dGlubWFnYXppbmUuY28udWuCFndpbml0LmVtcGlyZW9ubGluZS5jb22CIndpbml0
LmZhdGVhbmRmb3J0dW5lbWFnYXppbmUuY28udWuCEHdpbml0LmZvcnRoMi5jb22C
EHdpbml0LmZvcnRoMy5jb22CEndpbml0LmZvcnRob25lLmNvbYIhd2luaXQuZ2Fy
ZGVuYW5zd2Vyc21hZ2F6aW5lLmNvLnVrgh53aW5pdC5nYXJkZW5uZXdzbWFnYXpp
bmUuY28udWuCFXdpbml0LmdvZmlzaGluZy5jby51a4IXd2luaXQuZ3JhemlhZGFp
bHkuY28udWuCE3dpbml0LmhhbGxhbTIuY28udWuCE3dpbml0LmhhbGxhbTMuY28u
dWuCFHdpbml0LmhhbGxhbWZtLmNvLnVrghN3aW5pdC5oZWF0d29ybGQuY29tghZ3
aW5pdC5ob3JzZWRlYWxzLmNvLnVrghh3aW5pdC5rZXJyYW5ncmFkaW8uY28udWuC
Endpbml0LmtleTEwMy5jby51a4IVd2luaXQua2V5MnJhZGlvLmNvLnVrghV3aW5p
dC5rZXkzcmFkaW8uY28udWuCEndpbml0Lmtpc3NmbXVrLmNvbYIdd2luaXQubGFu
ZHNjYXBlbWFnYXppbmUuY28udWuCHHdpbml0LmxpdmVmb3J0aGVvdXRkb29ycy5j
b22CDXdpbml0Lmxyby5jb22CEXdpbml0Lm1hZ2ljLmNvLnVrghh3aW5pdC5tYWdp
Y2NoaWxsZWQuY28udWuCFHdpbml0Lm1jbnNwb3J0LmNvLnVrghZ3aW5pdC5tZXRy
b3JhZGlvLmNvLnVrghd3aW5pdC5tZXRyb3JhZGlvMi5jby51a4IXd2luaXQubWV0
cm9yYWRpbzMuY28udWuCD3dpbml0Lm1mci5jby51a4IQd2luaXQubWZyMi5jby51
a4IQd2luaXQubWZyMy5jby51a4IWd2luaXQubW9kZWwtcmFpbC5jby51a4Ihd2lu
aXQubW9kZXJuZ2FyZGVuc21hZ2F6aW5lLmNvLnVrghR3aW5pdC5tb2pvNG11c2lj
LmNvbYIZd2luaXQubW90aGVyYW5kYmFieS5jby51a4IYd2luaXQubW90b3JjeWNs
ZW5ld3MuY29tghV3aW5pdC5ub3J0aHNvdW5kMS5jb22CFXdpbml0Lm5vcnRoc291
bmQyLmNvbYITd2luaXQucGFya2Vycy5jby51a4Icd2luaXQucGVyZm9ybWFuY2Vi
aWtlcy5jby51a4IZd2luaXQucGV0c2FuZHByaXplcy5jby51a4IYd2luaXQucGhv
dG9hbnN3ZXJzLmNvLnVrghd3aW5pdC5wbGFuZXRyYWRpby5jby51a4IUd2luaXQu
cGxhbmV0cm9jay5jb22CHXdpbml0LnByYWN0aWNhbGNsYXNzaWNzLmNvLnVrgiB3
aW5pdC5wcmFjdGljYWxmaXNoa2VlcGluZy5jby51a4Ijd2luaXQucHJhY3RpY2Fs
c3BvcnRzYmlrZXNtYWcuY28udWuCE3dpbml0LnF0aGVtdXNpYy5jb22CFXdpbml0
LnJhZGlvYWlyZS5jby51a4IWd2luaXQucmFkaW9haXJlMi5jby51a4IWd2luaXQu
cmFkaW9haXJlMy5jby51a4IWd2luaXQucmFkaW9ib3JkZXJzLmNvbYIVd2luaXQu
cmFkaW9jaXR5LmNvLnVrghZ3aW5pdC5yYWRpb2NpdHkyLmNvLnVrghZ3aW5pdC5y
YWRpb2NpdHkzLmNvLnVrghh3aW5pdC5yZWNpcGVzLXBsdXMuY28udWuCEHdpbml0
LnJpZGUuY28udWuCEndpbml0LnJvY2tmbS5jby51a4ITd2luaXQucm9ja2ZtMi5j
by51a4ITd2luaXQucm9ja2ZtMy5jby51a4IYd2luaXQuc3RlYW1yYWlsd2F5LmNv
LnVrghZ3aW5pdC50YWtlYWJyZWFrLmNvLnVrghB3aW5pdC50YXkyLmNvLnVrghB3
aW5pdC50YXkzLmNvLnVrghF3aW5pdC50YXlmbS5jby51a4IQd2luaXQudGZtMi5j
by51a4IQd2luaXQudGZtMy5jby51a4IUd2luaXQudGZtcmFkaW8uY28udWuCFXdp
bml0LnRoYXRzbGlmZS5jby51azCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYL
KwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9u
bHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGlu
IGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0
IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMIIBBQYKKwYBBAHW
eQIEAgSB9gSB8wDxAHcAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwA
AAFm55BUCAAABAMASDBGAiEAxkimvzYh4JE0OMIpok69F6z+3lpPlQJgxpopiMbR
eM8CIQCDCLCaHi9YqNbzbK5paJeZ6ZsdF82Ntr3E8UIaZLJj9QB2ACk8UZZUyDll
uqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABZueQVVQAAAQDAEcwRQIhAIj8oNh9
nuVvIz5FyzYJ2lriLjVvfa+vz38h2rxjNoCqAiBdWmyZUQvL839V/hLqSqO5/HaR
R/bbk5OSs6aOJ97/BzANBgkqhkiG9w0BAQsFAAOCAQEAj77+e4fgB3tJFqY8MMjg
bluDRFvMKCju/MVuRIJVi0Ux4+eC6vW+KaPN+K0evnvmeBtXxIOl/3LVQcAUZ3yP
I8sUs70lTObPFGTMAXAzSPqJ2EC+4ulFMwc9we13w5iUEie+E0E47KgK99wh5gjo
8Q+I10GHBQsurMFx054GzS6F29hxHJBi6lNXzojhgvfPZB7ZX/JJhlBPmd/5xPHI
T3r8bcUb7Aiys1YJo6w23lCedhNhCjGTmvGlHSZNfbmCNDJHcJUC6grWBVWKFQ1D
OPmC/mT4nJDtKvTADNpCf/gHilL8FYuFmIz6UV48saNMK41UNVSo4f2LXA62Sljl
3w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CrWwGMM77a/pZRDBFFq
fWtHbw7m3yKi9XsfxGybK+2cEsqZ+kcI7OOUi2wNJDk/rTyxmBUW0jheLdipt8pj
40nt8WwFJNnpeQo6pWFh4J8YC4LCnqYOFk+ufwCPOOLsTWGTlrl2nyDbS9/LAlHD
ieEb0TVB5/aQur5unm04E1/UTbk+IMDT7MIP9I3gX9aKhay5iknYdw7j32Zb1rde
NP+lhMQ+SNzGfFBcDmYEg6z0rxUyY0XVIRon51JSlgz85RE97qR1jqr9SoU6RqzG
aNMK5ToKBzwOoI4TETUJ1yc/uZrOET9V9xJPzB8cQNdnV0QisbncP0Vs03Q0oPMX
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401928499384583935420871837131664738027409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-06 04:48:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-04 04:48:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clickswin.bellamagazine.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27793551728180205016938376878369654421412976830001842464646712805980555890124563209517087880070741911293516591022151353642457094678895281680916036913625490343327048472893609445301717613396312449938364709289266567410103567956596485215950350355414128433457441807842244778369675596180656588470084904348803956297517839561963795555599483970333866856308085295209924946754394495417592185710850634888758512680907592270253120946567091935179177247849664252500264367886986071827379827846476598035167313036955715600703903435145964897808530603545578991391126550407808838698855143677110344105784880387238337172718685377223938217983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0b1b7643b33171b41231e93a2b385f43c26513d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.bellamagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.eatinmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.fateandfortunemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.myfavouriterecipes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.puzzlemagazines.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.spiritanddestiny.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.takeabreak.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.thatslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.tvchoicemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.absoluteradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.bauerpublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.bikemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.birdwatching.