portal.pentangle.co.uk
Issued by Let's Encrypt Authority X1
About this certificate
This digital certificate with serial number 01:aa:65:bb:c4:1e:c4:be:25:7a:9a:ab:ae:49:2b:32:2b:90 was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=portal.pentangle.co.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:aa:65:bb:c4:1e:c4:be:25:7a:9a:ab:ae:49:2b:32:2b:90Serial Number (int): 145095515273196624077302653952817536052112
Serial Number lenght: 137 bits, 18 octets
SubjectKeyId: 6c:39:f2:7e:e4:16:63:35:50:79:bf:50:0f:5a:d3:94:67:d7:60:cf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a3:b7:db:1c:e5:2f:07:b3:2f:8b:bb:50:37:e4:98:21:16:3e:8e:95
Fingerprint (sha256): 0d:f8:f7:05:bc:46:c2:aa:31:b0:f7:75:f0:3c:50:cd:96:3c:4a:fc:e2:6e:34:4e:a2:4b:a9:f9:a6:41:77:d7
Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x1.letsencrypt.org/Check the revocation status for certificate portal.pentangle.co.uk
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for portal.pentangle.co.uk
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vintageandmodernguitars.co.uk
seminars.wills-and-trusts.co.uk
performance-projects.com
www.pentangle.co.uk
pentangle.co.uk
portal.pentangle.co.uk
www.vintageandmodernguitars.co.uk
wmp.wills-and-trusts.co.uk
www.performance-projects.com
ewok.pentangle.co.uk
serverone.pentangle.co.uk
seminars.wills-and-trusts.co.uk
performance-projects.com
www.pentangle.co.uk
pentangle.co.uk
portal.pentangle.co.uk
www.vintageandmodernguitars.co.uk
wmp.wills-and-trusts.co.uk
www.performance-projects.com
ewok.pentangle.co.uk
serverone.pentangle.co.uk
Other certificates including the domain name pentangle.co.uk
(limited to 100 certificates)
trade-cyrus.pentangle.co.uk
cyrus-test.pentangle.co.uk
portal.pentangle.co.uk
ewok.pentangle.co.uk
fr.ranieri.agency
www.feet-first.org
www.actusevent.com
www.ppgardendesign.co.uk
www.flamboyantandco.pentangle.co.uk
allsop-durn-dearlove.pentangle.co.uk
www.meridian-finance.co.uk
oms-test.pentangle.co.uk
www.cyrusaudio.com
womens-dev.pentangle.co.uk
wtdfm-dev.pentangle.co.uk
www.pb-solutions.co.uk
www.andrew-murray.co.uk
remoteapp.pentangle.co.uk
wills-trusts-test.pentangle.co.uk
lotusbiscuits.pentangle.co.uk
www.feet-first.org
brownsgarage.pentangle.co.uk
ewok.pentangle.co.uk
www.franklinrae.com
www.countax.co.uk
racemakers.silverstone.co.uk
event-admin.pentangle.co.uk
www.astonmartinautodetailer.com
www.palmerbuildingservices.co.uk
www.ifpayroll.co.uk
www.feet-first.org
innocent.pentangle.co.uk
wtdfm-dev.pentangle.co.uk
www.archivistgallery.com
hh.pentangle.co.uk
collaborative-it.pentangle.co.uk
silverstone.pentangle.co.uk
movietech.pentangle.co.uk
portal.pentangle.co.uk
racemakers.silverstone.co.uk
racemakers.silverstone.co.uk
event-admin.pentangle.co.uk
devmyadmin.pentangle.co.uk
the-practice.pentangle.co.uk
www.oxfordprivatecare.co.uk
ariens.pentangle.co.uk
www.carlimits.com
www.alphabetsigns.uk.com
natep-beta.pentangle.co.uk
ariens-api.pentangle.co.uk
board.womenspioneer.co.uk
keytaltd.pentangle.co.uk
www.feet-first.org
www.shineondetail.co.uk
ewok.pentangle.co.uk
business-insurance.pentangle.co.uk
acspacesetters.pentangle.co.uk
