subscribe.theweek.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:64:ec:68:d5:be:75:ea:88:2d:1a:eb:ee:1c:5f:4e:79:9f was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=subscribe.theweek.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:64:ec:68:d5:be:75:ea:88:2d:1a:eb:ee:1c:5f:4e:79:9f
Serial Number (int): 382791622560256450434292521090416242489759
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 62:86:ae:e3:74:99:e5:c9:39:ea:21:05:f0:16:a9:c0:a5:b0:99:c3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c5:9b:64:4b:e9:46:26:1f:46:e8:e7:92:78:0a:d6:0c:4a:54:de:c5
Fingerprint (sha256): 88:a6:13:1b:62:d6:04:68:7b:b2:1e:52:79:bb:57:fc:42:ec:ff:da:de:e5:7a:ca:b4:c6:04:3a:ad:34:5d:57

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate subscribe.theweek.co.uk

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for subscribe.theweek.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adspecs.dennis.co.uk
aneveningwithastonmartin.co.uk
app.theweek.co.uk
bikes-etc.com
community.evo.co.uk
computeractive.co.uk
computershopper.co.uk
crossstitchermag.com
custompc.co.uk
cyclistmag.com
dennis.co.uk
denniscareers.co.uk
dennismags.co.uk
digitalslrphoto.com
everythingmw.com
evotrackdays.co.uk
forteantimes.com
givetheweek.co.uk
healthandfitnessonline.co.uk
historicmotoringawards.co.uk
landroveraddict.com
licensing.dennis.co.uk
macuser.co.uk
mag.autoexpress.co.uk
mag.evo.co.uk
mag.mensfitness.co.uk
mag.theweek.co.uk
magbooks.com
micromart.co.uk
newcarawards.co.uk
octane-magazine.com
octaneevents.co.uk
octanetrackdays.co.uk
offers.astonmagazine.co.uk
offers.getcomputeractive.co.uk
offers.lrm.co.uk
offers.octane-magazine.com
offers.pcpro.co.uk
offers.theweekjunior.co.uk
offers.webuser.co.uk
podcast.pcpro.co.uk
podcasts.denofgeek.com
privacy.dennis.co.uk
signupapp2.moneyweek.com
subscribe.bikesetc.co.uk
subscribe.crossstitchermag.com
subscribe.cyclistmag.co.uk
subscribe.macuser.co.uk
subscribe.theweek.co.uk
subscribe.yourfamilytreemag.co.uk
subscriptions.theweek.co.uk
syndication.classicandperformancecar.com
test.theweek.co.uk
theweeklive.co.uk
theweeksociety.co.uk
theweektickets.co.uk
theweekwines.co.uk
threepm.co.uk
treesfortrees.co.uk
vantagemag.co.uk
webuser.co.uk
womensfitness.co.uk
www.computeractive.co.uk
www.computershopper.co.uk
www.crossstitchermag.com
www.custompc.co.uk
www.cyclistmag.com
www.denniscareers.co.uk
www.dennismags.co.uk
www.digitalslrphoto.com
www.everythingmw.com
www.forteantimes.com
www.givetheweek.co.uk
www.healthandfitnessonline.co.uk
www.landroveraddict.com
www.macuser.co.uk
www.magbooks.com
www.micromart.co.uk
www.octane-magazine.com
www.subscribe.theweek.co.uk
www.subscriptions.theweek.co.uk
www.theweeklive.co.uk
www.theweektickets.co.uk
www.theweekwines.co.uk
www.threepm.co.uk
www.vantagemag.co.uk
www.webuser.co.uk
www.womensfitness.co.uk
www.yourfamilyhistorymag.co.uk
www.yourfamilyhistorymag.com
www.yourfamilytreemag.co.uk
yourfamilyhistorymag.co.uk
yourfamilyhistorymag.com
yourfamilytreemag.co.uk

