cmp.northamptonchron.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f7:b2:42:fa:df:69:36:ed:39:0b:e5:95:e1:45:14:b6:c9 was issued on by Let's Encrypt.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cmp.northamptonchron.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:b2:42:fa:df:69:36:ed:39:0b:e5:95:e1:45:14:b6:c9
Serial Number (int): 345623552787897762221202819013503226263241
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 43:5e:46:cf:7e:ef:6a:df:d6:4f:c5:93:a4:d8:03:4f:e0:8f:44:03
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): db:25:e1:23:e4:33:d9:03:dd:6b:4d:db:6c:0a:9c:1c:f3:0d:45:70
Fingerprint (sha256): 53:0d:8d:e2:64:5b:80:78:2e:cd:31:c9:aa:d6:aa:c7:8c:63:1a:6e:0b:4a:1c:4a:cb:7f:b4:9e:0a:cd:9b:51

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cmp.northamptonchron.co.uk

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmp.northamptonchron.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmp.belfastvibe.com
cmp.digitalkitbag.com
cmp.dirtbikerider.com
cmp.jobstoday.co.uk
cmp.jpimedialocal.co.uk
cmp.jpress.co.uk
cmp.northamptonchron.co.uk
cmp.northantstelegraph.co.uk
cmp.northumberlandgazette.co.uk
cmp.northyorkshirenews.com
cmp.pendletoday.co.uk
cmp.pocklingtonpost.co.uk
cmp.pontefractandcastlefordexpress.co.uk
cmp.portadowntimes.co.uk
cmp.portsmouth.co.uk
cmp.retfordtoday.co.uk
cmp.ripleyandheanornews.co.uk
cmp.ripongazette.co.uk
cmp.rugbyadvertiser.co.uk
cmp.ryeandbattleobserver.co.uk
cmp.scotsman.com
cmp.sheffieldtelegraph.co.uk
cmp.shieldsgazette.com
cmp.shorehamherald.co.uk
cmp.skegnessstandard.co.uk
cmp.sleafordstandard.co.uk
cmp.southyorkshiretimes.co.uk
cmp.spenboroughguardian.co.uk
cmp.sthelensreporter.co.uk
cmp.stornowaygazette.co.uk
cmp.sunderlandecho.com
cmp.sussexexpress.co.uk
cmp.thametoday.co.uk
cmp.theaccountancylist.co.uk
cmp.theengineerlist.co.uk
cmp.thescarboroughnews.co.uk
cmp.thesmartlist.co.uk
cmp.thesouthernreporter.co.uk
cmp.thestar.co.uk
cmp.thevisitor.co.uk
cmp.thornegazette.co.uk
cmp.tmxnews.co.uk
cmp.todmordennews.co.uk
cmp.tringtoday.co.uk
cmp.tyronetimes.co.uk
cmp.wakefieldexpress.co.uk
cmp.warwickcourier.co.uk
cmp.westsussextoday.co.uk
cmp.wetherbynews.co.uk
cmp.whitbygazette.co.uk
cmp.wigantoday.net
cmp.worksopguardian.co.uk
cmp.worthingherald.co.uk
cmp.wow247.co.uk
cmp.wscountytimes.co.uk
cmp.yorkshireeveningpost.co.uk
cmp.yorkshirepost.co.uk

Other certificates including the domain name northamptonchron.co.uk

(limited to 100 certificates)
findit.northamptonchron.co.uk
nationalworld.com
newsletters.northamptonchron.co.uk
da.ballymenatimes.com
findit.northamptonchron.co.uk
evenfall.memories.com.au
cmp.northamptonchron.co.uk


