winit.bauerpublishing.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d8:cb:4e:3d:3e:72:65:a3:c6:f5:2b:0b:71:96:38:29:14 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=winit.bauerpublishing.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d8:cb:4e:3d:3e:72:65:a3:c6:f5:2b:0b:71:96:38:29:14
Serial Number (int): 335108088574677287751394669392666264348948
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:1c:4f:06:97:f9:61:8a:4d:41:16:0d:c4:1f:09:ed:95:49:d6:52
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fa:1f:b1:6e:02:d6:06:d9:cb:0c:af:f0:9c:8f:5c:55:5d:1d:50:cc
Fingerprint (sha256): bf:0e:43:b7:9a:3c:72:5c:63:76:6c:16:bc:45:d0:89:8d:04:e3:77:5b:49:a7:49:73:8e:50:2b:c3:81:54:65

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate winit.bauerpublishing.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for winit.bauerpublishing.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clickswin.bellamagazine.co.uk
clickswin.eatinmagazine.co.uk
clickswin.fateandfortunemagazine.co.uk
clickswin.myfavouriterecipes.net
clickswin.puzzlemagazines.co.uk
clickswin.spiritanddestiny.co.uk
clickswin.takeabreak.co.uk
clickswin.thatslife.co.uk
clickswin.tvchoicemagazine.co.uk
twinit.bauernet.me
winit.absoluteradio.co.uk
winit.bauernet.me
winit.bauerpublishing.com
winit.bauerxcel.com
winit.bikemagazine.co.uk
winit.birdwatching.co.uk
winit.builtmag.co.uk
winit.carmagazine.co.uk
winit.carmechanicsmag.co.uk
winit.cfmradio.co.uk
winit.citytalk.fm
winit.classicbike.co.uk
winit.classiccargiveaways.co.uk
winit.classiccarsforsale.co.uk
winit.classiccarsmagazine.co.uk
winit.classiccarweekly.co.uk
winit.closeronline.co.uk
winit.clyde1.com
winit.clyde2.com
winit.clyde3.com
winit.coolfm.co.uk
winit.downtown.co.uk
winit.downtowncountry.co.uk
winit.eatinmagazine.co.uk
winit.empireonline.com
winit.fateandfortunemagazine.co.uk
winit.forth2.com
winit.forth3.com
winit.forthone.com
winit.gardenanswersmagazine.co.uk
winit.gardennewsmagazine.co.uk
winit.gofishing.co.uk
winit.graziadaily.co.uk
winit.hallam2.co.uk
winit.hallam3.co.uk
winit.hallamfm.co.uk
winit.heatworld.com
winit.horsedeals.co.uk
winit.kerrangradio.co.uk
winit.key103.co.uk
winit.key2radio.co.uk
winit.key3radio.co.uk
winit.kissfmuk.com
winit.landscapemagazine.co.uk
winit.livefortheoutdoors.com
winit.lro.com
winit.magic.co.uk
winit.magicchilled.co.uk
winit.mcnsport.co.uk
winit.metroradio.co.uk
winit.metroradio2.co.uk
winit.metroradio3.co.uk
winit.mfr.co.uk
winit.mfr2.co.uk
winit.mfr3.co.uk
winit.model-rail.co.uk
winit.moderngardensmagazine.co.uk
winit.mojo4music.com
winit.motherandbaby.co.uk
winit.motorcyclenews.com
winit.northsound1.com
winit.northsound2.com
winit.parkers.co.uk
winit.performancebikes.co.uk
winit.petsandprizes.co.uk
winit.photoanswers.co.uk
winit.planetradio.co.uk
winit.planetrock.com
winit.practicalclassics.co.uk
winit.practicalfishkeeping.co.uk
winit.practicalsportsbikesmag.co.uk
winit.qthemusic.com
winit.radioaire.co.uk
winit.radioaire2.co.uk
winit.radioaire3.co.uk
winit.radioborders.com
winit.radiocity.co.uk
winit.radiocity2.co.uk
winit.radiocity3.co.uk
winit.recipes-plus.co.uk
winit.ride.co.uk
winit.rockfm.co.uk
winit.rockfm2.co.uk
winit.rockfm3.co.uk
winit.steamrailway.co.uk
winit.sweepon.com.au
winit.winsomething.co.uk
www.sweepon.com
www.sweepon.com.au
www.sweepon.de

