subscribe.theweek.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:91:d1:ea:1e:07:d8:70:a2:0e:e9:29:6e:4f:5a:c2:b1:dd was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=subscribe.theweek.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:91:d1:ea:1e:07:d8:70:a2:0e:e9:29:6e:4f:5a:c2:b1:dd
Serial Number (int): 398069111188254878530048484077447579611613
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 84:a1:91:d3:34:fd:76:84:bc:da:ba:f6:ca:04:43:36:e3:4c:1b:51
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 77:be:56:f2:02:ce:ea:7d:3a:08:41:9e:2e:75:f8:d5:43:7a:55:92
Fingerprint (sha256): 70:65:85:95:b8:4e:77:e5:b3:9c:2e:66:87:9c:40:a7:9d:75:24:1b:7b:66:de:e9:71:3a:08:a0:1c:1b:20:d7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate subscribe.theweek.co.uk

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for subscribe.theweek.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adspecs.dennis.co.uk
aneveningwithastonmartin.co.uk
app.theweek.co.uk
bikes-etc.com
community.evo.co.uk
computeractive.co.uk
computershopper.co.uk
crossstitchermag.com
custompc.co.uk
cyclistmag.com
dennis.co.uk
denniscareers.co.uk
dennismags.co.uk
digitalslrphoto.com
everythingmw.com
evotrackdays.co.uk
forteantimes.com
givetheweek.co.uk
healthandfitnessonline.co.uk
historicmotoringawards.co.uk
licensing.dennis.co.uk
macuser.co.uk
mag.autoexpress.co.uk
mag.evo.co.uk
mag.mensfitness.co.uk
mag.theweek.co.uk
magbooks.com
micromart.co.uk
newcarawards.co.uk
octane-magazine.com
octaneevents.co.uk
offers.astonmagazine.co.uk
offers.getcomputeractive.co.uk
offers.lrm.co.uk
offers.octane-magazine.com
offers.pcpro.co.uk
offers.theweekjunior.co.uk
offers.webuser.co.uk
podcast.pcpro.co.uk
podcasts.denofgeek.com
privacy.dennis.co.uk
signupapp2.moneyweek.com
subscribe.bikesetc.co.uk
subscribe.crossstitchermag.com
subscribe.cyclistmag.co.uk
subscribe.macuser.co.uk
subscribe.theweek.co.uk
subscribe.yourfamilytreemag.co.uk
subscriptions.theweek.co.uk
syndication.classicandperformancecar.com
test.theweek.co.uk
theweeklive.co.uk
theweeksociety.co.uk
theweektickets.co.uk
theweekwines.co.uk
threepm.co.uk
treesfortrees.co.uk
vantagemag.co.uk
webuser.co.uk
womensfitness.co.uk
www.computeractive.co.uk
www.computershopper.co.uk
www.crossstitchermag.com
www.custompc.co.uk
www.cyclistmag.com
www.denniscareers.co.uk
www.dennismags.co.uk
www.digitalslrphoto.com
www.everythingmw.com
www.forteantimes.com
www.givetheweek.co.uk
www.healthandfitnessonline.co.uk
www.landroveraddict.com
www.macuser.co.uk
www.magbooks.com
www.micromart.co.uk
www.octane-magazine.com
www.subscribe.theweek.co.uk
www.subscriptions.theweek.co.uk
www.theweeklive.co.uk
www.theweektickets.co.uk
www.theweekwines.co.uk
www.threepm.co.uk
www.vantagemag.co.uk
www.webuser.co.uk
www.womensfitness.co.uk
www.yourfamilyhistorymag.co.uk
www.yourfamilyhistorymag.com
www.yourfamilytreemag.co.uk
yourfamilyhistorymag.co.uk
yourfamilyhistorymag.com
yourfamilytreemag.co.uk

