banburyguardian.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:11:a2:5f:eb:63:ba:a0:59:d3:7f:fc:71:3c:2a:d5:b2:47 was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=banburyguardian.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:11:a2:5f:eb:63:ba:a0:59:d3:7f:fc:71:3c:2a:d5:b2:47
Serial Number (int): 354449776942483260656612823395794383385159
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6e:84:51:89:15:f1:fa:61:ee:6d:41:8d:7f:d2:c6:e3:14:ed:75:62
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 61:d5:81:49:8a:27:20:56:43:06:e0:0e:ea:4d:81:17:b6:f2:6c:f1
Fingerprint (sha256): fd:2a:83:77:c1:21:8b:eb:c2:e3:63:8a:b0:e6:a2:b8:c6:86:5c:85:4f:35:93:e1:8b:d4:2d:cf:8c:88:3d:c2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate banburyguardian.co.uk

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for banburyguardian.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

banburyguardian.co.uk
bedfordtoday.co.uk
berwickshirenews.co.uk
biggleswadetoday.co.uk
birminghamworld.uk
blackpoolgazette.co.uk
bristolworld.com
buchanobserver.co.uk
bucksherald.co.uk
burnleyexpress.net
buxtonadvertiser.co.uk
chad.co.uk
daventryexpress.co.uk
deesidepiper.co.uk
derbyshiretimes.co.uk
derryjournal.com
dewsburyreporter.co.uk
doncasterfreepress.co.uk
donsidepiper.co.uk
edinburghnews.scotsman.com
ellontimes.co.uk
falkirkherald.co.uk
farminglife.com
fifetoday.co.uk
fraserburghherald.co.uk
gallowaygazette.co.uk
glasgowworld.com
halifaxcourier.co.uk
harboroughmail.co.uk
harrogateadvertiser.co.uk
hartlepoolmail.co.uk
hemeltoday.co.uk
hucknalldispatch.co.uk
inverurieherald.co.uk
kincardineshireobserver.co.uk
lancasterguardian.co.uk
leightonbuzzardonline.co.uk
lep.co.uk
lincolnshireworld.com
liverpoolworld.uk
londonworld.com
lutontoday.co.uk
manchesterworld.uk
mearnsleader.co.uk
meltontimes.co.uk
miltonkeynes.co.uk
nationalworld.com
newcastleworld.com
newsletter.co.uk
northamptonchron.co.uk
northantstelegraph.co.uk
northernirelandworld.com
northumberlandgazette.co.uk
peterboroughtoday.co.uk
portsmouth.co.uk
scotsman.com
shieldsgazette.com
stornowaygazette.co.uk
sunderlandecho.com
sussexexpress.co.uk
thescarboroughnews.co.uk
thesouthernreporter.co.uk
thestar.co.uk
wakefieldexpress.co.uk
walesworld.com
warwickshireworld.com
wigantoday.net
worksopguardian.co.uk
yorkshireeveningpost.co.uk
yorkshirepost.co.uk

Other certificates including the domain name banburyguardian.co.uk

(limited to 100 certificates)
nationalworld.com
da.ballymenatimes.com
landing.banburyguardian.co.uk
evenfall.memories.com.au
newsletters.banburyguardian.co.uk
local.newstribune.info
findit.banburyguardian.co.uk
consent.3addedminutes.com
banburyguardian.co.uk
landing.banburyguardian.co.uk
newsletters.banburyguardian.co.uk
findit.banburyguardian.co.uk
da.ballymenatimes.com
www.inews.co.uk

