banburyguardian.co.uk
Issued by R3
About this certificate
This digital certificate with serial number 04:f8:78:27:8a:0e:33:d0:27:53:71:1e:8c:24:da:58:3f:28 was issued on by Let's Encrypt.
With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=banburyguardian.co.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:f8:78:27:8a:0e:33:d0:27:53:71:1e:8c:24:da:58:3f:28Serial Number (int): 432998883382603153245351581558702794620712
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: dd:ab:77:30:34:36:1d:b4:a2:97:2e:06:f9:54:96:7b:b6:25:a4:fa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 2a:84:68:8a:09:b4:18:90:35:41:99:27:1f:e1:97:e9:24:bb:cd:13
Fingerprint (sha256): e3:07:0c:75:b8:4e:ae:bb:bb:4a:07:37:41:40:3d:ab:19:96:41:e2:c7:75:37:cc:8b:2b:35:f2:78:db:2c:f8
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate banburyguardian.co.uk
61
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for banburyguardian.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
banburyguardian.co.uk
bedfordtoday.co.uk
biggleswadetoday.co.uk
birminghamworld.uk
blackpoolgazette.co.uk
bristolworld.com
bucksherald.co.uk
burnleyexpress.net
buxtonadvertiser.co.uk
chad.co.uk
daventryexpress.co.uk
derbyshiretimes.co.uk
derryjournal.com
dewsburyreporter.co.uk
doncasterfreepress.co.uk
edinburghnews.scotsman.com
falkirkherald.co.uk
farminglife.com
fifetoday.co.uk
gallowaygazette.co.uk
glasgowworld.com
halifaxcourier.co.uk
harboroughmail.co.uk
harrogateadvertiser.co.uk
hartlepoolmail.co.uk
hemeltoday.co.uk
hucknalldispatch.co.uk
lancasterguardian.co.uk
leightonbuzzardonline.co.uk
lep.co.uk
lincolnshireworld.com
liverpoolworld.uk
londonworld.com
lutontoday.co.uk
manchesterworld.uk
meltontimes.co.uk
miltonkeynes.co.uk
nationalworld.com
newcastleworld.com
newsletter.co.uk
northamptonchron.co.uk
northantstelegraph.co.uk
northernirelandworld.com
northumberlandgazette.co.uk
peterboroughtoday.co.uk
portsmouth.co.uk
scotsman.com
shieldsgazette.com
stornowaygazette.co.uk
sunderlandecho.com
sussexexpress.co.uk
thescarboroughnews.co.uk
thesouthernreporter.co.uk
thestar.co.uk
wakefieldexpress.co.uk
walesworld.com
warwickshireworld.com
wigantoday.net
worksopguardian.co.uk
yorkshireeveningpost.co.uk
yorkshirepost.co.uk
bedfordtoday.co.uk
biggleswadetoday.co.uk
birminghamworld.uk
blackpoolgazette.co.uk
bristolworld.com
bucksherald.co.uk
burnleyexpress.net
buxtonadvertiser.co.uk
chad.co.uk
daventryexpress.co.uk
derbyshiretimes.co.uk
derryjournal.com
dewsburyreporter.co.uk
doncasterfreepress.co.uk
edinburghnews.scotsman.com
falkirkherald.co.uk
farminglife.com
fifetoday.co.uk
gallowaygazette.co.uk
glasgowworld.com
halifaxcourier.co.uk
harboroughmail.co.uk
harrogateadvertiser.co.uk
hartlepoolmail.co.uk
hemeltoday.co.uk
hucknalldispatch.co.uk
lancasterguardian.co.uk
leightonbuzzardonline.co.uk
lep.co.uk
lincolnshireworld.com
liverpoolworld.uk
londonworld.com
lutontoday.co.uk
manchesterworld.uk
meltontimes.co.uk
miltonkeynes.co.uk
nationalworld.com
newcastleworld.com
newsletter.co.uk
northamptonchron.co.uk
northantstelegraph.co.uk
northernirelandworld.com
northumberlandgazette.co.uk
peterboroughtoday.co.uk
portsmouth.co.uk
scotsman.com
shieldsgazette.com
stornowaygazette.co.uk
sunderlandecho.com
sussexexpress.co.uk
thescarboroughnews.co.uk
thesouthernreporter.co.uk
thestar.co.uk
wakefieldexpress.co.uk
walesworld.com
warwickshireworld.com
wigantoday.net
worksopguardian.co.uk
yorkshireeveningpost.co.uk
yorkshirepost.co.uk
