winit.mfr3.co.uk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:bb:ce:32:17:55:e6:d4:01:4b:87:70:e0:8d:3e:c1:52:22 was issued on by Let's Encrypt.
With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=winit.mfr3.co.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:bb:ce:32:17:55:e6:d4:01:4b:87:70:e0:8d:3e:c1:52:22Serial Number (int): 325243741464772104567071548825690227954210
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e4:d2:3e:fc:9b:f8:f1:ac:71:a2:3c:9a:0e:cd:4b:46:82:74:01:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): cf:17:f6:e4:a3:f9:a7:f7:21:0e:8d:f9:6c:37:a1:46:2f:66:99:1a
Fingerprint (sha256): 6d:db:55:02:bb:de:dd:75:72:ad:2e:65:5c:81:e1:d7:1b:62:49:0f:9e:e7:97:93:60:94:cb:41:8d:3c:99:0b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate winit.mfr3.co.uk
48
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for winit.mfr3.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
winit.mfr3.co.uk
winit.northsound1.com
winit.northsound2.com
winit.parkers.co.uk
winit.performancebikes.co.uk
winit.petsandprizes.co.uk
winit.photoanswers.co.uk
winit.planetradio.co.uk
winit.planetrock.com
winit.practicalclassics.co.uk
winit.practicalfishkeeping.co.uk
winit.practicalsportsbikesmag.co.uk
winit.qthemusic.com
winit.radioaire.co.uk
winit.radioaire2.co.uk
winit.radioaire3.co.uk
winit.radioborders.com
winit.radiocity.co.uk
winit.radiocity2.co.uk
winit.radiocity3.co.uk
winit.ride.co.uk
winit.rockfm.co.uk
winit.rockfm2.co.uk
winit.rockfm3.co.uk
winit.steamrailway.co.uk
winit.tay2.co.uk
winit.tay3.co.uk
winit.tayfm.co.uk
winit.tfm2.co.uk
winit.tfm3.co.uk
winit.tfmradio.co.uk
winit.thehitsradio.com
winit.todaysgolfer.co.uk
winit.trailrunningmag.co.uk
winit.viking2.co.uk
winit.viking3.co.uk
winit.vikingfm.co.uk
winit.wave105.com
winit.westfm.co.uk
winit.westsound.co.uk
winit.westsoundradio.com
winit.winchristmas.co.uk
winit.winitforhim.co.uk
winit.winsomething.co.uk
winit.winsummer.co.uk
winit.wintoys.co.uk
winit.yourhorse.co.uk
winit.yours.co.uk
winit.northsound1.com
winit.northsound2.com
winit.parkers.co.uk
winit.performancebikes.co.uk
winit.petsandprizes.co.uk
winit.photoanswers.co.uk
winit.planetradio.co.uk
winit.planetrock.com
winit.practicalclassics.co.uk
winit.practicalfishkeeping.co.uk
winit.practicalsportsbikesmag.co.uk
winit.qthemusic.com
winit.radioaire.co.uk
winit.radioaire2.co.uk
winit.radioaire3.co.uk
winit.radioborders.com
winit.radiocity.co.uk
winit.radiocity2.co.uk
winit.radiocity3.co.uk
winit.ride.co.uk
winit.rockfm.co.uk
winit.rockfm2.co.uk
winit.rockfm3.co.uk
winit.steamrailway.co.uk
winit.tay2.co.uk
winit.tay3.co.uk
winit.tayfm.co.uk
winit.tfm2.co.uk
winit.tfm3.co.uk
winit.tfmradio.co.uk
winit.thehitsradio.com
winit.todaysgolfer.co.uk
winit.trailrunningmag.co.uk
winit.viking2.co.uk
winit.viking3.co.uk
winit.vikingfm.co.uk
winit.wave105.com
winit.westfm.co.uk
winit.westsound.co.uk
winit.westsoundradio.com
winit.winchristmas.co.uk
winit.winitforhim.co.uk
winit.winsomething.co.uk
winit.winsummer.co.uk
winit.wintoys.co.uk
winit.yourhorse.co.uk
winit.yours.co.uk
Other certificates including the domain name mfr3.co.uk
(limited to 100 certificates)
winit.planetradio.co.uk
winit.coolfm.co.uk
winit.mfr3.co.uk
winit.bauerpublishing.com
winit.rockfm2.co.uk
winit.metroradio2.co.uk
winit.mfr3.co.uk
winit.todaysgolfer.co.uk
winit-stage.bauerpublishing.com
winit.metroradio.co.uk
winit.westsound.co.uk
winit.mfr3.co.uk
winit.metroradio.co.uk
winit.tay3.co.uk
winit.mfr3.co.uk
winit.mfr3.co.uk
winit.metroradio.co.uk
