banburyguardian.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:32:5b:82:e4:56:a0:4a:e7:42:65:70:60:61:7a:e4:4b:d2 was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=banburyguardian.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:32:5b:82:e4:56:a0:4a:e7:42:65:70:60:61:7a:e4:4b:d2
Serial Number (int): 365584901450548566394671392275220222200786
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e8:bc:78:c2:dd:36:d1:67:0e:a2:75:5f:dc:b4:f5:28:3b:65:2b:8a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 40:d4:da:c5:28:91:95:9c:d3:85:4c:2d:92:68:73:2d:29:bf:a7:c3
Fingerprint (sha256): 61:56:ea:f1:91:b5:22:df:9f:2a:ab:fe:03:cf:ab:a0:ea:ae:a6:fc:f2:86:82:0c:44:36:d4:df:ca:f6:cc:6b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate banburyguardian.co.uk

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for banburyguardian.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

banburyguardian.co.uk
bedfordtoday.co.uk
berwickshirenews.co.uk
biggleswadetoday.co.uk
birminghamworld.uk
blackpoolgazette.co.uk
bristolworld.com
buchanobserver.co.uk
bucksherald.co.uk
burnleyexpress.net
buxtonadvertiser.co.uk
chad.co.uk
daventryexpress.co.uk
deesidepiper.co.uk
derbyshiretimes.co.uk
derryjournal.com
dewsburyreporter.co.uk
doncasterfreepress.co.uk
donsidepiper.co.uk
edinburghnews.scotsman.com
ellontimes.co.uk
falkirkherald.co.uk
farminglife.com
fifetoday.co.uk
fraserburghherald.co.uk
gallowaygazette.co.uk
glasgowworld.com
halifaxcourier.co.uk
harboroughmail.co.uk
harrogateadvertiser.co.uk
hartlepoolmail.co.uk
hemeltoday.co.uk
hucknalldispatch.co.uk
inverurieherald.co.uk
kincardineshireobserver.co.uk
lancasterguardian.co.uk
leightonbuzzardonline.co.uk
lep.co.uk
lincolnshireworld.com
liverpoolworld.uk
londonworld.com
lutontoday.co.uk
manchesterworld.uk
mearnsleader.co.uk
meltontimes.co.uk
miltonkeynes.co.uk
nationalworld.com
newcastleworld.com
newsletter.co.uk
northamptonchron.co.uk
northantstelegraph.co.uk
northernirelandworld.com
northumberlandgazette.co.uk
peterboroughtoday.co.uk
portsmouth.co.uk
scotsman.com
shieldsgazette.com
stornowaygazette.co.uk
sunderlandecho.com
sussexexpress.co.uk
thescarboroughnews.co.uk
thesouthernreporter.co.uk
thestar.co.uk
wakefieldexpress.co.uk
walesworld.com
warwickshireworld.com
wigantoday.net
worksopguardian.co.uk
yorkshireeveningpost.co.uk
yorkshirepost.co.uk

Other certificates including the domain name banburyguardian.co.uk

(limited to 100 certificates)
nationalworld.com
da.ballymenatimes.com
landing.banburyguardian.co.uk
evenfall.memories.com.au
newsletters.banburyguardian.co.uk
local.newstribune.info
findit.banburyguardian.co.uk
consent.3addedminutes.com
banburyguardian.co.uk
landing.banburyguardian.co.uk
newsletters.banburyguardian.co.uk
findit.banburyguardian.co.uk
da.ballymenatimes.com
www.inews.co.uk