Other certificates including the domain name banburyguardian.co.uk
(limited to 100 certificates)
nationalworld.com
da.ballymenatimes.com
landing.banburyguardian.co.uk
evenfall.memories.com.au
newsletters.banburyguardian.co.uk
local.newstribune.info
findit.banburyguardian.co.uk
consent.3addedminutes.com
banburyguardian.co.uk
landing.banburyguardian.co.uk
newsletters.banburyguardian.co.uk
findit.banburyguardian.co.uk
da.ballymenatimes.com
www.inews.co.uk
consent.3addedminutes.com
findit.banburyguardian.co.uk
local.banbridgeleader.co.uk
landing.banburyguardian.co.uk
cmp.ballymenatimes.com
evenfall.memories.com.au
www.miltonkeynes.co.uk
findit.banburyguardian.co.uk
admin.adforge.com
banburyguardian.co.uk
nationalworld.com
findit.banburyguardian.co.uk
newsletters.banburyguardian.co.uk
da.ballymenatimes.com
nationalworld.com
beta.dewsburyreporter.co.uk
landing.banburyguardian.co.uk
findit.banburyguardian.co.uk
findit.banburyguardian.co.uk
local.stcatharinesstandard.ca
cmp.ballymenatimes.com
beta.banburyguardian.co.uk
newsletters.banburyguardian.co.uk
landing.banburyguardian.co.uk
da.ballymenatimes.com
newsletters.banburyguardian.co.uk
da.ballymenatimes.com
local.starkvilledailynews.com
findit.banburyguardian.co.uk
www.portsmouth.co.uk
cmp.ballymenatimes.com
da.ballymenatimes.com
cmp.ballymenatimes.com
nationalworld.com
www.peterboroughtoday.co.uk
consent.3addedminutes.com
da.ballymenatimes.com
findit.banburyguardian.co.uk
nationalworld.com
landing.banburyguardian.co.uk
da.ballymenatimes.com
local.windsorstar.com
findit.banburyguardian.co.uk
findit.banburyguardian.co.uk
landing.banburyguardian.co.uk
3addedminutes.com
www.portsmouth.co.uk
newsletters.banburyguardian.co.uk
local.fauquier.com
newsletters.banburyguardian.co.uk
nationalworld.com
www.miltonkeynes.co.uk
banburyguardian.co.uk
nationalworld.com
da.ballymenatimes.com
local.doverpost.com
admin.adforge.com
local.carrickfergustimes.co.uk
findit.banburyguardian.co.uk
local.theintell.com
consent.3addedminutes.com
da.ballymenatimes.com
banburyguardian.co.uk
da.ballymenatimes.com
da.ballymenatimes.com
landing.banburyguardian.co.uk
evenfall.memories.com.au
newsletters.banburyguardian.co.uk
local.newstribune.info
findit.banburyguardian.co.uk
consent.3addedminutes.com
banburyguardian.co.uk
landing.banburyguardian.co.uk
newsletters.banburyguardian.co.uk
findit.banburyguardian.co.uk
da.ballymenatimes.com
www.inews.co.uk
consent.3addedminutes.com
findit.banburyguardian.co.uk
local.banbridgeleader.co.uk
landing.banburyguardian.co.uk
cmp.ballymenatimes.com
evenfall.memories.com.au
www.miltonkeynes.co.uk
findit.banburyguardian.co.uk
admin.adforge.com
banburyguardian.co.uk
nationalworld.com
findit.banburyguardian.co.uk
newsletters.banburyguardian.co.uk
da.ballymenatimes.com
nationalworld.com
beta.dewsburyreporter.co.uk
landing.banburyguardian.co.uk
findit.banburyguardian.co.uk
findit.banburyguardian.co.uk
local.stcatharinesstandard.ca
cmp.ballymenatimes.com
beta.banburyguardian.co.uk
newsletters.banburyguardian.co.uk
landing.banburyguardian.co.uk
da.ballymenatimes.com
newsletters.banburyguardian.co.uk
da.ballymenatimes.com
local.starkvilledailynews.com
findit.banburyguardian.co.uk
www.portsmouth.co.uk
cmp.ballymenatimes.com
da.ballymenatimes.com
cmp.ballymenatimes.com
nationalworld.com
www.peterboroughtoday.co.uk
consent.3addedminutes.com
da.ballymenatimes.com
findit.banburyguardian.co.uk
nationalworld.com
landing.banburyguardian.co.uk
da.ballymenatimes.com
local.windsorstar.com
findit.banburyguardian.co.uk