Other certificates including the domain name theweek.co.uk

(limited to 100 certificates)
www.pugpig.com
aex-mms.autoexpress.co.uk
www.theweek.co.uk
dg-0094-4765bd0.client-tls.adestra.com
subscription.theweek.co.uk
adspecs.dennis.co.uk
ceros3.map.fastly.net
aex-mms.autoexpress.co.uk
www.pugpig.com
aex-mms.autoexpress.co.uk
www.pugpig.com
s5-san.cloudinary.com
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
derstandard-spat.derstandard.at
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
*.pinterestceros.com
dns-vetting1j.map.fastly.net
www.pugpig.com
subscription.theweek.co.uk
s5-san.cloudinary.com
dns-vetting1j.map.fastly.net
r626.womanandhome.com
z980.carthrottle.com
theweek.co.uk
*.theweek.co.uk
dns-vetting1j.map.fastly.net
www.pugpig.com
www.pugpig.com
dns-vetting1j.map.fastly.net
ceros3.map.fastly.net
*.content.pugpig-dev.com
derstandard-spat.derstandard.at
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
aex-mms.autoexpress.co.uk
ceros3.map.fastly.net
ceros3.map.fastly.net
ceros3.map.fastly.net
s5-san.cloudinary.com
dg-0094-4765bd0.client-tls.adestra.com
theweek.co.uk
*.pinterestceros.com
dns-vetting1j.map.fastly.net
aex-mms.autoexpress.co.uk
s5-cloudinary-pin.map.fastly.net
dns-vetting1j.map.fastly.net
aex-mms.autoexpress.co.uk
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
s5-san.cloudinary.com
www.pugpig.com
adspecs.dennis.co.uk
dns-vetting1j.map.fastly.net
s5-cloudinary-pin.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
www.pugpig.com
derstandard-spat.derstandard.at
auth.astonmagazine.co.uk
dns-vetting1j.map.fastly.net
ceros3.map.fastly.net
s5-cloudinary-pin.map.fastly.net
*.content.pugpig-dev.com
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
s5-cloudinary-pin.map.fastly.net
adspecs.dennis.co.uk
ceros3.map.fastly.net
dns-vetting1.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
l468.drivingelectric.com
www.pugpig.com
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
dns-vetting1j.map.fastly.net
adspecs.dennis.co.uk
s5-san.cloudinary.com
s5-san.cloudinary.com
r468.evo.co.uk
s5-san.cloudinary.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
www.pugpig.com
l468.drivingelectric.com
ceros3.map.fastly.net
derstandard-spat.derstandard.at
www.pugpig.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
aex-mms.autoexpress.co.uk
www.pugpig.com
adspecs.dennis.co.uk
www.pugpig.com
auth.autoexpress.co.uk
mmm.theweek.co.uk
dg-0094-4765bd0.client-tls.adestra.com
www.pugpig.com
dg-0094-4765bd0.client-tls.adestra.com

Certificate

The complete raw certificate details for subscribe.theweek.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCAcLNdj9ufK8jFH0Tvh
5m5Uu0896D46KIP5nEictTK0UmrvxqQpf7ACsNmX4t7JrnmvcS3FZZrT6iuPZ2Vv
YrqrDrb0WUb0iE5K2OYoWRVQ6Vg5fCXWqeV7kM0IyMiF3iibGTVawcitWnHmEgrB
p/6VjNSpsK07ORvKoaIl0s1oSAk7qfO/KXhGbQFqIhO6QJ8moMKwL1GMgkHHbP68
TCVWUMiM9T5xl125LuKZt8d48hqI9ShEIx7C62CMb5Lc20O4XYc3bf2a9Az2pAPs
HSBd+RompvS3gZ/jhCwHwPXsIvD2kpMMvagxJoUAr6KZAAGWPLgBIvb9ROVZf6hX
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398069111188254878530048484077447579611613
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-24 11:52:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 11:52:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subscribe.theweek.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25768448273423313495421406190062889361541835967721257287908559600386131486948000495130245436046861488070921177700485713373911014826232660015020129526687025135530310535481565205435009351667656194340564224651630287732507812035596655302549896697430338633696482883871213113672263460930870947708070154520563509805441628961415982469110563837364557633579654635776372130499466303392586817601239769334005146280337058360221241639246916633786987031458154293447822477899797098932029094766524404281008192693238714689559335442543424402895126801825050693066906694021032723990388340899904706100915194113352830577414184062080944461689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84a191d334fd7684bcdabaf6ca044336e34c1b51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adspecs.dennis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aneveningwithastonmartin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikes-etc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.evo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computeractive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computershopper.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossstitchermag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custompc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclistmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denniscareers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennismags.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalslrphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everythingmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evotrackdays.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forteantimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givetheweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthandfitnessonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicmotoringawards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licensing.dennis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macuser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mag.autoexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mag.evo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mag.mensfitness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mag.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micromart.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcarawards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'octane-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'octaneevents.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.astonmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.getcomputeractive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.lrm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.octane-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.pcpro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.theweekjunior.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.webuser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcast.pcpro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcasts.denofgeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy.dennis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signupapp2.moneyweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.bikesetc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.crossstitchermag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.cyclistmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.macuser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.yourfamilytreemag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriptions.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syndication.classicandperformancecar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theweeklive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theweeksociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theweektickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theweekwines.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threepm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treesfortrees.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vantagemag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webuser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womensfitness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.computeractive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.computershopper.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crossstitchermag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.custompc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyclistmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denniscareers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dennismags.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalslrphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.everythingmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forteantimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givetheweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthandfitnessonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.landroveraddict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macuser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.micromart.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.octane-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subscribe.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subscriptions.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theweeklive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theweektickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theweekwines.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.threepm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vantagemag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webuser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.womensfitness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourfamilyhistorymag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourfamilyhistorymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourfamilytreemag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourfamilyhistorymag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourfamilyhistorymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourfamilytreemag.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001687feb0ba7000004030046304402207657895082437658eee7f6ad5fda2055895e096e3bc19d50a31c9f60e850166502203389b6156de97dd1ba61daa2d83903eede4a4d3d8c25f315815811fe02825f7a007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001687feb0d9f0000040300483046022100d0bce63a160f24e8d82c045ae98f76163aace34c9eccce45484af9d5beef0534022100d5843fcf5fbb1daaa37d5f8bffb6016d52bd16bee1ed05bb9e54da5873a1d29c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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