live.madeopen.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:4c:a2:17:21:3a:a8:30:13:1d:cc:41:38:b6:b3:9f:f1:87 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=live.madeopen.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4c:a2:17:21:3a:a8:30:13:1d:cc:41:38:b6:b3:9f:f1:87
Serial Number (int): 287413772713383767782230461522099757379975
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a8:ec:4c:c9:23:2b:dc:ea:c6:e5:dc:0c:45:e5:21:1a:59:c1:9d:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 39:6e:ab:1d:81:16:c2:b2:5b:04:a0:ff:f5:f5:b4:ca:f0:3d:59:22
Fingerprint (sha256): 3d:fc:56:05:a1:99:9a:a9:a1:05:2c:16:67:b6:ec:fb:c5:a6:85:3c:87:71:37:a8:e4:5c:07:f4:dd:e1:e1:33

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate live.madeopen.co.uk

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for live.madeopen.co.uk

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atherstone-and-mancetter.madeopen.co.uk
candobristol.co.uk
charnwoodtimebank.org.uk
community.budleaders.org
community.kaingaora.govt.nz
connectanglesey.co.uk
connectanglesey.wales
connectcarmarthenshire.org.uk
connectceredigion.org.uk
connectpembrokeshire.org.uk
connectrct.org.uk
connecttorfaen.org.uk
cornwall-link.co.uk
cw4.madeopen.co.uk
cysylltuynysmon.cymru
demonstration.madeopen.co.uk
devonconnect.org
givinglabs.madeopen.co.uk
hex.madeopen.co.uk
hub.tematawai.nz
hwbcymunedolsirbenfro.cymru
innovationcollective.co.uk
kaingaora.madeopen.co.uk
launcestontogether.com.au
live.madeopen.co.uk
madeopen.co.uk
marketplace.madeopen.co.uk
medrwnmon.madeopen.co.uk
melton.madeopen.co.uk
meltontimebank.org.uk
myinnovationcollective.online
nhstalent.co.uk
pembrokeshirecommunityhub.co.uk
pembrokeshirecommunityhub.com
pembrokeshirecommunityhub.org.uk
pembrokeshirecommunityhub.wales
ping-digital.co.uk
qkenz.com
restricted.madeopen.co.uk
sharewear.madeopen.co.uk
skillexchange.madeopen.co.uk
status.madeopen.co.uk
support.madeopen.co.uk
talenttimebanking.co.uk
talenttimebanking.com
talenttimebanking.org
tbodemo.madeopen.co.uk
tbuk.madeopen.co.uk
tematawai.nz
testlive.madeopen.co.uk
time4leicestershire.madeopen.co.uk
time4leicestershire.org.uk
timebank1.madeopen.co.uk
timebank2.madeopen.co.uk
timebank3.madeopen.co.uk
timebanks.madeopen.co.uk
timebanks.org
together.madeopen.co.uk
torbaytogether.org.uk
training.madeopen.co.uk
ufn.madeopen.co.uk
vol.madeopen.co.uk
warwicktimebank.co.uk
wiltshiretogether.org.uk
www.candobristol.co.uk
www.charnwoodtimebank.org.uk
www.connectanglesey.co.uk
www.connectanglesey.wales
www.connectpembrokeshire.org.uk
www.connectrct.org.uk
www.connecttorfaen.org.uk
www.cornwall-link.co.uk
www.cysylltuynysmon.cymru
www.devonconnect.org
www.hwbcymunedolsirbenfro.cymru
www.innovationcollective.co.uk
www.meltontimebank.org.uk
www.myinnovationcollective.online
www.nhstalent.co.uk
www.pembrokeshirecommunityhub.co.uk
www.pembrokeshirecommunityhub.com
www.pembrokeshirecommunityhub.org.uk
www.pembrokeshirecommunityhub.wales
www.ping-digital.co.uk
www.qkenz.com
www.talenttimebanking.co.uk
www.time4leicestershire.org.uk
www.warwicktimebank.co.uk

