consent.agriculturaltrader.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:e6:01:8f:9f:f8:14:9a:32:b8:f2:89:25:c9:21:66:a0:e7 was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=consent.agriculturaltrader.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e6:01:8f:9f:f8:14:9a:32:b8:f2:89:25:c9:21:66:a0:e7
Serial Number (int): 426716163089861475977751343666971535646951
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8e:a0:32:f4:dc:a2:56:2c:9f:f5:aa:26:60:40:b8:d5:ff:c3:7b:52
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4b:d1:d2:15:30:34:2c:0f:18:7d:5c:92:09:0f:f5:96:63:e4:c9:9e
Fingerprint (sha256): 04:56:9c:5b:ee:aa:1b:69:c6:85:f2:c3:09:67:6f:33:69:75:7a:b2:34:ee:11:c9:bd:db:7c:93:5a:07:fc:88

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate consent.agriculturaltrader.co.uk

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for consent.agriculturaltrader.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

consent.agriculturaltrader.co.uk
consent.amateurgardening.com
consent.amateurphotographer.com
consent.cageandaviarybirds.com
consent.canalboat.co.uk
consent.classicfordmag.co.uk
consent.classicsworld.co.uk
consent.claycraft.co.uk
consent.coastmagazine.co.uk
consent.cpm-magazine.co.uk
consent.farmmachinerybuyer.com
consent.fastcar.co.uk
consent.fastfordmag.co.uk
consent.fishingnews.co.uk
consent.heritagemachines.com
consent.holidayliving.co.uk
consent.klsy.dev
consent.matchfootball.co.uk
consent.mensfitness.co.uk
consent.mensfitnesstoday.com
consent.oldglory.co.uk
consent.outdoorfitnessandadventure.co.uk
consent.outdoorsradar.com
consent.parkhomemagazine.co.uk
consent.platinum-mag.co.uk
consent.prestigeandperformancecar.com
consent.profi.co.uk
consent.psychologies.co.uk
consent.runnersradar.com
consent.seaangler.co.uk
consent.shipsmonthly.com
consent.southeastfarmer.net
consent.stuff.tv
consent.tgomagazine.co.uk
consent.thecountrysmallholder.com
consent.thegreatoutdoorsmag.com
consent.topsante.co.uk
consent.transportcafe.co.uk
consent.triradar.com
consent.truckingmag.co.uk
consent.ukga.com
consent.uncut.co.uk
consent.vineyardmagazine.co.uk
consent.volksworld.com
consent.westcountryfarmmachineryshow.co.uk
consent.womensfitness.co.uk
consent.worldsoccer.com
consent.yourhorse.co.uk
consent.yoursmallholding.com

Other certificates including the domain name agriculturaltrader.co.uk

(limited to 100 certificates)
eastyorkbeach.toronto.com
consent.agriculturaltrader.co.uk
*.agriculturaltrader.co.uk
*.agriculturaltrader.co.uk
agriculturaltrader.co.uk
local.dissexpress.co.uk
local.bensonnews-sun.com
local.mexicoledger.com
local.wahpetondailynews.com
consent.agriculturaltrader.co.uk
local.centraloregon.pamplinmedia.com
consent.agriculturaltrader.co.uk
flintshopping.mlive.com
portperry.durhamregion.com
local.tabertimes.com
newhomes.yorkregion.com
consent.agriculturaltrader.co.uk
local.northamptonchron.co.uk
consent.agriculturaltrader.co.uk
local.cessnockadvertiser.com.au
local.hamhigh.co.uk
local.dglobe.com
local.fdlreporter.com
shopping.silive.com
muskokan.muskokaregion.com
local.thesiuslawnews.com
agriculturaltrader.co.uk
consent.agriculturaltrader.co.uk
consent.agriculturaltrader.co.uk
local.devonlife.co.uk
local.malvern-online.com
*.agriculturaltrader.co.uk
local.mywebtimes.com
consent.agriculturaltrader.co.uk
*.agriculturaltrader.co.uk
local.insidebiz.com
fk.local.kentonline.co.uk
www.agriculturaltrader.co.uk
agriculturaltrader.co.uk
flintshopping.mlive.com
local.mycaldwellcounty.com
agriculturaltrader.co.uk
consent.agriculturaltrader.co.uk
consent.agriculturaltrader.co.uk
analytics.agriculturaltrader.co.uk
western-leader.origami.neighbourly.co.nz
local.the-review.com
*.agriculturaltrader.co.uk
consent.agriculturaltrader.co.uk
horowhenua-mail.origami.neighbourly.co.nz
local.madisoncourier.com
local.hackneygazette.co.uk
*.agriculturaltrader.co.uk
local.mycaldwellcounty.com
local.doverpost.com
newhomes.yorkregion.com
consent.agriculturaltrader.co.uk
kg.local.kentonline.co.uk
consent.agriculturaltrader.co.uk

