gardencentreblog.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:2a:6f:31:8e:ae:f1:bd:63:0c:eb:90:1e:a4:12:1a:58 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gardencentreblog.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:2a:6f:31:8e:ae:f1:bd:63:0c:eb:90:1e:a4:12:1a:58
Serial Number (int): 326046912436175924123584852502415483738712
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d1:aa:d0:57:40:36:d6:3c:65:7c:12:27:94:66:08:43:ba:c6:69:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ff:16:cc:84:ba:37:8c:87:32:de:21:5f:25:cc:ae:78:68:a0:df:4c
Fingerprint (sha256): 4b:54:9a:d1:db:c7:53:c4:c3:5b:7b:1e:8c:b6:1e:99:8c:e1:53:11:02:c3:e6:a1:7d:5d:96:c5:2e:e6:a5:9f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate gardencentreblog.co.uk

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gardencentreblog.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

averysplantcentre.co.uk
averysplantcentre.waringstewartassociates.co.uk
email.waringstewartassociates.co.uk
gardencentrebloc.waringstewartassociates.co.uk
gardencentreblog.co.uk
plantenthusiastblog.co.uk
plantenthusiastblog.waringstewartassociates.co.uk
plantoholic.co.uk
plantoholic.waringstewartassociates.co.uk
sue-overton.co.uk
sue-overton.waringstewartassociates.co.uk
sueovertonappliedpractice.waringstewartassociates.co.uk
www.averysplantcentre.co.uk
www.averysplantcentre.waringstewartassociates.co.uk
www.email.waringstewartassociates.co.uk
www.gardencentrebloc.waringstewartassociates.co.uk
www.gardencentreblog.co.uk
www.plantenthusiastblog.co.uk
www.plantenthusiastblog.waringstewartassociates.co.uk
www.plantoholic.co.uk
www.plantoholic.waringstewartassociates.co.uk
www.sue-overton.co.uk
www.sue-overton.waringstewartassociates.co.uk
www.sueovertonappliedpractice.waringstewartassociates.co.uk

Other certificates including the domain name gardencentreblog.co.uk

(limited to 100 certificates)
gardencentreblog.com
gardencentreblog.com
gardencentreblog.com
gardencentreblog.com
www.gardencentrebloc.waringstewartassociates.co.uk
gardencentreblog.com
gardencentreblog.com
gardencentreblog.com
gardencentreblog.com
gardencentreblog.co.uk
gardencentreblog.com
gardencentreblog.co.uk
gardencentreblog.com
gardencentreblog.com
mail.gardencentreblog.co.uk
www.ljmodernpilates.co.uk
gardencentreblog.com
gardencentreblog.com
gardencentreblog.com
gardencentreblog.com
gardencentreblog.com
avery.waringstewartassociates.co.uk
gardencentreblog.com
www.northumbriangardener.waringstewartassociates.co.uk

