winit.planetrock.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:53:2d:3b:2d:23:91:e5:24:f2:50:8a:72:c7:f4:3a:2e:01 was issued on by Let's Encrypt.

With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=winit.planetrock.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:2d:3b:2d:23:91:e5:24:f2:50:8a:72:c7:f4:3a:2e:01
Serial Number (int): 289640416770570177373678862246295115542017
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 58:ef:ff:e2:43:ee:f2:e3:be:1c:65:fc:a2:4d:8b:9f:de:14:39:c3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 61:3d:b4:89:08:2c:02:a1:ff:0f:78:fc:3c:09:96:6d:80:53:40:3d
Fingerprint (sha256): 7c:34:bd:1b:d4:13:c6:9e:38:35:36:04:1b:4d:bc:a9:65:2d:53:cd:1e:ac:59:95:0f:9e:1a:dc:1e:e0:77:65

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate winit.planetrock.com

61

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for winit.planetrock.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

winit.bikemagazine.co.uk
winit.downtowncountry.co.uk
winit.gardennewsmagazine.co.uk
winit.metroradio.co.uk
winit.metroradio2.co.uk
winit.metroradio3.co.uk
winit.mfr.co.uk
winit.mfr2.co.uk
winit.mfr3.co.uk
winit.model-rail.co.uk
winit.moderngardensmagazine.co.uk
winit.mojo4music.com
winit.motherandbaby.co.uk
winit.motorcyclenews.com
winit.northsound1.com
winit.northsound2.com
winit.parkers.co.uk
winit.performancebikes.co.uk
winit.photoanswers.co.uk
winit.planetradio.co.uk
winit.planetrock.com
winit.practicalclassics.co.uk
winit.practicalsportsbikesmag.co.uk
winit.qthemusic.com
winit.radioaire.co.uk
winit.radioaire2.co.uk
winit.radioaire3.co.uk
winit.radioborders.com
winit.radiocity.co.uk
winit.radiocity2.co.uk
winit.radiocity3.co.uk
winit.recipes-plus.co.uk
winit.ride.co.uk
winit.rockfm.co.uk
winit.rockfm2.co.uk
winit.rockfm3.co.uk
winit.steamrailway.co.uk
winit.tay2.co.uk
winit.tay3.co.uk
winit.tayfm.co.uk
winit.tfm2.co.uk
winit.tfm3.co.uk
winit.tfmradio.co.uk
winit.thehitsradio.com
winit.todaysgolfer.co.uk
winit.trailrunningmag.co.uk
winit.tvchoicemagazine.co.uk
winit.viking2.co.uk
winit.viking3.co.uk
winit.vikingfm.co.uk
winit.wave105.com
winit.westfm.co.uk
winit.westsound.co.uk
winit.westsoundradio.com
winit.winchristmas.co.uk
winit.winitforhim.co.uk
winit.winsomething.co.uk
winit.winsummer.co.uk
winit.wintoys.co.uk
winit.yourhorse.co.uk
winit.yours.co.uk