winit.model-rail.co.uk
winit-stage.mfr3.co.uk
winit.mfr3.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.planetradio.co.uk
clickswin.bellamagazine.co.uk
winit.metroradio.co.uk
winit.mfr3.co.uk
winit.bikemagazine.co.uk
winit-stage.bauerpublishing.com
winit.metroradio.co.uk
winit.mfr3.co.uk
winit.bauerpublishing.com
winit.mfr3.co.uk
winit.mfr3.co.uk
winit.mfr2.co.uk
winit.mfr.co.uk
winit.planetradio.co.uk
winit.mojo4music.com
winit.mfr2.co.uk
winit.mfr3.co.uk
winit.planetrock.com
winit.motorcyclenews.com
winit.metroradio.co.uk
winit.bauerpublishing.com
winit.mojo4music.com
winit.metroradio.co.uk
winit.qthemusic.com
winit.downtowncountry.co.uk
winit-stage.bauerpublishing.com
winit.metroradio.co.uk
winit.mfr3.co.uk
winit.bauerpublishing.com
winit.metroradio.co.uk
winit.metroradio3.co.uk
winit.mfr3.co.uk
winit-stage.mfr3.co.uk
winit.mfr3.co.uk
winit.metroradio2.co.uk
winit.radiocity.co.uk
winit-stage.bauerpublishing.com
clickswin.bellamagazine.co.uk
winit.motorcyclenews.com
winit.radiocity3.co.uk
winit.steamrailway.co.uk
winit.coolfm.co.uk
winit.mfr3.co.uk
winit.bauerpublishing.com
winit.rockfm2.co.uk
winit.metroradio2.co.uk
winit.mfr3.co.uk
winit.todaysgolfer.co.uk
winit-stage.bauerpublishing.com
winit.metroradio.co.uk
winit.westsound.co.uk
winit.mfr3.co.uk
winit.metroradio.co.uk
winit.tay3.co.uk
winit.mfr3.co.uk
winit.mfr3.co.uk
winit.metroradio.co.uk
winit.model-rail.co.uk
winit-stage.mfr3.co.uk
winit.mfr3.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.planetradio.co.uk
clickswin.bellamagazine.co.uk
winit.metroradio.co.uk
winit.mfr3.co.uk
winit.bikemagazine.co.uk
winit-stage.bauerpublishing.com
winit.metroradio.co.uk
winit.mfr3.co.uk
winit.bauerpublishing.com
winit.mfr3.co.uk
winit.mfr3.co.uk
winit.mfr2.co.uk
winit.mfr.co.uk
winit.planetradio.co.uk
winit.mojo4music.com
winit.mfr2.co.uk
winit.mfr3.co.uk
winit.planetrock.com
winit.motorcyclenews.com
winit.metroradio.co.uk
winit.bauerpublishing.com
winit.mojo4music.com
winit.metroradio.co.uk
winit.qthemusic.com
winit.downtowncountry.co.uk
winit-stage.bauerpublishing.com
winit.metroradio.co.uk
winit.mfr3.co.uk
winit.bauerpublishing.com
winit.metroradio.co.uk
winit.metroradio3.co.uk
winit.mfr3.co.uk
winit-stage.mfr3.co.uk
winit.mfr3.co.uk
winit.metroradio2.co.uk
winit.radiocity.co.uk
winit-stage.bauerpublishing.com
clickswin.bellamagazine.co.uk
winit.motorcyclenews.com
winit.radiocity3.co.uk
winit.steamrailway.co.uk
Certificate
The complete raw certificate details for winit.mfr3.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJqTCCCJGgAwIBAgISA7vOMhdV5tQBS4dw4I0+wVIiMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMTMxNTI5NTZaFw0x OTAyMTExNTI5NTZaMBsxGTAXBgNVBAMTEHdpbml0Lm1mcjMuY28udWswggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU4+jjjfgXkjXmVOBoeQDKVGEK2acM FdKVHMGphDoWrc2J9Jbm6cLLhzLhwcLqeyPr41lq5W+ppk/Eyj0ae/0XzRspMNW0 YPK3PEWxKPo4xBQMjwliQHibvvPUz2knQyaeo2Uk8yG8gaio11Xc5YnhhTkJ1oGU lahccnD5BO8nNvlWGnuLuYunl9sGz82HJQQUzuv2PmoUfVrUF48QTsA9JQmHRvWD iVF1B6FJW/KAGH9GAwRbkoi7lTUZMWsFbXWN2ZGDpqk0/tl9b7A5IObhTt+ADTAk pWmjSOO4keQ0AyMYrkXkz99inG4eYMFfJZ5pjDwQnEINBGq6QVSdWdcDAgMBAAGj gga2MIIGsjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOTSPvyb+PGscaI8mg7NS0aC dAGzMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZy8wggRqBgNVHREEggRhMIIEXYIQd2luaXQubWZyMy5jby51a4IVd2luaXQu bm9ydGhzb3VuZDEuY29tghV3aW5pdC5ub3J0aHNvdW5kMi5jb22CE3dpbml0LnBh cmtlcnMuY28udWuCHHdpbml0LnBlcmZvcm1hbmNlYmlrZXMuY28udWuCGXdpbml0 LnBldHNhbmRwcml6ZXMuY28udWuCGHdpbml0LnBob3RvYW5zd2Vycy5jby51a4IX