acspacesetters.pentangle.co.uk
natep-beta.pentangle.co.uk
ariens.pentangle.co.uk
ewok.pentangle.co.uk
business-insurance.pentangle.co.uk
natep-beta.pentangle.co.uk
brownsgarage.pentangle.co.uk
dealers.countax.co.uk
www.opendoorsthame.org.uk
attic.pentangle.co.uk
www.shineondetail.co.uk
webshop.ariens.no
ariens-analytics.pentangle.co.uk
oxfordprivatecare.pentangle.co.uk
ariens-api.pentangle.co.uk
stretchapp.pentangle.co.uk
www.addvantagestrategy.com
ariens.pentangle.co.uk
daviddurn.pentangle.co.uk
www.palmerbuildingsolutions.com
www.archivistgallery.com
www.addvantagestrategy.com
ebaileyconsulting.pentangle.co.uk
alphabetsigns.uk.com
duckrace.pentangle.co.uk
www.alunr.com
addlaw.co.uk
ariens.pentangle.co.uk
www.fluforum.co.uk
wtdfm-dev.pentangle.co.uk
www.shineondetail.co.uk
www.pentangle.co.uk
ewok.pentangle.co.uk
www.pentangle.co.uk
sirportly.pentangle.co.uk
mbm.pentangle.co.uk
wtdfm-dev.pentangle.co.uk
www.shineondetail.co.uk
antispam.pentangle.co.uk
ariens-api-dev.pentangle.co.uk
www.raniericommunications.com
danhub.pentangle.co.uk
www.countax.com
cyrus-test.pentangle.co.uk
portal.pentangle.co.uk
ewok.pentangle.co.uk
fr.ranieri.agency
www.feet-first.org
www.actusevent.com
www.ppgardendesign.co.uk
www.flamboyantandco.pentangle.co.uk
allsop-durn-dearlove.pentangle.co.uk
www.meridian-finance.co.uk
oms-test.pentangle.co.uk
www.cyrusaudio.com
womens-dev.pentangle.co.uk
wtdfm-dev.pentangle.co.uk
www.pb-solutions.co.uk
www.andrew-murray.co.uk
remoteapp.pentangle.co.uk
wills-trusts-test.pentangle.co.uk
lotusbiscuits.pentangle.co.uk
www.feet-first.org
brownsgarage.pentangle.co.uk
ewok.pentangle.co.uk
www.franklinrae.com
www.countax.co.uk
racemakers.silverstone.co.uk
event-admin.pentangle.co.uk
www.astonmartinautodetailer.com
www.palmerbuildingservices.co.uk
www.ifpayroll.co.uk
www.feet-first.org
innocent.pentangle.co.uk
wtdfm-dev.pentangle.co.uk
www.archivistgallery.com
hh.pentangle.co.uk
collaborative-it.pentangle.co.uk
silverstone.pentangle.co.uk
movietech.pentangle.co.uk
portal.pentangle.co.uk
racemakers.silverstone.co.uk
racemakers.silverstone.co.uk
event-admin.pentangle.co.uk
devmyadmin.pentangle.co.uk
the-practice.pentangle.co.uk
www.oxfordprivatecare.co.uk
ariens.pentangle.co.uk
www.carlimits.com
www.alphabetsigns.uk.com
natep-beta.pentangle.co.uk
ariens-api.pentangle.co.uk
board.womenspioneer.co.uk
keytaltd.pentangle.co.uk
www.feet-first.org
www.shineondetail.co.uk
ewok.pentangle.co.uk
business-insurance.pentangle.co.uk
acspacesetters.pentangle.co.uk
acspacesetters.pentangle.co.uk
natep-beta.pentangle.co.uk
ariens.pentangle.co.uk
ewok.pentangle.co.uk
business-insurance.pentangle.co.uk
natep-beta.pentangle.co.uk
brownsgarage.pentangle.co.uk
dealers.countax.co.uk
www.opendoorsthame.org.uk
attic.pentangle.co.uk
www.shineondetail.co.uk
webshop.ariens.no
ariens-analytics.pentangle.co.uk
oxfordprivatecare.pentangle.co.uk
ariens-api.pentangle.co.uk
stretchapp.pentangle.co.uk
www.addvantagestrategy.com
ariens.pentangle.co.uk
daviddurn.pentangle.co.uk
www.palmerbuildingsolutions.com
www.archivistgallery.com
www.addvantagestrategy.com
ebaileyconsulting.pentangle.co.uk