Other certificates including the domain name theweek.co.uk

(limited to 100 certificates)
www.pugpig.com
aex-mms.autoexpress.co.uk
www.theweek.co.uk
dg-0094-4765bd0.client-tls.adestra.com
subscription.theweek.co.uk
adspecs.dennis.co.uk
ceros3.map.fastly.net
aex-mms.autoexpress.co.uk
www.pugpig.com
aex-mms.autoexpress.co.uk
www.pugpig.com
s5-san.cloudinary.com
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
derstandard-spat.derstandard.at
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
*.pinterestceros.com
dns-vetting1j.map.fastly.net
www.pugpig.com
subscription.theweek.co.uk
s5-san.cloudinary.com
dns-vetting1j.map.fastly.net
r626.womanandhome.com
z980.carthrottle.com
theweek.co.uk
*.theweek.co.uk
dns-vetting1j.map.fastly.net
www.pugpig.com
www.pugpig.com
dns-vetting1j.map.fastly.net
ceros3.map.fastly.net
*.content.pugpig-dev.com
derstandard-spat.derstandard.at
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
aex-mms.autoexpress.co.uk
ceros3.map.fastly.net
ceros3.map.fastly.net
ceros3.map.fastly.net
s5-san.cloudinary.com
dg-0094-4765bd0.client-tls.adestra.com
theweek.co.uk
*.pinterestceros.com
dns-vetting1j.map.fastly.net
aex-mms.autoexpress.co.uk
s5-cloudinary-pin.map.fastly.net
dns-vetting1j.map.fastly.net
aex-mms.autoexpress.co.uk
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
s5-san.cloudinary.com
www.pugpig.com
adspecs.dennis.co.uk
dns-vetting1j.map.fastly.net
s5-cloudinary-pin.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
www.pugpig.com
derstandard-spat.derstandard.at
auth.astonmagazine.co.uk
dns-vetting1j.map.fastly.net
ceros3.map.fastly.net
s5-cloudinary-pin.map.fastly.net
*.content.pugpig-dev.com
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
s5-cloudinary-pin.map.fastly.net
adspecs.dennis.co.uk
ceros3.map.fastly.net
dns-vetting1.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
l468.drivingelectric.com
www.pugpig.com
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
dns-vetting1j.map.fastly.net
adspecs.dennis.co.uk
s5-san.cloudinary.com
s5-san.cloudinary.com
r468.evo.co.uk
s5-san.cloudinary.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
www.pugpig.com
l468.drivingelectric.com
ceros3.map.fastly.net
derstandard-spat.derstandard.at
www.pugpig.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
aex-mms.autoexpress.co.uk
www.pugpig.com
adspecs.dennis.co.uk
www.pugpig.com
auth.autoexpress.co.uk
mmm.theweek.co.uk
dg-0094-4765bd0.client-tls.adestra.com
www.pugpig.com
dg-0094-4765bd0.client-tls.adestra.com

Certificate

The complete raw certificate details for subscribe.theweek.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bxGpSdKEPYJIifRLzxM
L4KgWGGU0Mgnp7rwHp4omfbH3vpQ+w2WVoE9erdn+2gdtx4rCa+7TMr/FdDlDhSk
1/6GczGzlgCzcFqw7InbNKKPiCTjGOIpBOJHb4dORHZPMsRWrAKbrcvU6XAOqgZR
BUG8wnwacoZRPIEOBPhK9t4rwbrgpS/WS5izPNIs2gS+uaEtJpe0+8cCA2dndXY1
v0HRGlMN9esPWg/jLJbynodQ4VUp13QfI3PbeFNC/CD65oTIml5UPANLjM4nl4mK
3U98M+KbaU7YyJgLLGfpnwlp1QZwACrF+6hLctUSHqyrFheF08LlPhxLOM3kYTZR
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382791622560256450434292521090416242489759
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-05 09:56:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-03 09:56:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subscribe.theweek.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27486554512579902268205855244091330232586119008864078393566286764459739528774165342109010049964086745469662399139464713331146710432905082001767994330582089474652134534857805650208203195102451600607606977124450477206082899039448091985066145677213243473634629482428550266143514848267639149399215102148135014255561074305584741337506619787472653146270198850750600064185466522603750447153634223557286354790528347498775808085242754486844916536689719126341552039925527425419952523336742625507851285425348503489933456086661324589809421621905881002272130963685013458145099499552689444840475280084843566572602105233022630908337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6286aee37499e5c939ea2105f016a9c0a5b099c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2170 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adspecs.dennis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aneveningwithastonmartin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikes-etc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.evo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computeractive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computershopper.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossstitchermag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custompc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclistmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denniscareers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennismags.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalslrphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everythingmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evotrackdays.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forteantimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givetheweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthandfitnessonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicmotoringawards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landroveraddict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licensing.dennis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macuser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mag.autoexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mag.evo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mag.mensfitness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mag.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micromart.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcarawards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'octane-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'octaneevents.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'octanetrackdays.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.astonmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.getcomputeractive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.lrm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.octane-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.pcpro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.theweekjunior.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.webuser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcast.pcpro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcasts.denofgeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy.dennis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signupapp2.moneyweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.bikesetc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.crossstitchermag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.cyclistmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.macuser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.yourfamilytreemag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriptions.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syndication.classicandperformancecar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theweeklive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theweeksociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theweektickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theweekwines.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threepm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treesfortrees.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vantagemag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webuser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womensfitness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.computeractive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.computershopper.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crossstitchermag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.custompc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyclistmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denniscareers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dennismags.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalslrphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.everythingmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forteantimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givetheweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthandfitnessonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.landroveraddict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macuser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.micromart.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.octane-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subscribe.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subscriptions.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theweeklive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theweektickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theweekwines.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.threepm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vantagemag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webuser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.womensfitness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourfamilyhistorymag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourfamilyhistorymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourfamilytreemag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourfamilyhistorymag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourfamilyhistorymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourfamilytreemag.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166e38498440000040300463044022072bf3c066dced79c12bbdb3d10a7e7bc7cea5db03edcb83cd36f2c368b9dcb3b02200e0ea52f08f521d49b18189d309839009f59dbc0f683473c19c8ebcd452491420077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000166e38499280000040300483046022100d1c9c88f2dcb500f293e91750595b5c2c35a06261cf539c4a930830e7c8c103c022100c38a907778cb791271175f3e9ae4a4f6d29d5dbc473aa56434b71af2231d8011
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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