d2luaXQucGxhbmV0cmFkaW8uY28udWuCFHdpbml0LnBsYW5ldHJvY2suY29tgh13 aW5pdC5wcmFjdGljYWxjbGFzc2ljcy5jby51a4Igd2luaXQucHJhY3RpY2FsZmlz aGtlZXBpbmcuY28udWuCI3dpbml0LnByYWN0aWNhbHNwb3J0c2Jpa2VzbWFnLmNv LnVrghN3aW5pdC5xdGhlbXVzaWMuY29tghV3aW5pdC5yYWRpb2FpcmUuY28udWuC Fndpbml0LnJhZGlvYWlyZTIuY28udWuCFndpbml0LnJhZGlvYWlyZTMuY28udWuC Fndpbml0LnJhZGlvYm9yZGVycy5jb22CFXdpbml0LnJhZGlvY2l0eS5jby51a4IW d2luaXQucmFkaW9jaXR5Mi5jby51a4IWd2luaXQucmFkaW9jaXR5My5jby51a4IQ d2luaXQucmlkZS5jby51a4ISd2luaXQucm9ja2ZtLmNvLnVrghN3aW5pdC5yb2Nr Zm0yLmNvLnVrghN3aW5pdC5yb2NrZm0zLmNvLnVrghh3aW5pdC5zdGVhbXJhaWx3 YXkuY28udWuCEHdpbml0LnRheTIuY28udWuCEHdpbml0LnRheTMuY28udWuCEXdp bml0LnRheWZtLmNvLnVrghB3aW5pdC50Zm0yLmNvLnVrghB3aW5pdC50Zm0zLmNv LnVrghR3aW5pdC50Zm1yYWRpby5jby51a4IWd2luaXQudGhlaGl0c3JhZGlvLmNv bYIYd2luaXQudG9kYXlzZ29sZmVyLmNvLnVrght3aW5pdC50cmFpbHJ1bm5pbmdt YWcuY28udWuCE3dpbml0LnZpa2luZzIuY28udWuCE3dpbml0LnZpa2luZzMuY28u dWuCFHdpbml0LnZpa2luZ2ZtLmNvLnVrghF3aW5pdC53YXZlMTA1LmNvbYISd2lu aXQud2VzdGZtLmNvLnVrghV3aW5pdC53ZXN0c291bmQuY28udWuCGHdpbml0Lndl c3Rzb3VuZHJhZGlvLmNvbYIYd2luaXQud2luY2hyaXN0bWFzLmNvLnVrghd3aW5p dC53aW5pdGZvcmhpbS5jby51a4IYd2luaXQud2luc29tZXRoaW5nLmNvLnVrghV3 aW5pdC53aW5zdW1tZXIuY28udWuCE3dpbml0LndpbnRveXMuY28udWuCFXdpbml0 LnlvdXJob3JzZS5jby51a4IRd2luaXQueW91cnMuY28udWswTAYDVR0gBEUwQzAI BgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nw cy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgB0ftqD Ma0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWcN6HCrAAAEAwBHMEUCIQCD 5fAFIzg3bWXrNOl5nGoRdxw8sdBN7iBJ1JlHrBtvRwIgL3XxMS+DcSZqPi4rlHO/ RrBcklCorbT5Up21Jwud3M0AdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTl RUf0eAAAAWcN6HLMAAAEAwBHMEUCIEZ6IwoXQm5AW6qtMPqKRr72W03y13bBBNLx k3qY0ydVAiEA/u5Wd7qWsdsf1L/HboWG28a8Wb2Y2yE+shBxdclk8ocwDQYJKoZI hvcNAQELBQADggEBAB1iMmBr1LC3qlnIja/iaNs3Sc4QNfhWHVP6xBnl4ttHV+x1 7sRfdy2pYbJcyfGY4o/qWNEOqmYPPbEHB/5LS+wtpEiGfTRFJYeVUZ1InYyAs8r0 Pi8N01nE2oAKBtMR6D4BsIjW5ZfuSEx4F3l4+X35Sk6BAMfsVW80Lk7H2w/LYCH0 7Am+DtkwfigKj3OulgOtCGVgCpbWMdydwqk033rv5ADETTDUG7t7v9dO98HSjnlX pLuh3VlZp8uxKuJGOkitW/LEv8LT8s7DL1wsNlGmD3JeUFKNe7JE3m0+0AIE/bVk pZ4it/Or63T0n7O+QKAg3HTXapPtx3insiwvUiI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OPo4434F5I15lTgaHkA ylRhCtmnDBXSlRzBqYQ6Fq3NifSW5unCy4cy4cHC6nsj6+NZauVvqaZPxMo9Gnv9 F80bKTDVtGDytzxFsSj6OMQUDI8JYkB4m77z1M9pJ0MmnqNlJPMhvIGoqNdV3OWJ 4YU5CdaBlJWoXHJw+QTvJzb5Vhp7i7mLp5fbBs/NhyUEFM7r9j5qFH1a1BePEE7A PSUJh0b1g4lRdQehSVvygBh/RgMEW5KIu5U1GTFrBW11jdmRg6apNP7ZfW+wOSDm 4U7fgA0wJKVpo0jjuJHkNAMjGK5F5M/fYpxuHmDBXyWeaYw8EJxCDQRqukFUnVnX AwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 325243741464772104567071548825690227954210 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-13 15:29:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 15:29:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'winit.mfr3.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26874907125525967293120986660479520761581345294037134198697018896314068548587141530391645269542104516858644685658549970015677023059812176679325634472506104981215877190078054049719602100192943240338734914893031869490022537960933774840151492365779208388062777602419848129988119106033905573228001264865292723591494715533019547736521504090917299675768009648093404797578214569954840802967412854178466385458110368236694962712585001339722262120975695446547382830139983311140213011370078163638336599830883932315583894106703694846177903411587567276793813244608967541847771367267360960050398423286010506576174786613541378578179 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e4d23efc9bf8f1ac71a23c9a0ecd4b46827401b3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr3.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.northsound1.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.northsound2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.parkers.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.performancebikes.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.petsandprizes.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.photoanswers.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.planetradio.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.planetrock.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.practicalclassics.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.practicalfishkeeping.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.practicalsportsbikesmag.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.qthemusic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire2.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire3.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioborders.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity2.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity3.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.ride.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm2.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm3.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.steamrailway.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tay2.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tay3.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tayfm.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfm2.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfm3.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfmradio.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.thehitsradio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.todaysgolfer.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.trailrunningmag.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.viking2.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.viking3.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.vikingfm.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.wave105.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.westfm.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.westsound.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.westsoundradio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winchristmas.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winitforhim.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winsomething.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winsummer.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.wintoys.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.yourhorse.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.yours.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001670de870ab000004030047304502210083e5f0052338376d65eb34e9799c6a11771c3cb1d04dee2049d49947ac1b6f4702202f75f1312f8371266a3e2e2b9473bf46b05c9250a8adb4f9529db5270b9ddccd007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001670de872cc00000403004730450220467a230a17426e405baaad30fa8a46bef65b4df2d776c104d2f1937a98d32755022100feee5677ba96b1db1fd4bfc76e8586dbc6bc59bd98db213eb2107175c964f287 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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