alphabetsigns.uk.com
duckrace.pentangle.co.uk
www.alunr.com
addlaw.co.uk
ariens.pentangle.co.uk
www.fluforum.co.uk
wtdfm-dev.pentangle.co.uk
www.shineondetail.co.uk
www.pentangle.co.uk
ewok.pentangle.co.uk
www.pentangle.co.uk
sirportly.pentangle.co.uk
mbm.pentangle.co.uk
wtdfm-dev.pentangle.co.uk
www.shineondetail.co.uk
antispam.pentangle.co.uk
ariens-api-dev.pentangle.co.uk
www.raniericommunications.com
danhub.pentangle.co.uk
www.countax.com
Certificate
The complete raw certificate details for portal.pentangle.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgISAaplu8QexL4lepqrrkkrMiuQMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNjAyMTUxNjI4MDBaFw0x NjA1MTUxNjI4MDBaMCExHzAdBgNVBAMTFnBvcnRhbC5wZW50YW5nbGUuY28udWsw ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCrrOB8iF0xBAYu4RBX05NL u9xve3Cc8EStAIeW3QrirH4Ax4+rXkNo00bOZHFuYAqTh0DTOxZSyCFxG9ViRUEj MMtYzBrxDC5WIYHR0wgiPbEYBEQ5uRrBgbFggnIvQTV5/N3J3s4vBrZga50sOwI2 tkAbDluUv2N1JUB/8MRh7N6gKqWsxH09PafHE9kNOuQvHy2fjudv2IvsrZUTVpVB Nd+t1NCZ4bcIWVModAA1VCKkhps3o66WnU4ELF9igOWRSOFPf6fALgS1v043tc4+ 5g6FEBlEmAicF0BXwFTK97dLndC0V6W+DuiIY7fsXQcffStWn/kGcqgUgVd7s84i tbaPyfzPXnmCUtTEoS9O05LNBHfdCRCqLcJynuSWS7/qRY5UKMSvnbs1y3qog0Hv AL3a/u6yKFkZbw8GiYxqo8q/6Eq2tZeeL1nLbu43hMAS4UxgbY3gwn8h+91sbLrR 9rTCuOhLwAYvZF6k5LJsaMx5LdAHv/LXmd8Jc9alZBD6dxz+gV/TZRQy9wJfVZCC t6GYmCPGgZFPQh656Py03W25BSRaUYj06pj8zsGGYnw0MciUC8LPc8Dmq0sK/hoF z/WMsfBgIM/9zPlQ7ojfMGglg51hjJj6qdI8BTTONclsMm0v6zdIN9AgoxE7hj26 foPrxxixKRsinouy/3WD+wIDAQABo4IDKzCCAycwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBRsOfJ+5BZjNVB5v1APWtOUZ9dgzzAfBgNVHSMEGDAWgBSoSmpjBH3duubR ObemRWXv86jsoTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9v Y3NwLmludC14MS5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8v Y2VydC5pbnQteDEubGV0c2VuY3J5cHQub3JnLzCCATMGA1UdEQSCASowggEmgh12 aW50YWdlYW5kbW9kZXJuZ3VpdGFycy5jby51a4Ifc2VtaW5hcnMud2lsbHMtYW5k LXRydXN0cy5jby51a4IYcGVyZm9ybWFuY2UtcHJvamVjdHMuY29tghN3d3cucGVu dGFuZ2xlLmNvLnVrgg9wZW50YW5nbGUuY28udWuCFnBvcnRhbC5wZW50YW5nbGUu Y28udWuCIXd3dy52aW50YWdlYW5kbW9kZXJuZ3VpdGFycy5jby51a4Iad21wLndp bGxzLWFuZC10cnVzdHMuY28udWuCHHd3dy5wZXJmb3JtYW5jZS1wcm9qZWN0cy5j b22CFGV3b2sucGVudGFuZ2xlLmNvLnVrghlzZXJ2ZXJvbmUucGVudGFuZ2xlLmNv LnVrMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUF BwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBv biBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRo IHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5j cnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAEJyJ4G4Ckzc p8SXZ77dV11S6D3tgceActEs2kh+ANpYkboc65KhpsXkx5iTW7iTgxBlMDFxSj6L 8baMLQ9G0Kq4SsX+cy0kkmEOs+nEP0Ft5GMZzV0dhcM9+oDbkuabgUOOr8sp3ij1 5tWQiJXQcMygeRXfcGtR+zX157M3e6t4fDqDRQ2f855GfZRMbH0NLxgYVeTOvefC Nk8QkrnIbesRQs1s0S8OxZIpD6GNGd6uJ/qaOI4dqOvua3bEgF+SrzGzhfw9029u WVVB5ZQf8fcKrQ2zSvZtODLztbmiaEFFXErStzXRvsngqMNafUGPO2bZsK31Xr73 2iD38YwOW94= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAq6zgfIhdMQQGLuEQV9OT S7vcb3twnPBErQCHlt0K4qx+AMePq15DaNNGzmRxbmAKk4dA0zsWUsghcRvVYkVB IzDLWMwa8QwuViGB0dMIIj2xGAREObkawYGxYIJyL0E1efzdyd7OLwa2YGudLDsC NrZAGw5blL9jdSVAf/DEYezeoCqlrMR9PT2nxxPZDTrkLx8tn47nb9iL7K2VE1aV