consent.3addedminutes.com
findit.banburyguardian.co.uk
local.banbridgeleader.co.uk
landing.banburyguardian.co.uk
cmp.ballymenatimes.com
evenfall.memories.com.au
www.miltonkeynes.co.uk
findit.banburyguardian.co.uk
admin.adforge.com
banburyguardian.co.uk
nationalworld.com
findit.banburyguardian.co.uk
newsletters.banburyguardian.co.uk
da.ballymenatimes.com
nationalworld.com
beta.dewsburyreporter.co.uk
landing.banburyguardian.co.uk
findit.banburyguardian.co.uk
findit.banburyguardian.co.uk
local.stcatharinesstandard.ca
cmp.ballymenatimes.com
beta.banburyguardian.co.uk
newsletters.banburyguardian.co.uk
landing.banburyguardian.co.uk
da.ballymenatimes.com
newsletters.banburyguardian.co.uk
da.ballymenatimes.com
local.starkvilledailynews.com
findit.banburyguardian.co.uk
www.portsmouth.co.uk
cmp.ballymenatimes.com
da.ballymenatimes.com
cmp.ballymenatimes.com
nationalworld.com
www.peterboroughtoday.co.uk
consent.3addedminutes.com
da.ballymenatimes.com
findit.banburyguardian.co.uk
nationalworld.com
landing.banburyguardian.co.uk
da.ballymenatimes.com
local.windsorstar.com
findit.banburyguardian.co.uk
findit.banburyguardian.co.uk
landing.banburyguardian.co.uk
3addedminutes.com
www.portsmouth.co.uk
newsletters.banburyguardian.co.uk
local.fauquier.com
newsletters.banburyguardian.co.uk
nationalworld.com
www.miltonkeynes.co.uk
banburyguardian.co.uk
nationalworld.com
da.ballymenatimes.com
local.doverpost.com
admin.adforge.com
local.carrickfergustimes.co.uk
findit.banburyguardian.co.uk
local.theintell.com
consent.3addedminutes.com
da.ballymenatimes.com
banburyguardian.co.uk
da.ballymenatimes.com