Other certificates including the domain name bauerpublishing.com

(limited to 100 certificates)
winit.bauerpublishing.com
winit-stage.winchristmas.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
twinit-production.herokuapp.com
winit.cbs.soapsindepth.com
www.sweepon.de
bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
mail.bauerpublishing.com
winit.bauerpublishing.com
winit-stage.bauerpublishing.com
winit.bauerpublishing.com
winit-stage.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
stage.sweepon.com
bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
clickswin.eatinmagazine.co.uk
gewinnspiel.sweepon.de
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit-stage.winchristmas.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
stage.sweepon.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
bauerpublishing.com
mail.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.firstforwomen.com
*.bauerpublishing.com
winit.bauerpublishing.com
clickswin.bellamagazine.co.uk
winit.bauerpublishing.com
bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit-stage.bauerpublishing.com
clickswin-stage-uk.bellamagazine.co.uk
winit.bauerpublishing.com
bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
*.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
bauerpublishing.com
winit.bauerpublishing.com
msadsnyc04.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit-stage.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com

Certificate

The complete raw certificate details for winit.bauerpublishing.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojBxgphRGbhluduuvogT
yI0/uU4KL48HSfgZZq76COvNypHKiKpz0ERigH36loCCicgVDVV9sPesl8jHImx3
FV2+ZfA1sBwHXPM2NiEI5gexyWRIRy9Ve449aWatxTdyOCv7k9/6Pp6/bUL+eE8S
pu5mzIKqTN77LMTwWxltqUGP8tie7DQGyFxWudsoSfX8XqQWkdA0+3rrBkCzcucJ
VZb0JTStzQx+LrDjyZsHteoeOwznvYCEL3wdDg/dwwuL4bfjE6ku0eX+NhcKm7MU
kxP3HPQ7Zxq0f3y0GNLhZjpbJ/et7LMo13W8Xu8GJnXLCoc3qS4lfEBGaQYCnhZC
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335108088574677287751394669392666264348948
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-07 04:53:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 04:53:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'winit.bauerpublishing.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20474493734864543109644589674008111459522995467888845248067540494516576054640881834965841915192974339098103651848673738033589055357580777302941642492786021290309849402869444103054365923673191812429890008903001884205480996800442890068909647343904468402588449926219930863533754692743588271325575222894917143631099253174899411882812173714898337466068065829256643973714238344871384267571282143856760393027235067218379306164327086453095831827985936500094554633045124783112201281317030421532712744518652679649783257859871263890306111812648867815648850337684780070971692723379584233209119515956775981024039888251764025475729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d1c4f0697f9618a4d41160dc41f09ed9549d652
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.bellamagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.eatinmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.fateandfortunemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.myfavouriterecipes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.puzzlemagazines.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.spiritanddestiny.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.takeabreak.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.thatslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.tvchoicemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twinit.bauernet.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.absoluteradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.bauernet.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.bauerpublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.bauerxcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.bikemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.birdwatching.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.builtmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.carmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.carmechanicsmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.cfmradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.citytalk.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.classicbike.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.classiccargiveaways.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.classiccarsforsale.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.classiccarsmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.classiccarweekly.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.closeronline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.clyde1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.clyde2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.clyde3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.coolfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.downtown.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.downtowncountry.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.eatinmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.empireonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.fateandfortunemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.forth2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.forth3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.forthone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.gardenanswersmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.gardennewsmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.gofishing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.graziadaily.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.hallam2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.hallam3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.hallamfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.heatworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.horsedeals.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.kerrangradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.key103.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.key2radio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.key3radio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.kissfmuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.landscapemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.livefortheoutdoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.lro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.magic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.magicchilled.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mcnsport.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.metroradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.metroradio2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.metroradio3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.model-rail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.moderngardensmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mojo4music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.motherandbaby.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.motorcyclenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.northsound1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.northsound2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.parkers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.performancebikes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.petsandprizes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.photoanswers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.planetradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.planetrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.practicalclassics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.practicalfishkeeping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.practicalsportsbikesmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.qthemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioborders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.recipes-plus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.ride.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.steamrailway.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.sweepon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winsomething.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sweepon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sweepon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sweepon.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000166ecbb9d1800000403004630440220161f165a206d817b23acf90408beb36a58584b9e58ecc34db7dd917726887fdd022005170704b80043c01bb3ea038c4974616283d48014aee3b7ae3affb19512845d00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000166ecbb9cde0000040300483046022100820986d75056cca52b10fb3cfb26388c93d63a1395ec3d481166faf05bc9002d022100e7e12aab9a96514300caadc5a852ffd0d0a13e0208a8ab4a6a58d7a2c4db5d48
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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