winit.steamrailway.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d5:a3:3a:96:50:3e:8f:fd:a1:d8:86:e4:45:59:24:07:3c was issued on by Let's Encrypt.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=winit.steamrailway.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d5:a3:3a:96:50:3e:8f:fd:a1:d8:86:e4:45:59:24:07:3c
Serial Number (int): 334033970314690424658493352466814582654780
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f7:e3:6b:74:a1:45:59:09:fc:2d:5d:98:9e:e0:14:55:c9:74:fa:b0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 63:83:8d:20:cd:07:86:39:69:3f:4b:fb:00:fa:71:db:e6:1f:7c:d3
Fingerprint (sha256): fd:e4:3e:1a:f5:11:e5:8e:99:84:19:a4:5b:80:72:47:0c:db:4f:ab:9b:ff:76:8b:4a:75:3d:cf:17:1a:5a:60

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate winit.steamrailway.co.uk

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for winit.steamrailway.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clickswin.takeabreak.co.uk
clickswin.tvchoicemagazine.co.uk
winit.bikemagazine.co.uk
winit.classiccargiveaways.co.uk
winit.classiccarsmagazine.co.uk
winit.downtowncountry.co.uk
winit.eatinmagazine.co.uk
winit.gardennewsmagazine.co.uk
winit.metroradio.co.uk
winit.metroradio2.co.uk
winit.metroradio3.co.uk
winit.mfr.co.uk
winit.mfr2.co.uk
winit.mfr3.co.uk
winit.model-rail.co.uk
winit.moderngardensmagazine.co.uk
winit.mojo4music.com
winit.motherandbaby.co.uk
winit.motorcyclenews.com
winit.northsound1.com
winit.northsound2.com
winit.parkers.co.uk
winit.performancebikes.co.uk
winit.photoanswers.co.uk
winit.planetradio.co.uk
winit.planetrock.com
winit.practicalclassics.co.uk
winit.practicalsportsbikesmag.co.uk
winit.qthemusic.com
winit.radioaire.co.uk
winit.radioaire2.co.uk
winit.radioaire3.co.uk
winit.radioborders.com
winit.radiocity.co.uk
winit.radiocity2.co.uk
winit.radiocity3.co.uk
winit.recipes-plus.co.uk
winit.ride.co.uk
winit.rockfm.co.uk
winit.rockfm2.co.uk
winit.rockfm3.co.uk
winit.steamrailway.co.uk
winit.tay2.co.uk
winit.tay3.co.uk
winit.tayfm.co.uk
winit.tfm2.co.uk
winit.tfm3.co.uk
winit.tfmradio.co.uk
winit.thehitsradio.com
winit.todaysgolfer.co.uk
winit.trailrunningmag.co.uk
winit.tvchoicemagazine.co.uk
winit.viking2.co.uk
winit.viking3.co.uk
winit.vikingfm.co.uk
winit.wave105.com
winit.westfm.co.uk
winit.westsound.co.uk
winit.westsoundradio.com
winit.winautumn.co.uk
winit.winchristmas.co.uk
winit.winitforhim.co.uk
winit.winsomething.co.uk
winit.winspring.co.uk
winit.winsummer.co.uk
winit.wintoys.co.uk
winit.yourhorse.co.uk
winit.yours.co.uk

