banburyguardian.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:f8:78:27:8a:0e:33:d0:27:53:71:1e:8c:24:da:58:3f:28 was issued on by Let's Encrypt.

With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=banburyguardian.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f8:78:27:8a:0e:33:d0:27:53:71:1e:8c:24:da:58:3f:28
Serial Number (int): 432998883382603153245351581558702794620712
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: dd:ab:77:30:34:36:1d:b4:a2:97:2e:06:f9:54:96:7b:b6:25:a4:fa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2a:84:68:8a:09:b4:18:90:35:41:99:27:1f:e1:97:e9:24:bb:cd:13
Fingerprint (sha256): e3:07:0c:75:b8:4e:ae:bb:bb:4a:07:37:41:40:3d:ab:19:96:41:e2:c7:75:37:cc:8b:2b:35:f2:78:db:2c:f8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate banburyguardian.co.uk

61

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for banburyguardian.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

banburyguardian.co.uk
bedfordtoday.co.uk
biggleswadetoday.co.uk
birminghamworld.uk
blackpoolgazette.co.uk
bristolworld.com
bucksherald.co.uk
burnleyexpress.net
buxtonadvertiser.co.uk
chad.co.uk
daventryexpress.co.uk
derbyshiretimes.co.uk
derryjournal.com
dewsburyreporter.co.uk
doncasterfreepress.co.uk
edinburghnews.scotsman.com
falkirkherald.co.uk
farminglife.com
fifetoday.co.uk
gallowaygazette.co.uk
glasgowworld.com
halifaxcourier.co.uk
harboroughmail.co.uk
harrogateadvertiser.co.uk
hartlepoolmail.co.uk
hemeltoday.co.uk
hucknalldispatch.co.uk
lancasterguardian.co.uk
leightonbuzzardonline.co.uk
lep.co.uk
lincolnshireworld.com
liverpoolworld.uk
londonworld.com
lutontoday.co.uk
manchesterworld.uk
meltontimes.co.uk
miltonkeynes.co.uk
nationalworld.com
newcastleworld.com
newsletter.co.uk
northamptonchron.co.uk
northantstelegraph.co.uk
northernirelandworld.com
northumberlandgazette.co.uk
peterboroughtoday.co.uk
portsmouth.co.uk
scotsman.com
shieldsgazette.com
stornowaygazette.co.uk
sunderlandecho.com
sussexexpress.co.uk
thescarboroughnews.co.uk
thesouthernreporter.co.uk
thestar.co.uk
wakefieldexpress.co.uk
walesworld.com
warwickshireworld.com
wigantoday.net
worksopguardian.co.uk
yorkshireeveningpost.co.uk
yorkshirepost.co.uk

Other certificates including the domain name banburyguardian.co.uk

(limited to 100 certificates)
nationalworld.com
da.ballymenatimes.com
landing.banburyguardian.co.uk
evenfall.memories.com.au
newsletters.banburyguardian.co.uk
local.newstribune.info
findit.banburyguardian.co.uk
consent.3addedminutes.com
banburyguardian.co.uk
landing.banburyguardian.co.uk
newsletters.banburyguardian.co.uk
findit.banburyguardian.co.uk
da.ballymenatimes.com
www.inews.co.uk