findit.banburyguardian.co.uk
landing.banburyguardian.co.uk
3addedminutes.com
www.portsmouth.co.uk
newsletters.banburyguardian.co.uk
local.fauquier.com
newsletters.banburyguardian.co.uk
nationalworld.com
www.miltonkeynes.co.uk
banburyguardian.co.uk
nationalworld.com
da.ballymenatimes.com
local.doverpost.com
admin.adforge.com
local.carrickfergustimes.co.uk
findit.banburyguardian.co.uk
local.theintell.com
consent.3addedminutes.com
da.ballymenatimes.com
banburyguardian.co.uk
da.ballymenatimes.com
Certificate
The complete raw certificate details for banburyguardian.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKMzCCCRugAwIBAgISBPh4J4oOM9AnU3EejCTaWD8oMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA3MTcxOTU3NTVaFw0yMjEwMTUxOTU3NTRaMCAxHjAcBgNVBAMT FWJhbmJ1cnlndWFyZGlhbi5jby51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBALeZrrO0oFvP7Yzdfo/OJOmHuEX0MtlY+uZP4ayn8HiT9KIf9nmLHCLC 8qKgy7gbWfEg/D4L0iNsZOzE9OYP1jAeLm33dopUQs+yJ9ddXfSWDgR/4Nid+IoK I1bRoyo3aOL2upOhqsKu3LqObEATS7kO9nIKes6rsdYG3yRSkzjsa9Qs7Hlz7BSJ eZyLVq0BDWBoI8r6/RuZqwv56JVTsBcy0q14MQRXOC+bFoBXQTsUIwhhb1aZ6HLp VfcxPMM+wi6MCzSCuOECr8qjunoUvhFrAhAI0m1Z0tP7xbZf2C4pvZNPLASQS26I DyQFRXfexT15vmlhekHq1Vc2oSPxmU0CAwEAAaOCB1MwggdPMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw ADAdBgNVHQ4EFgQU3at3MDQ2HbSily4G+VSWe7YlpPowHwYDVR0jBBgwFoAUFC6z F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl bmNyLm9yZy8wggUiBgNVHREEggUZMIIFFYIVYmFuYnVyeWd1YXJkaWFuLmNvLnVr ghJiZWRmb3JkdG9kYXkuY28udWuCFmJpZ2dsZXN3YWRldG9kYXkuY28udWuCEmJp cm1pbmdoYW13b3JsZC51a4IWYmxhY2twb29sZ2F6ZXR0ZS5jby51a4IQYnJpc3Rv bHdvcmxkLmNvbYIRYnVja3NoZXJhbGQuY28udWuCEmJ1cm5sZXlleHByZXNzLm5l dIIWYnV4dG9uYWR2ZXJ0aXNlci5jby51a4IKY2hhZC5jby51a4IVZGF2ZW50cnll eHByZXNzLmNvLnVrghVkZXJieXNoaXJldGltZXMuY28udWuCEGRlcnJ5am91cm5h bC5jb22CFmRld3NidXJ5cmVwb3J0ZXIuY28udWuCGGRvbmNhc3RlcmZyZWVwcmVz cy5jby51a4IaZWRpbmJ1cmdobmV3cy5zY290c21hbi5jb22CE2ZhbGtpcmtoZXJh bGQuY28udWuCD2Zhcm1pbmdsaWZlLmNvbYIPZmlmZXRvZGF5LmNvLnVrghVnYWxs b3dheWdhemV0dGUuY28udWuCEGdsYXNnb3d3b3JsZC5jb22CFGhhbGlmYXhjb3Vy aWVyLmNvLnVrghRoYXJib3JvdWdobWFpbC5jby51a4IZaGFycm9nYXRlYWR2ZXJ0 aXNlci5jby51a4IUaGFydGxlcG9vbG1haWwuY28udWuCEGhlbWVsdG9kYXkuY28u dWuCFmh1Y2tuYWxsZGlzcGF0Y2guY28udWuCF2xhbmNhc3Rlcmd1YXJkaWFuLmNv LnVrghtsZWlnaHRvbmJ1enphcmRvbmxpbmUuY28udWuCCWxlcC5jby51a4IVbGlu Y29sbnNoaXJld29ybGQuY29tghFsaXZlcnBvb2x3b3JsZC51a4IPbG9uZG9ud29y bGQuY29tghBsdXRvbnRvZGF5LmNvLnVrghJtYW5jaGVzdGVyd29ybGQudWuCEW1l bHRvbnRpbWVzLmNvLnVrghJtaWx0b25rZXluZXMuY28udWuCEW5hdGlvbmFsd29y bGQuY29tghJuZXdjYXN0bGV3b3JsZC5jb22CEG5ld3NsZXR0ZXIuY28udWuCFm5v cnRoYW1wdG9uY2hyb24uY28udWuCGG5vcnRoYW50c3RlbGVncmFwaC5jby51a4IY bm9ydGhlcm5pcmVsYW5kd29ybGQuY29tghtub3J0aHVtYmVybGFuZGdhemV0dGUu Y28udWuCF3BldGVyYm9yb3VnaHRvZGF5LmNvLnVrghBwb3J0c21vdXRoLmNvLnVr ggxzY290c21hbi5jb22CEnNoaWVsZHNnYXpldHRlLmNvbYIWc3Rvcm5vd2F5Z2F6 ZXR0ZS5jby51a4ISc3VuZGVybGFuZGVjaG8uY29tghNzdXNzZXhleHByZXNzLmNv LnVrghh0aGVzY2FyYm9yb3VnaG5ld3MuY28udWuCGXRoZXNvdXRoZXJucmVwb3J0 ZXIuY28udWuCDXRoZXN0YXIuY28udWuCFndha2VmaWVsZGV4cHJlc3MuY28udWuC DndhbGVzd29ybGQuY29tghV3YXJ3aWNrc2hpcmV3b3JsZC5jb22CDndpZ2FudG9k YXkubmV0ghV3b3Jrc29wZ3VhcmRpYW4uY28udWuCGnlvcmtzaGlyZWV2ZW5pbmdw b3N0LmNvLnVrghN5b3Jrc2hpcmVwb3N0LmNvLnVrMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAb1N2rDHwMRnY mQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAGCDfQR/gAABAMARjBEAiB6S3NY9kdT 5BkOqV0OUMqbZXdvtdsDDQ1OIKdvZUDVkQIgRXnmkHJSsqDdRTsy7/5HegOFQbmr YgHJDMBzxgTu74EAdgBGpVXrdfqRIDC1oolp9PN9ESxBdL79SbiFq/L8cP5tRwAA