Other certificates including the domain name steamrailway.co.uk

(limited to 100 certificates)
cmp.am-online.com
winit.planetradio.co.uk
winit.coolfm.co.uk
steamrailway.co.uk
winit.bauerpublishing.com
winit.rockfm2.co.uk
winit.metroradio2.co.uk
steamrailway.co.uk
winit.metroradio.co.uk
steamrailway.co.uk
winit.todaysgolfer.co.uk
www.steamrailway.co.uk
winit-stage.bauerpublishing.com
winit.steamrailway.co.uk
winit.metroradio.co.uk
steamrailway.co.uk
steamrailway.co.uk
www.steamrailway.co.uk
www.steamrailway.co.uk
winit.westsound.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
steamrailway.co.uk
steamrailway.co.uk
steamrailway.co.uk
winit.tay3.co.uk
www.steamrailway.co.uk
steamrailway.co.uk
www.steamrailway.co.uk
www.steamrailway.co.uk
steamrailway.co.uk
www.steamrailway.co.uk
winit.metroradio.co.uk
winit.model-rail.co.uk
www.steamrailway.co.uk
steamrailway.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.planetradio.co.uk
clickswin.bellamagazine.co.uk
www.steamrailway.co.uk
winit.metroradio.co.uk
steamrailway.co.uk
winit.bikemagazine.co.uk
winit.metroradio.co.uk
winit-stage.bauerpublishing.com
winit.metroradio.co.uk
www.steamrailway.co.uk
winit.bauerpublishing.com
winit.mfr3.co.uk
www.steamrailway.co.uk
winit.mfr2.co.uk
winit.mfr.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.planetradio.co.uk
winit.mojo4music.com
winit.mfr2.co.uk
www.steamrailway.co.uk
winit.mfr3.co.uk
winit.metroradio.co.uk
www.steamrailway.co.uk
steamrailway.co.uk
www.steamrailway.co.uk
winit.metroradio.co.uk
steamrailway.co.uk
winit.planetrock.com
cmp.am-online.com
steamrailway.co.uk
cmp.am-online.com
winit.motorcyclenews.com
winit.metroradio.co.uk
www.steamrailway.co.uk
www.steamrailway.co.uk
steamrailway.co.uk
winit.metroradio.co.uk
steamrailway.co.uk
winit.bauerpublishing.com
steamrailway.co.uk
cmp.am-online.com
winit.mojo4music.com
www.steamrailway.co.uk
winit.metroradio.co.uk
steamrailway.co.uk
winit.metroradio.co.uk
www.steamrailway.co.uk
winit-stage.steamrailway.co.uk
www.steamrailway.co.uk
winit.qthemusic.com
steamrailway.co.uk
winit.downtowncountry.co.uk
winit-stage.bauerpublishing.com
www.steamrailway.co.uk
www.steamrailway.co.uk
winit.metroradio.co.uk

Certificate

The complete raw certificate details for winit.steamrailway.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5svB0Il2TGA6yPIyz+Ey
Q3AP0KmQ+QKQsCZnMaYoOZqDJSvH04Z6FuWmFhbx3oUBiXpsqG9brXmQwtHju8fk
El/iSaiWvsBrl6/zNo9UbmOhPIbi6S6wsSNIlnUOf4XkhEtttSmfQOGCGjN3+ORn
ZMJo2XOhyELtMSgf3z+UZT1HdCqOQY96MRFlqMTCG+NNpe1zsclunynls5c9AHCp
pNPjP9MvZUPF94Ko4lyZpvG407ZbQtDF1fv+ZAUoWdLvbZyRctBBYFHd0EF8LeZy
ERRbJex1wa5tEVdFdOb1FrWDjQzAWDln7GgJPauaJRIvwCYab3mo7t0pa4aT+cp4
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334033970314690424658493352466814582654780
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 13:53:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 13:53:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'winit.steamrailway.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29135286507225570431018936395038107605528685198724710910819805386279293623553538977005943499179071532926827512306076796258230859398852252358351677631422724459788637011348614142007495063992037761394841837240089586965631399137154136715677323500110735371983258310290053676248303361618220391586048803873257869866177188208889897956093855590284999472046250493992528814348044350001679162099979178628994997902435772560866801160806039329580822151891808703192856856198280662606466618651901205261259240589583234674040401715409177911181246412667951351025441251438732675581726628739077745192459021714509072125405531224607944243429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7e36b74a1455909fc2d5d989ee01455c974fab0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1647 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.takeabreak.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickswin.tvchoicemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.bikemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.classiccargiveaways.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.classiccarsmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.downtowncountry.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.eatinmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.gardennewsmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.metroradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.metroradio2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.metroradio3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.model-rail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.moderngardensmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mojo4music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.motherandbaby.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.motorcyclenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.northsound1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.northsound2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.parkers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.performancebikes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.photoanswers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.planetradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.planetrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.practicalclassics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.practicalsportsbikesmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.qthemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioborders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.recipes-plus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.ride.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.rockfm3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.steamrailway.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tay2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tay3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tayfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfm2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfm3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfmradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.thehitsradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.todaysgolfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.trailrunningmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tvchoicemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.viking2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.viking3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.vikingfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.wave105.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.westfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.westsound.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.westsoundradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winautumn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winchristmas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winitforhim.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winsomething.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winspring.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winsummer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.wintoys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.yourhorse.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.yours.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d82a962350000040300473045022100d64594c3187083a2be2fbb3b8ff52459f26470ce5acde7c259635be05568665c022016cdd2314a5b800ae09d117ee9f211b2303bba48c8549b5277ea6ec3a9b1ae2f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d82a9624f0000040300473045022035ce64560d1f8d595215ee5f1073fafdd15d947ecb0fa90f650f649c0319e1d1022100a252589539ae4f7f60ef9e16a9bf2c84ca963500a732d8dc88ed7a486fb9d9db
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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