live.madeopen.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:cd:65:54:e9:7a:a4:c4:7b:e5:ec:02:c0:f0:0f:11:ea:8c was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=live.madeopen.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:65:54:e9:7a:a4:c4:7b:e5:ec:02:c0:f0:0f:11:ea:8c
Serial Number (int): 331229435930101784932290765283727487658636
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a8:ec:4c:c9:23:2b:dc:ea:c6:e5:dc:0c:45:e5:21:1a:59:c1:9d:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4c:e2:d1:2e:d6:b6:a9:b7:d0:b4:ab:3a:62:8c:cf:12:60:58:28:b4
Fingerprint (sha256): 2f:1b:58:5f:15:d7:62:f6:cf:e2:12:6a:3d:bb:cb:18:83:ee:36:ed:3a:79:3b:b3:da:73:73:70:87:db:e6:ad

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate live.madeopen.co.uk

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for live.madeopen.co.uk

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atherstone-and-mancetter.madeopen.co.uk
candobristol.co.uk
charnwoodtimebank.org.uk
community.budleaders.org
community.kaingaora.govt.nz
connectanglesey.co.uk
connectanglesey.wales
connectcarmarthenshire.org.uk
connectceredigion.org.uk
connectpembrokeshire.org.uk
connectrct.org.uk
connecttorfaen.org.uk
cornwall-link.co.uk
cw4.madeopen.co.uk
cysylltuynysmon.cymru
demonstration.madeopen.co.uk
devonconnect.org
givinglabs.madeopen.co.uk
hex.madeopen.co.uk
hub.tematawai.nz
hwbcymunedolsirbenfro.cymru
innovationcollective.co.uk
kaingaora.madeopen.co.uk
launcestontogether.com.au
live.madeopen.co.uk
madeopen.co.uk
marketplace.madeopen.co.uk
medrwnmon.madeopen.co.uk
melton.madeopen.co.uk
meltontimebank.org.uk
myinnovationcollective.online
nhstalent.co.uk
pembrokeshirecommunityhub.co.uk
pembrokeshirecommunityhub.com
pembrokeshirecommunityhub.org.uk
pembrokeshirecommunityhub.wales
ping-digital.co.uk
qkenz.com
restricted.madeopen.co.uk
sharewear.madeopen.co.uk
skillexchange.madeopen.co.uk
status.madeopen.co.uk
support.madeopen.co.uk
talenttimebanking.co.uk
talenttimebanking.com
talenttimebanking.org
tbodemo.madeopen.co.uk
tbuk.madeopen.co.uk
tematawai.nz
testlive.madeopen.co.uk
time4leicestershire.madeopen.co.uk
time4leicestershire.org.uk
timebank1.madeopen.co.uk
timebank2.madeopen.co.uk
timebank3.madeopen.co.uk
timebanks.madeopen.co.uk
timebanks.org
together.madeopen.co.uk
torbaytogether.org.uk
training.madeopen.co.uk
vol.madeopen.co.uk
warwicktimebank.co.uk
wiltshiretogether.org.uk
www.candobristol.co.uk
www.charnwoodtimebank.org.uk
www.connectanglesey.co.uk
www.connectanglesey.wales
www.connectpembrokeshire.org.uk
www.connectrct.org.uk
www.connecttorfaen.org.uk
www.cornwall-link.co.uk
www.cysylltuynysmon.cymru
www.devonconnect.org
www.hwbcymunedolsirbenfro.cymru
www.innovationcollective.co.uk
www.meltontimebank.org.uk
www.myinnovationcollective.online
www.nhstalent.co.uk
www.pembrokeshirecommunityhub.co.uk
www.pembrokeshirecommunityhub.com
www.pembrokeshirecommunityhub.org.uk
www.pembrokeshirecommunityhub.wales
www.ping-digital.co.uk
www.qkenz.com
www.talenttimebanking.co.uk
www.time4leicestershire.org.uk
www.warwicktimebank.co.uk