AYIN9BIYAAAEAwBHMEUCIQCBOlc5wy1sHj9A5Hrd/jYIyUOJlBVdAip8cAmlomma mwIgePg8lIJVJnqBhVAcx8Jo70NY7fkxpNju77WOIO5b9M8wDQYJKoZIhvcNAQEL BQADggEBAEEkH/HsePPu9L/HjOuURKE1Yr2RvzAaAIHXgFlJvwtrw5xK1+hdY+uX dhmFpEKYPju5IGnbs8exUr2rnPvNheSb9BLWM8XU5VMt4vAvGD40exvGu4OhiCws 4ePJzfAPa4GC3oko/LroOFfmrYUkoKP3L8WqlmY8+ad5nAUeuKswgcXZgSs7zt6w 1MB+qQjp8OJjhPiglzTxU2C/O3kOKaQwjcMjNHV5IlsmT3HAZtjiwz1ax81eobZK bZXw0M+/ohP1G1/IA49G9h6mcfxKNt1yikvVN+Szxt08W/FJ2b9xvYOzsXtDVBFq ZCT+bOPxcFatH00ixz1pIXF9/YlN3eU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5mus7SgW8/tjN1+j84k 6Ye4RfQy2Vj65k/hrKfweJP0oh/2eYscIsLyoqDLuBtZ8SD8PgvSI2xk7MT05g/W MB4ubfd2ilRCz7In111d9JYOBH/g2J34igojVtGjKjdo4va6k6Gqwq7cuo5sQBNL uQ72cgp6zqux1gbfJFKTOOxr1CzseXPsFIl5nItWrQENYGgjyvr9G5mrC/nolVOw FzLSrXgxBFc4L5sWgFdBOxQjCGFvVpnoculV9zE8wz7CLowLNIK44QKvyqO6ehS+ EWsCEAjSbVnS0/vFtl/YLim9k08sBJBLbogPJAVFd97FPXm+aWF6QerVVzahI/GZ TQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 432998883382603153245351581558702794620712 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-17 19:57:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-15 19:57:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'banburyguardian.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23177393439313858181041728759073556841179085729220649232788332253615636990041989189284452545771569047969104317352149317467112357103092793835765930302628054382102654789140086483389973403335150710671850431191345039321002713251219361335420106018544589267594964903163895436682377089263950030674201318775895619674898193931915160395522562503395786438786515885590567262110730320908169815572225102771274019411004551886790103072537083678064515194396168900942710343840607184468683303399379470581693033209138976281071215691001523331310709072130371415902609180348135205968051976508640154610779243485453279193944851401609736984909 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ddab773034361db4a2972e06f954967bb625a4fa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1305 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banburyguardian.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedfordtoday.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biggleswadetoday.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birminghamworld.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackpoolgazette.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bristolworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucksherald.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burnleyexpress.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buxtonadvertiser.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chad.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daventryexpress.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derbyshiretimes.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derryjournal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dewsburyreporter.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doncasterfreepress.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edinburghnews.scotsman.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falkirkherald.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farminglife.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifetoday.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallowaygazette.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glasgowworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halifaxcourier.