Certificate

The complete raw certificate details for banburyguardian.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIK/jCCCeagAwIBAgISBDJbguRWoErnQmVwYGF65EvSMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjAzMTExNDMzNThaFw0yMjA2MDkxNDMzNTdaMCAxHjAcBgNVBAMT
FWJhbmJ1cnlndWFyZGlhbi5jby51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAPHOdN0nbtfw/GBPxQkLNLkylANBp+ZFb4ntTkGR/LHyVPLwpLo/E9Mm
RTtwVZEunje/YgR/0/YQmvL5iD/n5WxyvXRF04gmepJzJYd3ztzDTr+7S83bqSqo
DWkYLTrZjHoDVHrYBm+NH9lMA7Ahx+K17pEuCN0DKvxduMTTvaTj5Ql6CW2X4sXZ
SeXBuT9s5E7sr5lB1fzb4eGnW3E6uXqiiTc528+e72EFq5+15qejbE7XQdU1rIoH
BCtvJhr4zk1PcRFZxvkczVLYyoWRokGQ+41P2WcQuCR4+a3nyJ/aLuX140K5At1L
Qm+eMSkMZ03q/IVj0IconxSjVF+d830CAwEAAaOCCB4wgggaMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQU6Lx4wt020WcOonVf3LT1KDtlK4owHwYDVR0jBBgwFoAUFC6z
F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo
dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl
bmNyLm9yZy8wggXtBgNVHREEggXkMIIF4IIVYmFuYnVyeWd1YXJkaWFuLmNvLnVr
ghJiZWRmb3JkdG9kYXkuY28udWuCFmJlcndpY2tzaGlyZW5ld3MuY28udWuCFmJp
Z2dsZXN3YWRldG9kYXkuY28udWuCEmJpcm1pbmdoYW13b3JsZC51a4IWYmxhY2tw
b29sZ2F6ZXR0ZS5jby51a4IQYnJpc3RvbHdvcmxkLmNvbYIUYnVjaGFub2JzZXJ2
ZXIuY28udWuCEWJ1Y2tzaGVyYWxkLmNvLnVrghJidXJubGV5ZXhwcmVzcy5uZXSC
FmJ1eHRvbmFkdmVydGlzZXIuY28udWuCCmNoYWQuY28udWuCFWRhdmVudHJ5ZXhw
cmVzcy5jby51a4ISZGVlc2lkZXBpcGVyLmNvLnVrghVkZXJieXNoaXJldGltZXMu
Y28udWuCEGRlcnJ5am91cm5hbC5jb22CFmRld3NidXJ5cmVwb3J0ZXIuY28udWuC
GGRvbmNhc3RlcmZyZWVwcmVzcy5jby51a4ISZG9uc2lkZXBpcGVyLmNvLnVrghpl
ZGluYnVyZ2huZXdzLnNjb3RzbWFuLmNvbYIQZWxsb250aW1lcy5jby51a4ITZmFs
a2lya2hlcmFsZC5jby51a4IPZmFybWluZ2xpZmUuY29tgg9maWZldG9kYXkuY28u
dWuCF2ZyYXNlcmJ1cmdoaGVyYWxkLmNvLnVrghVnYWxsb3dheWdhemV0dGUuY28u
dWuCEGdsYXNnb3d3b3JsZC5jb22CFGhhbGlmYXhjb3VyaWVyLmNvLnVrghRoYXJi
b3JvdWdobWFpbC5jby51a4IZaGFycm9nYXRlYWR2ZXJ0aXNlci5jby51a4IUaGFy
dGxlcG9vbG1haWwuY28udWuCEGhlbWVsdG9kYXkuY28udWuCFmh1Y2tuYWxsZGlz
cGF0Y2guY28udWuCFWludmVydXJpZWhlcmFsZC5jby51a4Ida2luY2FyZGluZXNo
aXJlb2JzZXJ2ZXIuY28udWuCF2xhbmNhc3Rlcmd1YXJkaWFuLmNvLnVrghtsZWln
aHRvbmJ1enphcmRvbmxpbmUuY28udWuCCWxlcC5jby51a4IVbGluY29sbnNoaXJl
d29ybGQuY29tghFsaXZlcnBvb2x3b3JsZC51a4IPbG9uZG9ud29ybGQuY29tghBs
dXRvbnRvZGF5LmNvLnVrghJtYW5jaGVzdGVyd29ybGQudWuCEm1lYXJuc2xlYWRl
ci5jby51a4IRbWVsdG9udGltZXMuY28udWuCEm1pbHRvbmtleW5lcy5jby51a4IR
bmF0aW9uYWx3b3JsZC5jb22CEm5ld2Nhc3RsZXdvcmxkLmNvbYIQbmV3c2xldHRl
ci5jby51a4IWbm9ydGhhbXB0b25jaHJvbi5jby51a4IYbm9ydGhhbnRzdGVsZWdy
YXBoLmNvLnVrghhub3J0aGVybmlyZWxhbmR3b3JsZC5jb22CG25vcnRodW1iZXJs
YW5kZ2F6ZXR0ZS5jby51a4IXcGV0ZXJib3JvdWdodG9kYXkuY28udWuCEHBvcnRz
bW91dGguY28udWuCDHNjb3RzbWFuLmNvbYISc2hpZWxkc2dhemV0dGUuY29tghZz
dG9ybm93YXlnYXpldHRlLmNvLnVrghJzdW5kZXJsYW5kZWNoby5jb22CE3N1c3Nl
eGV4cHJlc3MuY28udWuCGHRoZXNjYXJib3JvdWdobmV3cy5jby51a4IZdGhlc291
dGhlcm5yZXBvcnRlci5jby51a4INdGhlc3Rhci5jby51a4IWd2FrZWZpZWxkZXhw
cmVzcy5jby51a4IOd2FsZXN3b3JsZC5jb22CFXdhcndpY2tzaGlyZXdvcmxkLmNv
bYIOd2lnYW50b2RheS5uZXSCFXdvcmtzb3BndWFyZGlhbi5jby51a4IaeW9ya3No
aXJlZXZlbmluZ3Bvc3QuY28udWuCE3lvcmtzaGlyZXBvc3QuY28udWswTAYDVR0g
BEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0
cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8A
dgBByMqx3yJGShDGoToJQodeTjGLGwPr60vHaPCQYpYG9gAAAX95nXxGAAAEAwBH
MEUCIAM8tJ1Nc7dJy8xNqNoOlcysk/UhjbqRLrgu9Gcdf4p1AiEAwVqHXmD0Yw+Z
4TOf/qJhRyWQ0w139dBnxuzejFH+SQoAdQBGpVXrdfqRIDC1oolp9PN9ESxBdL79
SbiFq/L8cP5tRwAAAX95nXxrAAAEAwBGMEQCIH3CR1UP++ERCH12sd6mbp8+39lH
6wTQgHXtzbU3ry0LAiBvNzcqN83ddFTRwA1ZcmYPexzsMFIWusUpF/xnL7j+uTAN
BgkqhkiG9w0BAQsFAAOCAQEAlGJ7mRwr1e8Lnu+aIf26bQPPIlv5IsyCN7DuLNww
urCBm/RfHsdwU5DUjhRCydZYETERV34KDecGf3hRwC3dEWOvwkaxJAjqlWqh848X
1+5dNqrbkU9CeN1C4f3E8WQIRa0G0EzY8b7rjEcFJJRqbjolx1QTPLTvJ4nUTsjS
zo7Y033gMpuukCzay2QLSqUdfHKaH90P/wijO7Kz5nrabSymI/dhOm1AFZqeijny
gQ0qANVrfs+DhPUckB5JVmGykA84W8rK94e8Anv2CFBPx87aPs6EblruNodFZZyM
yx4n8Wx1ka08Bq1a1qZSHrVtn5jvLc8VYvQCefIDO52Z6g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8c503Sdu1/D8YE/FCQs0
uTKUA0Gn5kVvie1OQZH8sfJU8vCkuj8T0yZFO3BVkS6eN79iBH/T9hCa8vmIP+fl
bHK9dEXTiCZ6knMlh3fO3MNOv7tLzdupKqgNaRgtOtmMegNUetgGb40f2UwDsCHH
4rXukS4I3QMq/F24xNO9pOPlCXoJbZfixdlJ5cG5P2zkTuyvmUHV/Nvh4adbcTq5
eqKJNznbz57vYQWrn7Xmp6NsTtdB1TWsigcEK28mGvjOTU9xEVnG+RzNUtjKhZGi
QZD7jU/ZZxC4JHj5refIn9ou5fXjQrkC3UtCb54xKQxnTer8hWPQhyifFKNUX53z
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365584901450548566394671392275220222200786
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-11 14:33:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-09 14:33:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'banburyguardian.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30525238991161945778366133768978485680074243285746915099803800920246200379849248972043679164409293721634329005835030751438848975526659711687298857307359295675644691566704222457797919150981897712901707049837571411038652841846793707801880288735854273122819383458439312424003846739651847007793173589508413662464209629034777503664335323533152077123075137180465318911579924073735241384138264872275013569338245917612314042586571878370415618827974824451907043557127526352810529464858191645187051806207890910852515365182288691750947062729691153799412217838113885293773175837090327456203811196913696647683669345312072389227389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8bc78c2dd36d1670ea2755fdcb4f5283b652b8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1508 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banburyguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedfordtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berwickshirenews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biggleswadetoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birminghamworld.