consent.3addedminutes.com
findit.banburyguardian.co.uk
local.banbridgeleader.co.uk
landing.banburyguardian.co.uk
cmp.ballymenatimes.com
evenfall.memories.com.au
www.miltonkeynes.co.uk
findit.banburyguardian.co.uk
admin.adforge.com
banburyguardian.co.uk
nationalworld.com
findit.banburyguardian.co.uk
newsletters.banburyguardian.co.uk
da.ballymenatimes.com
nationalworld.com
beta.dewsburyreporter.co.uk
landing.banburyguardian.co.uk
findit.banburyguardian.co.uk
findit.banburyguardian.co.uk
local.stcatharinesstandard.ca
cmp.ballymenatimes.com
beta.banburyguardian.co.uk
newsletters.banburyguardian.co.uk
landing.banburyguardian.co.uk
da.ballymenatimes.com
newsletters.banburyguardian.co.uk
da.ballymenatimes.com
local.starkvilledailynews.com
findit.banburyguardian.co.uk
www.portsmouth.co.uk
cmp.ballymenatimes.com
da.ballymenatimes.com
cmp.ballymenatimes.com
nationalworld.com
www.peterboroughtoday.co.uk
consent.3addedminutes.com
da.ballymenatimes.com
findit.banburyguardian.co.uk
nationalworld.com
landing.banburyguardian.co.uk
da.ballymenatimes.com
local.windsorstar.com
findit.banburyguardian.co.uk
findit.banburyguardian.co.uk
landing.banburyguardian.co.uk
3addedminutes.com
www.portsmouth.co.uk
newsletters.banburyguardian.co.uk
local.fauquier.com
newsletters.banburyguardian.co.uk
nationalworld.com
www.miltonkeynes.co.uk
banburyguardian.co.uk
nationalworld.com
da.ballymenatimes.com
local.doverpost.com
admin.adforge.com
local.carrickfergustimes.co.uk
findit.banburyguardian.co.uk
local.theintell.com
consent.3addedminutes.com
da.ballymenatimes.com
banburyguardian.co.uk
da.ballymenatimes.com

Certificate

The complete raw certificate details for banburyguardian.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPoUNgBk7pD1yVG+crUi
69sI29H9Rx4nwWKhqJlxYCulHfpdjKU29pKL7WXCMS44EEGvnCzVp5Utgaq206S8
Dn15k0kM+emTFRcM3yw2DlmmsQnBj9p4emWMj+5670EP9LZJrVBpMU4UTvc4mJ7U
xxLaWcLSHzf2QUQKCd8rwceNHrxfFoXzZDUU2EYSRBGiNkEjwsXtAgMvvyS05iVG
6miX7GA7JRqJaIORgMfl2ELq9IyZtSzQnUDpcvbXIB8NPwC7RAEJIhNlXMnaZCiU
lC06kdSnrrjASP0zoueUgk7pE8xysPlDrLv6cblmvAnJ2fCw49PQ7bTPndebuB/3
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354449776942483260656612823395794383385159
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-20 12:46:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-19 12:46:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'banburyguardian.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24866026299242860107463895840629147441202256336250387566388749597081554025045890348147532955873053218568810815592442003429972950941032010976850127225151924707288817907559357105002608455648197106692433977342344791830147491697975577512533533401048835800748854077668452720282344303965325573418748807025524620977018077240234543590242970373635233123734138082422916063898709553515188687832455801576137185717679275355089440773153202346927282352568557705298505136254857133364703276314324262972881551893965720498654751987632721827950145921600005734383263764301630247350847100126861998163586416942465219808911751095646186108923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e84518915f1fa61ee6d418d7fd2c6e314ed7562
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1508 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banburyguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedfordtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berwickshirenews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biggleswadetoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birminghamworld.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackpoolgazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bristolworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buchanobserver.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucksherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burnleyexpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buxtonadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chad.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daventryexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deesidepiper.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derbyshiretimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derryjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dewsburyreporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doncasterfreepress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donsidepiper.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edinburghnews.scotsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellontimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falkirkherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farminglife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifetoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fraserburghherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallowaygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glasgowworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halifaxcourier.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harboroughmail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrogateadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartlepoolmail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemeltoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hucknalldispatch.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inverurieherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kincardineshireobserver.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lancasterguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leightonbuzzardonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lep.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnshireworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liverpoolworld.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londonworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lutontoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manchesterworld.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mearnsleader.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meltontimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miltonkeynes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcastleworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northamptonchron.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northantstelegraph.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernirelandworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northumberlandgazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterboroughtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portsmouth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shieldsgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stornowaygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunderlandecho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sussexexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thescarboroughnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesouthernreporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakefieldexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walesworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warwickshireworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wigantoday.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worksopguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkshireeveningpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkshirepost.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000180473922e9000004030046304402204e4551818f7eb22eaff02b9cfed63c535deb53e537bb75bab1d6d37a705a073902204c19f112259a127a224a67b8ea4503c92a5cc05799d71513fae4a71b588297990075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000018047392424000004030046304402201a691063302d15820e58a863d09aa21ba10059a9fb50662a12e7e91ab1bb5968022045b4c971e6ac14256778a0f3f823653088aa560a1a9cd1e11a3de0485746b14b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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