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harboroughmail.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrogateadvertiser.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartlepoolmail.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemeltoday.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hucknalldispatch.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lancasterguardian.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leightonbuzzardonline.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lep.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnshireworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liverpoolworld.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londonworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lutontoday.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manchesterworld.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meltontimes.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miltonkeynes.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcastleworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northamptonchron.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northantstelegraph.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernirelandworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northumberlandgazette.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterboroughtoday.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portsmouth.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotsman.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shieldsgazette.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stornowaygazette.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunderlandecho.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sussexexpress.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thescarboroughnews.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesouthernreporter.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestar.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakefieldexpress.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walesworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warwickshireworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wigantoday.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worksopguardian.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkshireeveningpost.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkshirepost.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001820df411fe000004030046304402207a4b7358f64753e4190ea95d0e50ca9b65776fb5db030d0d4e20a76f6540d59102204579e6907252b2a0dd453b32effe477a038541b9ab6201c90cc073c604eeef8100760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001820df412180000040300473045022100813a5739c32d6c1e3f40e47addfe3608c9438994155d022a7c7009a5a2699a9b022078f83c948255267a8185501cc7c268ef4358edf931a4d8eeefb58e20ee5bf4cf . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0041241ff1ec78f3eef4bfc78ceb9444a13562bd91bf301a0081d7805949bf0b6bc39c4ad7e85d63eb97761985a442983e3bb92069dbb3c7b152bdab9cfbcd85e49bf412d633c5d4e5532de2f02f183e347b1bc6bb83a1882c2ce1e3c9cdf00f6b8182de8928fcbae83857e6ad8524a0a3f72fc5aa96663cf9a7799c051eb8ab3081c5d9812b3bcedeb0d4c07ea908e9f0e26384f8a09734f15360bf3b790e29a4308dc323347579225b264f71c066d8e2c33d5ac7cd5ea1b64a6d95f0d0cfbfa213f51b5fc8038f46f61ea671fc4a36dd728a4bd537e4b3c6dd3c5bf149d9bf71bd83b3b17b4354116a6424fe6ce3f17056ad1f4d22c73d6921717dfd894ddde5