da.ballymenatimes.com
www.inews.co.uk

findit.northamptonchron.co.uk
local.brookingsregister.com
findit.northamptonchron.co.uk
local.northamptonchron.co.uk
consent.aberdeenshireworld.com
evenfall.memories.com.au
cmp.northamptonchron.co.uk
www.miltonkeynes.co.uk
northamptonchron.co.uk
landing.northamptonchron.co.uk
findit.northamptonchron.co.uk
local.fraserburghherald.co.uk
banburyguardian.co.uk
nationalworld.com
landing.northamptonchron.co.uk
newsletters.northamptonchron.co.uk
da.ballymenatimes.com
nationalworld.com
mylocal.journal-news.com
findit.northamptonchron.co.uk
newsletters.northamptonchron.co.uk
beta.banburyguardian.co.uk
newsletters.northamptonchron.co.uk
da.ballymenatimes.com
findit.northamptonchron.co.uk
local.news-journal.com
findit.northamptonchron.co.uk
da.ballymenatimes.com
www.portsmouth.co.uk
da.ballymenatimes.com
newsletters.northamptonchron.co.uk
admin.adforge.com
nationalworld.com
local.kcchronicle.com
landing.northamptonchron.co.uk
local.sentinelsource.com
parrysoundbeacon.parrysound.com
www.peterboroughtoday.co.uk
consent.aberdeenshireworld.com
local.madisoncourier.com
da.ballymenatimes.com
nationalworld.com
da.ballymenatimes.com
3addedminutes.com
www.portsmouth.co.uk
landing.northamptonchron.co.uk
consent.aberdeenshireworld.com
nationalworld.com
landing.northamptonchron.co.uk
landing.northamptonchron.co.uk
consent.aberdeenshireworld.com
www.miltonkeynes.co.uk
newsletters.northamptonchron.co.uk
banburyguardian.co.uk
nationalworld.com
da.ballymenatimes.com
findit.northamptonchron.co.uk
findit.northamptonchron.co.uk
newsletters.northamptonchron.co.uk
cmp.northamptonchron.co.uk
landing.northamptonchron.co.uk
local.theintell.com
da.ballymenatimes.com
banburyguardian.co.uk
da.ballymenatimes.com