Other certificates including the domain name madeopen.co.uk

(limited to 100 certificates)
help.forummc.com
madeopen.co.uk
madeopen.co.uk
live.madeopen.co.uk
www.monmouthshire.madeopen.co.uk
aide.insideout.fr
live.madeopen.co.uk
www.madeopen.co.uk
support.os-consultech.fr
support.xeranet.de
help.k2ms.com
*.madeopen.co.uk
help.infiniumcap.com
madeopen.co.uk
support.stodeo.com
launceston.madeopen.co.uk
live.madeopen.co.uk
madeopen.co.uk
weare.madeopen.co.uk
torbaytogether.org.uk
*.madeopen.co.uk
live.madeopen.co.uk
mitchellsbutlers.support.ignitehospitality.com
*.madeopen.co.uk
www.monmouthshire.madeopen.co.uk
launceston.madeopen.co.uk
torbaytogether.org.uk
live.madeopen.co.uk
weare.madeopen.co.uk
computacenter.becrypt.com
live.madeopen.co.uk
support.stodeo.com
launceston.madeopen.co.uk
support.stodeo.com
live.madeopen.co.uk
torbaytogether.org.uk
support.aliceandbob.company
support.stodeo.com
timebanksorg.madeopen.co.uk
support.stodeo.com
*.madeopen.co.uk
support.jp-networks.de
torbaytogether.org.uk
new.torbaytogether.org.uk
support.aliceandbob.company
weare.madeopen.co.uk
bigdev.madeopen.co.uk
monmouthshire.madeopen.co.uk
weare.madeopen.co.uk
live.madeopen.co.uk
weare.madeopen.co.uk
support.aliceandbob.company
launceston.madeopen.co.uk
weare.madeopen.co.uk
helpdesk.cloud4you.pt
www.timebanksorg.madeopen.co.uk
madeopen.co.uk
new.madeopen.co.uk
torbaytogether.org.uk
weare.madeopen.co.uk
madeopen.co.uk
live.madeopen.co.uk
torbaytogether.org.uk
support.stodeo.com
live.madeopen.co.uk
launceston.madeopen.co.uk
support.stodeo.com
support.jp-networks.de
new.madeopen.co.uk
live.madeopen.co.uk
live.madeopen.co.uk
live.madeopen.co.uk
torbaytogether.org.uk
www.community.madeopen.co.uk
live.madeopen.co.uk
new.madeopen.co.uk
torbaytogether.org.uk
support.madeopen.co.uk
support.stodeo.com
support.jp-networks.de
launceston.madeopen.co.uk
madeopen.co.uk
live.madeopen.co.uk
launceston.madeopen.co.uk
desk-tst.smartglobal.com
bigdev.madeopen.co.uk
support.gamaxlabsol.com
madeopen.co.uk
madeopen.co.uk
bigdev.madeopen.co.uk
bigdev.madeopen.co.uk
timebanksorg.madeopen.co.uk
bigdev.madeopen.co.uk
live.madeopen.co.uk
launceston.madeopen.co.uk
new.torbaytogether.org.uk
madeopen.co.uk
support.stodeo.com
helpdesk.thehelpdesk247.com
bigdev.madeopen.co.uk

Certificate

The complete raw certificate details for live.madeopen.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE9l3fyysIVmohqxYd9wSyOcczMnBr
BszGRxkZrn1QOrhQZNSBKjChzVTUNrbH60XTCIZXMX1zqpObYKJ8VqmXzw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331229435930101784932290765283727487658636
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 11:31:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 11:31:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'live.madeopen.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004f65ddfcb2b08566a21ab161df704b239c73332706b06ccc6471919ae7d503ab85064d4812a30a1cd54d436b6c7eb45d3088657317d73aa939b60a27c56a997cf
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8ec4cc9232bdceac6e5dc0c45e5211a59c19d68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2251 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atherstone-and-mancetter.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candobristol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charnwoodtimebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.budleaders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.kaingaora.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectanglesey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectanglesey.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectcarmarthenshire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectceredigion.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectpembrokeshire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectrct.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connecttorfaen.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwall-link.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cw4.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cysylltuynysmon.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demonstration.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devonconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givinglabs.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hex.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.tematawai.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hwbcymunedolsirbenfro.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovationcollective.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaingaora.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'launcestontogether.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medrwnmon.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melton.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meltontimebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinnovationcollective.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhstalent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pembrokeshirecommunityhub.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pembrokeshirecommunityhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pembrokeshirecommunityhub.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pembrokeshirecommunityhub.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ping-digital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qkenz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restricted.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharewear.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skillexchange.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talenttimebanking.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talenttimebanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talenttimebanking.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbodemo.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbuk.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tematawai.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testlive.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time4leicestershire.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time4leicestershire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebank1.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebank2.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebank3.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebanks.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebanks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'together.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torbaytogether.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vol.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warwicktimebank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiltshiretogether.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.candobristol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charnwoodtimebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectanglesey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectanglesey.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectpembrokeshire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectrct.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connecttorfaen.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwall-link.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cysylltuynysmon.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devonconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hwbcymunedolsirbenfro.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovationcollective.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meltontimebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myinnovationcollective.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhstalent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pembrokeshirecommunityhub.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pembrokeshirecommunityhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pembrokeshirecommunityhub.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pembrokeshirecommunityhub.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ping-digital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qkenz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talenttimebanking.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.time4leicestershire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warwicktimebank.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bf1dcf6670000040300483046022100aa8db7cc1bdaf6136c02a72b82b90d01e73b1a3ecdb8e179b787c7dab2c76627022100fd876dbc83c5b0c68e3d08204d5271d1a3b7c0e295c5bd28821ac720cd1525c4007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bf1dcf66600000403004630440220753b54b835e2d6ae30dd50219773ce0786970a1164c47fa1641290f1a5c40c9502207b6ec909ca050d8a563a7583564fc899bac84821f70a99153f41f433e536d930
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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