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.builtmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.carmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.carmechanicsmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.cfmradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.citytalk.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.classicbike.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.classiccargiveaways.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.classiccarsforsale.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.classiccarsmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.classiccarweekly.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.closeronline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.clyde1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.clyde2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.clyde3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.coolfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.downtown.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.downtowncountry.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.eatinmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.empireonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.fateandfortunemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.forth2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.forth3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.forthone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.gardenanswersmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.gardennewsmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.gofishing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.graziadaily.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.hallam2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.hallam3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.hallamfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.heatworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.horsedeals.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.kerrangradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.key103.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.key2radio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.key3radio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.kissfmuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.landscapemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.livefortheoutdoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.lro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.magic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.magicchilled.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mcnsport.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.metroradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.metroradio2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.metroradio3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.model-rail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.moderngardensmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mojo4music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.motherandbaby.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.motorcyclenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.northsound1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.northsound2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.parkers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.performancebikes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.petsandprizes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.photoanswers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.planetradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.planetrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.practicalclassics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.practicalfishkeeping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.practicalsportsbikesmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.qthemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioborders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.recipes-plus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.ride.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.steamrailway.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.takeabreak.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tay2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tay3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tayfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfm2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfm3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfmradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.thatslife.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000166e79054080000040300483046022100c648a6bf3621e0913438c229a24ebd17acfede5a4f950260c69a2988c6d178cf0221008308b09a1e2f58a8d6f36cae69689799e99b1d17cd8db6bdc4f1421a64b263f5007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166e7905554000004030047304502210088fca0d87d9ee56f233e45cb3609da5ae22e356f7dafafcf7f21dabc633680aa02205d5a6c99510bcbf37f55fe12ea4aa3b9fc769147f6db939392b3a68e27deff07
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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