Certificate

The complete raw certificate details for cmp.northamptonchron.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILFjCCCf6gAwIBAgISA/eyQvrfaTbtOQvlleFFFLbJMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTgxMDA3NTNaFw0y
MDAyMTYxMDA3NTNaMCUxIzAhBgNVBAMTGmNtcC5ub3J0aGFtcHRvbmNocm9uLmNv
LnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRjQh6bU031w9zeK
0rb0/Qj2hVTCQAMvr2C0Dr+2+o7epASf9ZT0KDCpWRcUFv1IefO1464QaUMOVQzu
7igTm8Q5AVLgeAe+5cvU1ugYp+pHLE1yumGkzYwnmu9SzsfohjBRXzcx4VkzSUWi
EC+ejIKkeVcngpi8cGb5GhdPBRGZL4lWvGLFDkYq63dp8kUQrLmPuLqdC0OyPbkB
53EKrbi55hqhKOx1R+fxEaNKMcjy8dG05mv4YI+0XcuReX8Aj1by5ODx+OVcUT0j
8wJ6qJIE4YZjdcoVIfNGvy2n3TzjpkJ6tX3pMEYaQbkX9nL5U+Y8Rg0wMDCx5zvZ
FhD8XQIDAQABo4IIGTCCCBUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRDXkbPfu9q
39ZPxZOk2ANP4I9EAzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMIIFzAYDVR0RBIIFwzCCBb+CE2NtcC5iZWxmYXN0dmli
ZS5jb22CFWNtcC5kaWdpdGFsa2l0YmFnLmNvbYIVY21wLmRpcnRiaWtlcmlkZXIu
Y29tghNjbXAuam9ic3RvZGF5LmNvLnVrghdjbXAuanBpbWVkaWFsb2NhbC5jby51
a4IQY21wLmpwcmVzcy5jby51a4IaY21wLm5vcnRoYW1wdG9uY2hyb24uY28udWuC
HGNtcC5ub3J0aGFudHN0ZWxlZ3JhcGguY28udWuCH2NtcC5ub3J0aHVtYmVybGFu
ZGdhemV0dGUuY28udWuCGmNtcC5ub3J0aHlvcmtzaGlyZW5ld3MuY29tghVjbXAu
cGVuZGxldG9kYXkuY28udWuCGWNtcC5wb2NrbGluZ3RvbnBvc3QuY28udWuCKGNt
cC5wb250ZWZyYWN0YW5kY2FzdGxlZm9yZGV4cHJlc3MuY28udWuCGGNtcC5wb3J0
YWRvd250aW1lcy5jby51a4IUY21wLnBvcnRzbW91dGguY28udWuCFmNtcC5yZXRm
b3JkdG9kYXkuY28udWuCHWNtcC5yaXBsZXlhbmRoZWFub3JuZXdzLmNvLnVrghZj
bXAucmlwb25nYXpldHRlLmNvLnVrghljbXAucnVnYnlhZHZlcnRpc2VyLmNvLnVr
gh5jbXAucnllYW5kYmF0dGxlb2JzZXJ2ZXIuY28udWuCEGNtcC5zY290c21hbi5j
b22CHGNtcC5zaGVmZmllbGR0ZWxlZ3JhcGguY28udWuCFmNtcC5zaGllbGRzZ2F6
ZXR0ZS5jb22CGGNtcC5zaG9yZWhhbWhlcmFsZC5jby51a4IaY21wLnNrZWduZXNz
c3RhbmRhcmQuY28udWuCGmNtcC5zbGVhZm9yZHN0YW5kYXJkLmNvLnVrgh1jbXAu
c291dGh5b3Jrc2hpcmV0aW1lcy5jby51a4IdY21wLnNwZW5ib3JvdWdoZ3VhcmRp
YW4uY28udWuCGmNtcC5zdGhlbGVuc3JlcG9ydGVyLmNvLnVrghpjbXAuc3Rvcm5v
d2F5Z2F6ZXR0ZS5jby51a4IWY21wLnN1bmRlcmxhbmRlY2hvLmNvbYIXY21wLnN1
c3NleGV4cHJlc3MuY28udWuCFGNtcC50aGFtZXRvZGF5LmNvLnVrghxjbXAudGhl
YWNjb3VudGFuY3lsaXN0LmNvLnVrghljbXAudGhlZW5naW5lZXJsaXN0LmNvLnVr
ghxjbXAudGhlc2NhcmJvcm91Z2huZXdzLmNvLnVrghZjbXAudGhlc21hcnRsaXN0
LmNvLnVrgh1jbXAudGhlc291dGhlcm5yZXBvcnRlci5jby51a4IRY21wLnRoZXN0
YXIuY28udWuCFGNtcC50aGV2aXNpdG9yLmNvLnVrghdjbXAudGhvcm5lZ2F6ZXR0
ZS5jby51a4IRY21wLnRteG5ld3MuY28udWuCF2NtcC50b2Rtb3JkZW5uZXdzLmNv
LnVrghRjbXAudHJpbmd0b2RheS5jby51a4IVY21wLnR5cm9uZXRpbWVzLmNvLnVr
ghpjbXAud2FrZWZpZWxkZXhwcmVzcy5jby51a4IYY21wLndhcndpY2tjb3VyaWVy
LmNvLnVrghljbXAud2VzdHN1c3NleHRvZGF5LmNvLnVrghZjbXAud2V0aGVyYnlu
ZXdzLmNvLnVrghdjbXAud2hpdGJ5Z2F6ZXR0ZS5jby51a4ISY21wLndpZ2FudG9k
YXkubmV0ghljbXAud29ya3NvcGd1YXJkaWFuLmNvLnVrghhjbXAud29ydGhpbmdo
ZXJhbGQuY28udWuCEGNtcC53b3cyNDcuY28udWuCF2NtcC53c2NvdW50eXRpbWVz
LmNvLnVrgh5jbXAueW9ya3NoaXJlZXZlbmluZ3Bvc3QuY28udWuCF2NtcC55b3Jr
c2hpcmVwb3N0LmNvLnVrMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T
AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB
BQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDn
sklTLe+LkF4AAAFufjKSPQAABAMARzBFAiEApHc4+edsKHdL6y8NXmc4YPdr5j1I
BEAkoGUItsFL99UCIDk93xE9d8i2M5t6p6moAzPj1fYkwoCehNu3yvSffLtdAHcA
b1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFufjKTBwAABAMASDBG
AiEA38zUZMfnWSbrhQRbc2UO34UaHYYk2VR6pvZ0To1UdAgCIQDI/EwA0mrp0loT
mzwVDb906zjnqH23pZu8uR1nSOsCujANBgkqhkiG9w0BAQsFAAOCAQEAKGeSH4h6
RZvIqrola8QT3laYndUYJUK5Ynr2MqCxiNQhvL90rP+4A1iqKyc5cIS1MgEkq7Yx
d3sHVCY8qQ6okEMxRiyzuAYiFA9P6up0QrBKMVTFETDtCmi5zbFFxCDlkGdFY4SU
oJEUxeAqY/4IdX9E8cxFxUTrNnw288g1Illn8ol3l7a/XXURbE0SIkVChm2xel78
kK3bKQX1lfLdMQVETxH1w2lbt3w/XLhyI5rRhRDdKOH/v4J5P/035GjYA2R8Fm0R
/sJLXDdy14VWh3rnpzda/eWV+FkSgMQL9chgAy5FbOBM7OzbUUGDERBPBqXOjTK4
qfKPfGKEPsC8og==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRjQh6bU031w9zeK0rb0
/Qj2hVTCQAMvr2C0Dr+2+o7epASf9ZT0KDCpWRcUFv1IefO1464QaUMOVQzu7igT
m8Q5AVLgeAe+5cvU1ugYp+pHLE1yumGkzYwnmu9SzsfohjBRXzcx4VkzSUWiEC+e
jIKkeVcngpi8cGb5GhdPBRGZL4lWvGLFDkYq63dp8kUQrLmPuLqdC0OyPbkB53EK
rbi55hqhKOx1R+fxEaNKMcjy8dG05mv4YI+0XcuReX8Aj1by5ODx+OVcUT0j8wJ6
qJIE4YZjdcoVIfNGvy2n3TzjpkJ6tX3pMEYaQbkX9nL5U+Y8Rg0wMDCx5zvZFhD8
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345623552787897762221202819013503226263241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 10:07:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 10:07:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmp.northamptonchron.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19326697180276381045317700171905323489842472905758537951868013718694728057685305560873283225732422319203820495145224619233299002244887248132814928534465115792683606269770637389864556824435092119065120149969197367758576859134080830592920074169921022348354976339186876661172220786419363617955273321069222717046242336116678907416090345182126107487207355626042794083998860908612636366204875548209943693864133496893708066434496359839646776104245934133283058845576853935265585907908806695376947286809660408789266681547345392497433325581752523811017845385760241180867564119449979133248192783910188640035108289445262009629789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							435e46cf7eef6adfd64fc593a4d8034fe08f4403