Other certificates including the domain name planetrock.com

(limited to 100 certificates)
winit.planetradio.co.uk
absoluteradio.co.uk
winit.coolfm.co.uk
winit.bauerpublishing.com
winit.rockfm2.co.uk
twinit-production.herokuapp.com
winit.metroradio2.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
*.atseven.co.uk
*.listennow.link
*.listennow.link
winit.todaysgolfer.co.uk
winit-stage.bauerpublishing.com
winit.metroradio.co.uk
*.atseven.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.westsound.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.tay3.co.uk
*.atseven.co.uk
winit.metroradio.co.uk
winit.model-rail.co.uk
*.atseven.co.uk
winit-stage.planetrock.com
winit.metroradio.co.uk
*.atseven.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
assets.planetrock.com
winit.planetradio.co.uk
clickswin.bellamagazine.co.uk
*.planetrock.com
winit.metroradio.co.uk
*.atseven.co.uk
winit.bikemagazine.co.uk
winit.metroradio.co.uk
winit-stage.bauerpublishing.com
winit.metroradio.co.uk
*.planetrock.com
winit.bauerpublishing.com
winit.mfr3.co.uk
winit.mfr2.co.uk
winit.mfr.co.uk
absoluteradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
*.atseven.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
*.atseven.co.uk
winit.planetradio.co.uk
winit.mojo4music.com
winit.mfr2.co.uk
winit.mfr3.co.uk
winit.metroradio.co.uk
*.listennow.link
*.atseven.co.uk
absoluteradio.co.uk
winit.metroradio.co.uk
*.atseven.co.uk
winit.planetrock.com
winit.motorcyclenews.com
winit.metroradio.co.uk
absoluteradio.co.uk
absoluteradio.co.uk
winit.metroradio.co.uk
absoluteradio.co.uk
winit.metroradio.co.uk
*.listennow.link
winit.bauerpublishing.com
*.atseven.co.uk
winit.mojo4music.com
winit-stage.planetrock.com
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.qthemusic.com
winit.downtowncountry.co.uk
winit-stage.bauerpublishing.com
winit.planetrock.com
winit.metroradio.co.uk
absoluteradio.co.uk
winit.metroradio.co.uk
absoluteradio.co.uk
*.listennow.link
*.listennow.link
winit.metroradio.co.uk
winit.bauerpublishing.com
*.planetrock.com
winit.metroradio.co.uk
*.atseven.co.uk
winit.metroradio.co.uk

Certificate

The complete raw certificate details for winit.planetrock.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRd7QNaPQiX+w/svjPGz
ITDXTkuxNCYqVnC6qUydSqJO7YtJWuv3Lo4VGZnP9bPXQMuT5fUuJ/KFJqeD6YHS
ZMCNoUnL/S80wykO2U+w8GdFYxtiPFWP/oVJL7Ah+R1aMxkp/zROCS/MIewAhzGy
WcShWBnw113b/e+8sC9JIvy7XNO9VR2qbBtZFOsGwerXATRjtAKSEoIpBaikcqRx
e9f9AgfYBDh1ILSEYle2RljifEqO+yrThHjctaR7u7rHq5HQTwLG2DVlV2aQe8LQ
2+HCpuMfgVm77iO+I4ZC7uWpeSGAyTLBWrZXAQgGSrkvdhKp5oRCCB1RNk01Kzja
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289640416770570177373678862246295115542017
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 13:14:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 13:14:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'winit.planetrock.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20840899457949802321606377399348792893979704598634039413917605545968421269435123928549959889646404097029922520635679287282271945839599472410367884244324131145795204825253328281196370444395244102125534989593819534536248774962263885499295996437625241129516249088374097479977338135789826945267321750366246577744578870708710046846439732591470834294661404456743250315397134473747083796031017572770627503242527109850562468388857588784487807479073309138832461565493090164793246327824041353561742663172943276128362825374039512597777215484095163692497293729245690503916194774746013254896078392840160528802917205202731546499827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58efffe243eef2e3be1c65fca24d8b9fde1439c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1446 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.bikemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.downtowncountry.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.gardennewsmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.metroradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.metroradio2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.metroradio3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.model-rail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.moderngardensmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mojo4music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.motherandbaby.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.motorcyclenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.northsound1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.northsound2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.parkers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.performancebikes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.photoanswers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.planetradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.planetrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.practicalclassics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.practicalsportsbikesmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.qthemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioborders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.recipes-plus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.ride.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.steamrailway.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tay2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tay3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tayfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfm2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfm3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfmradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.thehitsradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.todaysgolfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.trailrunningmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tvchoicemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.viking2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.viking3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.vikingfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.wave105.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.westfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.westsound.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.westsoundradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winchristmas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winitforhim.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winsomething.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winsummer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.wintoys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.yourhorse.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.yours.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d828615c5000004030046304402207f1c458c5c4434b5f3c10a73a34f08611e02bbc673e8b3a033a98f1329200ea402201ea1987a4a32c20e413022e21845e17cba12f8163c104fba83535d27578070b9007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d828617a3000004030046304402206696a93bba486182b5b877d51ec2c6bf8f611c684b116a11858bcd6022ccc22c022005395576b3612afc40bc72e52f18dbf976f2d6c3d0183008c832e40916abbd6e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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