Other certificates including the domain name madeopen.co.uk

(limited to 100 certificates)
help.forummc.com
madeopen.co.uk
madeopen.co.uk
live.madeopen.co.uk
www.monmouthshire.madeopen.co.uk
aide.insideout.fr
live.madeopen.co.uk
www.madeopen.co.uk
support.os-consultech.fr
support.xeranet.de
help.k2ms.com
*.madeopen.co.uk
help.infiniumcap.com
madeopen.co.uk
support.stodeo.com
launceston.madeopen.co.uk
live.madeopen.co.uk
madeopen.co.uk
weare.madeopen.co.uk
torbaytogether.org.uk
*.madeopen.co.uk
live.madeopen.co.uk
mitchellsbutlers.support.ignitehospitality.com
*.madeopen.co.uk
www.monmouthshire.madeopen.co.uk
launceston.madeopen.co.uk
torbaytogether.org.uk
live.madeopen.co.uk
weare.madeopen.co.uk
computacenter.becrypt.com
live.madeopen.co.uk
support.stodeo.com
launceston.madeopen.co.uk
support.stodeo.com
live.madeopen.co.uk
torbaytogether.org.uk
support.aliceandbob.company
support.stodeo.com
timebanksorg.madeopen.co.uk
support.stodeo.com
*.madeopen.co.uk
support.jp-networks.de
torbaytogether.org.uk
new.torbaytogether.org.uk
support.aliceandbob.company
weare.madeopen.co.uk
bigdev.madeopen.co.uk
monmouthshire.madeopen.co.uk
weare.madeopen.co.uk
live.madeopen.co.uk
weare.madeopen.co.uk
support.aliceandbob.company
launceston.madeopen.co.uk
weare.madeopen.co.uk
helpdesk.cloud4you.pt
www.timebanksorg.madeopen.co.uk
madeopen.co.uk
new.madeopen.co.uk
torbaytogether.org.uk
weare.madeopen.co.uk
madeopen.co.uk
live.madeopen.co.uk
torbaytogether.org.uk
support.stodeo.com
live.madeopen.co.uk
launceston.madeopen.co.uk
support.stodeo.com
support.jp-networks.de
new.madeopen.co.uk
live.madeopen.co.uk
live.madeopen.co.uk
live.madeopen.co.uk
torbaytogether.org.uk
www.community.madeopen.co.uk
live.madeopen.co.uk
new.madeopen.co.uk
torbaytogether.org.uk
support.madeopen.co.uk
support.stodeo.com
support.jp-networks.de
launceston.madeopen.co.uk
madeopen.co.uk
live.madeopen.co.uk
launceston.madeopen.co.uk
desk-tst.smartglobal.com
bigdev.madeopen.co.uk
support.gamaxlabsol.com
madeopen.co.uk
madeopen.co.uk
bigdev.madeopen.co.uk
bigdev.madeopen.co.uk
timebanksorg.madeopen.co.uk
bigdev.madeopen.co.uk
live.madeopen.co.uk
launceston.madeopen.co.uk
new.torbaytogether.org.uk
madeopen.co.uk
support.stodeo.com
helpdesk.thehelpdesk247.com
bigdev.madeopen.co.uk

Certificate

The complete raw certificate details for live.madeopen.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE9l3fyysIVmohqxYd9wSyOcczMnBr
BszGRxkZrn1QOrhQZNSBKjChzVTUNrbH60XTCIZXMX1zqpObYKJ8VqmXzw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287413772713383767782230461522099757379975
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 09:23:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 09:23:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'live.madeopen.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004f65ddfcb2b08566a21ab161df704b239c73332706b06ccc6471919ae7d503ab85064d4812a30a1cd54d436b6c7eb45d3088657317d73aa939b60a27c56a997cf
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8ec4cc9232bdceac6e5dc0c45e5211a59c19d68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2271 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atherstone-and-mancetter.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candobristol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charnwoodtimebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.budleaders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.kaingaora.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectanglesey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectanglesey.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectcarmarthenshire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectceredigion.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectpembrokeshire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectrct.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connecttorfaen.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwall-link.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cw4.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cysylltuynysmon.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demonstration.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devonconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givinglabs.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hex.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.tematawai.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hwbcymunedolsirbenfro.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovationcollective.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaingaora.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'launcestontogether.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medrwnmon.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melton.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meltontimebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinnovationcollective.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhstalent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pembrokeshirecommunityhub.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pembrokeshirecommunityhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pembrokeshirecommunityhub.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pembrokeshirecommunityhub.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ping-digital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qkenz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restricted.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharewear.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skillexchange.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talenttimebanking.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talenttimebanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talenttimebanking.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbodemo.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbuk.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tematawai.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testlive.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time4leicestershire.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time4leicestershire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebank1.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebank2.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebank3.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebanks.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebanks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'together.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torbaytogether.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufn.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vol.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warwicktimebank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiltshiretogether.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.candobristol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charnwoodtimebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectanglesey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectanglesey.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectpembrokeshire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectrct.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connecttorfaen.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwall-link.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cysylltuynysmon.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devonconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hwbcymunedolsirbenfro.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovationcollective.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meltontimebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myinnovationcollective.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhstalent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pembrokeshirecommunityhub.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pembrokeshirecommunityhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pembrokeshirecommunityhub.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pembrokeshirecommunityhub.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ping-digital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qkenz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talenttimebanking.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.time4leicestershire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warwicktimebank.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c67dac01500000403004730450220253d2e833d8a2c8a7fc39a917d8312654ed86a0c11a3b969faf630f7d0333a24022100dd695ad5654f5cd873492eee088dcef15391a8c95e0674e6216ad6fb8ce9c6ad00760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c67dac0f20000040300473045022100ca4fc5556bb4c154b7798648b9376587c1a86c70a3f4641ddb0d5b85756487f702205be54068f91e135dfe901f1f6d566943c709098cd0e0d4d87d35ed1f744c57ed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00560420eeb0dc32a4b8d9c61c0ad1dffac0849890f28b7134ec6af68853485e6214eae7cb890e098ea7c1ae9e2dc6f26095af15b79401a465c6b5c1fcab154cf494539d7dde3bc5493c53d2abcb1725ea35b86a06ffaa85d4be489b1002f9e1654c4fa5f23ee90f789b6573b5a2f747bacc3d0b67334302b3a56929093b712e17066643638c2316be253c896617f67f5d4b52cd5f243919d9efcf05843e4a061c60a38e775ed1316d06b477b8e26e5135dd310c4403e833949ef8a94fe6178c6d25914bc8913b5afa698bf76df7a51bbb4a35ae417503cc31fa85df748876fac25ccda055494db895de6f83eba2b47272a133bd3b7b7ad6616fe7c23241cc5bbd