Certificate

The complete raw certificate details for consent.agriculturaltrader.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDiEPIlC28Xjfz8/8MBL
3iQ55myIyGLg2G14Ucp1qq6n/AJakLDVU7w1vqrSsdYTrJvWgsvTf+9+kr+k3z+t
/qFh8h1K3u7MI1D1unL3F/1WMkA+21hLBdQWFR352IlyCuaC09i/TU18vNzu28dW
rgtTsLBNqI8+oUa+A+QoTu3BLdp7emYxtGeGSnkAuNMZXOPnVFqnZNKmkTiaw3gv
OX9PQET0uWBbnXAYIMqvZU3zYDLE+yJFSFLndqu5RjdcmTcHzgbdVqOJH0SgRdem
AQntawV7APmq/+Cdp6nM6cOJkMsJx0oHcyfTpOqj+S1C7WzGiHrecILGkYbLgpE1
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426716163089861475977751343666971535646951
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 15:24:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 15:24:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'consent.agriculturaltrader.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22750764242763692179413761932846493042408537364436635968510366522949684912388507673082753328863903826248059324378369138521291851360539826802158962755833934889147588290412101929410288820216497469840694351372759337451349091090948034205841666530465653250049299204342771967149754727657702443996811516691058795674124449396897817688462468656281841249883980562332901752101726105712387700185078777581202529185339076317144135669214722167719838554929568168754977981284111811529064997856602825289743691073228269033030720677815954099619961504486902102248008902954069963640998411154352512666281229422312272680647812592740487738751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ea032f4dca2562c9ff5aa266040b8d5ffc37b52
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1381 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.agriculturaltrader.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.amateurgardening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.amateurphotographer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.cageandaviarybirds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.canalboat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.classicfordmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.classicsworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.claycraft.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.coastmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.cpm-magazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.farmmachinerybuyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.fastcar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.fastfordmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.fishingnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.heritagemachines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.holidayliving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.klsy.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.matchfootball.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.mensfitness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.mensfitnesstoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.oldglory.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.outdoorfitnessandadventure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.outdoorsradar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.parkhomemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.platinum-mag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.prestigeandperformancecar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.profi.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.psychologies.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.runnersradar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.seaangler.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.shipsmonthly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.southeastfarmer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.stuff.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.tgomagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.thecountrysmallholder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.thegreatoutdoorsmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.topsante.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.transportcafe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.triradar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.truckingmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.ukga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.uncut.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.vineyardmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.volksworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.westcountryfarmmachineryshow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.womensfitness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.worldsoccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.yourhorse.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.yoursmallholding.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e66fa91f7000004030047304502205e088af419399e46bc425cef0f291b401d365553cde50e6b176684b9513afe85022100911d53498509f86f8642f1bf90d12c02080d147a8a7f0e2863e7ac75f15fee010077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e66fa999f0000040300483046022100fe5ee1af485825f688d0ff7c9efab1596c83a696a281181d1701d1cfc42ab2c9022100b6efc4b7291916728fb44d69f2dd3b5cee46c96c7e655fbd85410b426e82b3b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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