consent.3addedminutes.com
findit.banburyguardian.co.uk
local.banbridgeleader.co.uk
landing.banburyguardian.co.uk
cmp.ballymenatimes.com
evenfall.memories.com.au
www.miltonkeynes.co.uk
findit.banburyguardian.co.uk
admin.adforge.com
banburyguardian.co.uk
nationalworld.com
findit.banburyguardian.co.uk
newsletters.banburyguardian.co.uk
da.ballymenatimes.com
nationalworld.com
beta.dewsburyreporter.co.uk
landing.banburyguardian.co.uk
findit.banburyguardian.co.uk
findit.banburyguardian.co.uk
local.stcatharinesstandard.ca
cmp.ballymenatimes.com
beta.banburyguardian.co.uk
newsletters.banburyguardian.co.uk
landing.banburyguardian.co.uk
da.ballymenatimes.com
newsletters.banburyguardian.co.uk
da.ballymenatimes.com
local.starkvilledailynews.com
findit.banburyguardian.co.uk
www.portsmouth.co.uk
cmp.ballymenatimes.com
da.ballymenatimes.com
cmp.ballymenatimes.com
nationalworld.com
www.peterboroughtoday.co.uk
consent.3addedminutes.com
da.ballymenatimes.com
findit.banburyguardian.co.uk
nationalworld.com
landing.banburyguardian.co.uk
da.ballymenatimes.com
local.windsorstar.com
findit.banburyguardian.co.uk
findit.banburyguardian.co.uk
landing.banburyguardian.co.uk
3addedminutes.com
www.portsmouth.co.uk
newsletters.banburyguardian.co.uk
local.fauquier.com
newsletters.banburyguardian.co.uk
nationalworld.com
www.miltonkeynes.co.uk
banburyguardian.co.uk
nationalworld.com
da.ballymenatimes.com
local.doverpost.com
admin.adforge.com
local.carrickfergustimes.co.uk
findit.banburyguardian.co.uk
local.theintell.com
consent.3addedminutes.com
da.ballymenatimes.com
banburyguardian.co.uk
da.ballymenatimes.com

Certificate

The complete raw certificate details for banburyguardian.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5mus7SgW8/tjN1+j84k
6Ye4RfQy2Vj65k/hrKfweJP0oh/2eYscIsLyoqDLuBtZ8SD8PgvSI2xk7MT05g/W
MB4ubfd2ilRCz7In111d9JYOBH/g2J34igojVtGjKjdo4va6k6Gqwq7cuo5sQBNL
uQ72cgp6zqux1gbfJFKTOOxr1CzseXPsFIl5nItWrQENYGgjyvr9G5mrC/nolVOw
FzLSrXgxBFc4L5sWgFdBOxQjCGFvVpnoculV9zE8wz7CLowLNIK44QKvyqO6ehS+
EWsCEAjSbVnS0/vFtl/YLim9k08sBJBLbogPJAVFd97FPXm+aWF6QerVVzahI/GZ
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432998883382603153245351581558702794620712
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-17 19:57:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-15 19:57:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'banburyguardian.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23177393439313858181041728759073556841179085729220649232788332253615636990041989189284452545771569047969104317352149317467112357103092793835765930302628054382102654789140086483389973403335150710671850431191345039321002713251219361335420106018544589267594964903163895436682377089263950030674201318775895619674898193931915160395522562503395786438786515885590567262110730320908169815572225102771274019411004551886790103072537083678064515194396168900942710343840607184468683303399379470581693033209138976281071215691001523331310709072130371415902609180348135205968051976508640154610779243485453279193944851401609736984909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ddab773034361db4a2972e06f954967bb625a4fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1305 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banburyguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedfordtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biggleswadetoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birminghamworld.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackpoolgazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bristolworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucksherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burnleyexpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buxtonadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chad.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daventryexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derbyshiretimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derryjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dewsburyreporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doncasterfreepress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edinburghnews.scotsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falkirkherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farminglife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifetoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallowaygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glasgowworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halifaxcourier.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harboroughmail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrogateadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartlepoolmail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemeltoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hucknalldispatch.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lancasterguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leightonbuzzardonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lep.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnshireworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liverpoolworld.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londonworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lutontoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manchesterworld.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meltontimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miltonkeynes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcastleworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northamptonchron.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northantstelegraph.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernirelandworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northumberlandgazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterboroughtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portsmouth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shieldsgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stornowaygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunderlandecho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sussexexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thescarboroughnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesouthernreporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakefieldexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walesworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warwickshireworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wigantoday.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worksopguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkshireeveningpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkshirepost.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001820df411fe000004030046304402207a4b7358f64753e4190ea95d0e50ca9b65776fb5db030d0d4e20a76f6540d59102204579e6907252b2a0dd453b32effe477a038541b9ab6201c90cc073c604eeef8100760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001820df412180000040300473045022100813a5739c32d6c1e3f40e47addfe3608c9438994155d022a7c7009a5a2699a9b022078f83c948255267a8185501cc7c268ef4358edf931a4d8eeefb58e20ee5bf4cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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