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackpoolgazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bristolworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buchanobserver.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucksherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burnleyexpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buxtonadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chad.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daventryexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deesidepiper.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derbyshiretimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derryjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dewsburyreporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doncasterfreepress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donsidepiper.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edinburghnews.scotsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellontimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falkirkherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farminglife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifetoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fraserburghherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallowaygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glasgowworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halifaxcourier.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harboroughmail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrogateadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartlepoolmail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemeltoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hucknalldispatch.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inverurieherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kincardineshireobserver.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lancasterguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leightonbuzzardonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lep.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnshireworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liverpoolworld.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londonworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lutontoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manchesterworld.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mearnsleader.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meltontimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miltonkeynes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcastleworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northamptonchron.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northantstelegraph.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernirelandworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northumberlandgazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterboroughtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portsmouth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shieldsgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stornowaygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunderlandecho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sussexexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thescarboroughnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesouthernreporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakefieldexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walesworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warwickshireworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wigantoday.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worksopguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkshireeveningpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkshirepost.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017f799d7c4600000403004730450220033cb49d4d73b749cbcc4da8da0e95ccac93f5218dba912eb82ef4671d7f8a75022100c15a875e60f4630f99e1339ffea261472590d30d77f5d067c6ecde8c51fe490a00750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017f799d7c6b000004030046304402207dc247550ffbe111087d76b1dea66e9f3edfd947eb04d08075edcdb537af2d0b02206f37372a37cddd7454d1c00d5972660f7b1cec305216bac52917fc672fb8feb9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0094627b991c2bd5ef0b9eef9a21fdba6d03cf225bf922cc8237b0ee2cdc30bab0819bf45f1ec7705390d48e1442c9d658113111577e0a0de7067f7851c02ddd1163afc246b12408ea956aa1f38f17d7ee5d36aadb914f4278dd42e1fdc4f1640845ad06d04cd8f1beeb8c470524946a6e3a25c754133cb4ef2789d44ec8d2ce8ed8d37de0329bae902cdacb640b4aa51d7c729a1fdd0fff08a33bb2b3e67ada6d2ca623f7613a6d40159a9e8a39f2810d2a00d56b7ecf8384f51c901e495661b2900f385bcacaf787bc027bf608504fc7ceda3ece846e5aee368745659c8ccb1e27f16c7591ad3c06ad5ad6a6521eb56d9f98ef2dcf1562f40279f2033b9d99ea