QTXfrdTQmeG3CFlTKHQANVQipIabN6Oulp1OBCxfYoDlkUjhT3+nwC4Etb9ON7XO PuYOhRAZRJgInBdAV8BUyve3S53QtFelvg7oiGO37F0HH30rVp/5BnKoFIFXe7PO IrW2j8n8z155glLUxKEvTtOSzQR33QkQqi3Ccp7klku/6kWOVCjEr527Nct6qINB 7wC92v7usihZGW8PBomMaqPKv+hKtrWXni9Zy27uN4TAEuFMYG2N4MJ/IfvdbGy6 0fa0wrjoS8AGL2RepOSybGjMeS3QB7/y15nfCXPWpWQQ+ncc/oFf02UUMvcCX1WQ grehmJgjxoGRT0Ieuej8tN1tuQUkWlGI9OqY/M7BhmJ8NDHIlAvCz3PA5qtLCv4a Bc/1jLHwYCDP/cz5UO6I3zBoJYOdYYyY+qnSPAU0zjXJbDJtL+s3SDfQIKMRO4Y9 un6D68cYsSkbIp6Lsv91g/sCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 145095515273196624077302653952817536052112 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-15 16:28:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-15 16:28:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.pentangle.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 700374120867657127962923998795714349056224482783840237927082507158682405798487876440083472332189598144174378398701220713798156016609612885459783194585964263201701597049597687725746009001914220172915199777348039708423597450252220420792730120571265331277987006044940143901244970689841308714643066375296195034272604001621585917991741282646643392875336804718663655957325369194034584596970881690176718845450384462449284389460262173262264005657068106979814072084132041694712898906079253223780864896011346970463052723491359018086854844425439575520050243298797906054163566970297772381291784941561150564690713737659883326324910617537366026616803008565615191067331256932757986792189257952021231174395570130259670239168248161691151438446489940221420400636503836798696311250546700125354849516698506132963294839826263880299730879033116995628760813879146549057451558121411294334102519414949435709056210156183718786843506424206880420815562329010329319334301312947751895334934483571384523679870855842319048166861104805229973013746734378268888533417701789441798240943817859055895901287912701618515263424539729218134804711465435344009637906211012473949958626296469842299066176389431210024984241500461982909082511805007201383873066181400705119433360379 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6c39f27ee41663355079bf500f5ad39467d760cf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (298 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintageandmodernguitars.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seminars.wills-and-trusts.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performance-projects.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pentangle.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pentangle.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.pentangle.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vintageandmodernguitars.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmp.wills-and-trusts.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.performance-projects.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewok.pentangle.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serverone.pentangle.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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