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1475 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.belfastvibe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.digitalkitbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.dirtbikerider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.jobstoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.jpimedialocal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.jpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.northamptonchron.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.northantstelegraph.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.northumberlandgazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.northyorkshirenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pendletoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pocklingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pontefractandcastlefordexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.portadowntimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.portsmouth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.retfordtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.ripleyandheanornews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.ripongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.rugbyadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.ryeandbattleobserver.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.scotsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sheffieldtelegraph.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.shieldsgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.shorehamherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.skegnessstandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sleafordstandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.southyorkshiretimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.spenboroughguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sthelensreporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.stornowaygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sunderlandecho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sussexexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thametoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.theaccountancylist.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.theengineerlist.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thescarboroughnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thesmartlist.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thesouthernreporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thestar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thevisitor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thornegazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tmxnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.todmordennews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tringtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tyronetimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.wakefieldexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.warwickcourier.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.westsussextoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.wetherbynews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.whitbygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.wigantoday.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.worksopguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.worthingherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.wow247.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.wscountytimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.yorkshireeveningpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.yorkshirepost.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e7e32923d0000040300473045022100a47738f9e76c28774beb2f0d5e673860f76be63d48044024a06508b6c14bf7d50220393ddf113d77c8b6339b7aa7a9a80333e3d5f624c2809e84dbb7caf49f7cbb5d0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e7e3293070000040300483046022100dfccd464c7e75926eb85045b73650edf851a1d8624d9547aa6f6744e8d547408022100c8fc4c00d26ae9d25a139b3c150dbf74eb38e7a87db7a59bbcb91d6748eb02ba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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