Certificate

The complete raw certificate details for gardencentreblog.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIojCCB4qgAwIBAgISA74qbzGOrvG9YwzrkB6kEhpYMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjEwMTAwMzM0MDBaFw0x
NzAxMDgwMzM0MDBaMCExHzAdBgNVBAMTFmdhcmRlbmNlbnRyZWJsb2cuY28udWsw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLO+M1cbzo+OLTvUPeK7by
HLXvQ7wSwnihTixvHIYNERuXFQ/it0dNNXgjRu2lBJKJafCM4VVKjnWZGMh5xdAo
DUbZMjTgObTvjQg605LflRtQR3ZeXvfCc7gUfz12DtzSVWmDQlS+hFjXddsvI3gr
5Y2611f+NpygL8TmkyXGagOWpQURstubjCk4p1XL7p1+HUTTDAPDTRCTLlQTUgWD
lGy2UKSA+CdUGhveeqRJHNe5h6YGXmgvAWwtVBGTSv3AD0KyxDUlc8AEjKKUaWbt
NjNyWAnXn+XheaC6cjT4QWSqDbmxkDFWGb9C0t7QXahnphgn7ltdav7U2rmzQByB
AgMBAAGjggWpMIIFpTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNGq0FdANtY8ZXwS
J5RmCEO6xmlBMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMHAGCCsG
AQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRz
ZW5jcnlwdC5vcmcvMIIDsQYDVR0RBIIDqDCCA6SCF2F2ZXJ5c3BsYW50Y2VudHJl
LmNvLnVrgi9hdmVyeXNwbGFudGNlbnRyZS53YXJpbmdzdGV3YXJ0YXNzb2NpYXRl
cy5jby51a4IjZW1haWwud2FyaW5nc3Rld2FydGFzc29jaWF0ZXMuY28udWuCLmdh
cmRlbmNlbnRyZWJsb2Mud2FyaW5nc3Rld2FydGFzc29jaWF0ZXMuY28udWuCFmdh
cmRlbmNlbnRyZWJsb2cuY28udWuCGXBsYW50ZW50aHVzaWFzdGJsb2cuY28udWuC
MXBsYW50ZW50aHVzaWFzdGJsb2cud2FyaW5nc3Rld2FydGFzc29jaWF0ZXMuY28u
dWuCEXBsYW50b2hvbGljLmNvLnVrgilwbGFudG9ob2xpYy53YXJpbmdzdGV3YXJ0
YXNzb2NpYXRlcy5jby51a4IRc3VlLW92ZXJ0b24uY28udWuCKXN1ZS1vdmVydG9u
LndhcmluZ3N0ZXdhcnRhc3NvY2lhdGVzLmNvLnVrgjdzdWVvdmVydG9uYXBwbGll
ZHByYWN0aWNlLndhcmluZ3N0ZXdhcnRhc3NvY2lhdGVzLmNvLnVrght3d3cuYXZl
cnlzcGxhbnRjZW50cmUuY28udWuCM3d3dy5hdmVyeXNwbGFudGNlbnRyZS53YXJp
bmdzdGV3YXJ0YXNzb2NpYXRlcy5jby51a4Ind3d3LmVtYWlsLndhcmluZ3N0ZXdh
cnRhc3NvY2lhdGVzLmNvLnVrgjJ3d3cuZ2FyZGVuY2VudHJlYmxvYy53YXJpbmdz
dGV3YXJ0YXNzb2NpYXRlcy5jby51a4Iad3d3LmdhcmRlbmNlbnRyZWJsb2cuY28u
dWuCHXd3dy5wbGFudGVudGh1c2lhc3RibG9nLmNvLnVrgjV3d3cucGxhbnRlbnRo
dXNpYXN0YmxvZy53YXJpbmdzdGV3YXJ0YXNzb2NpYXRlcy5jby51a4IVd3d3LnBs
YW50b2hvbGljLmNvLnVrgi13d3cucGxhbnRvaG9saWMud2FyaW5nc3Rld2FydGFz
c29jaWF0ZXMuY28udWuCFXd3dy5zdWUtb3ZlcnRvbi5jby51a4Itd3d3LnN1ZS1v
dmVydG9uLndhcmluZ3N0ZXdhcnRhc3NvY2lhdGVzLmNvLnVrgjt3d3cuc3Vlb3Zl
cnRvbmFwcGxpZWRwcmFjdGljZS53YXJpbmdzdGV3YXJ0YXNzb2NpYXRlcy5jby51
azCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcC
AjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24g
YnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0
aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5
cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQB/H7uI7H6zHsyM
LnTqf8s3qbjDNtDaEroWP4ae70rmX8+qUe/JNXRXCasmiJ7d06JsBcySkdHkb9pY
JbJP452bpLHgDTtCTqMYi6/Lk8PeMk2fry9PQ6egDNVwql8sukSGCW0LWYBk8YQD
eVbbuD7eGorrQDv5J8Uem4aZ7EPvEJQGyKy0Yg3lgxy/Xdz8ID0wl36kW4Wb2jLd
JPwGEd8aAzyYywK2tTRkFBMzasQGwY+0u0QQZhONp0I0AHvw43FBsl9zyWun74Vx
2MdVjfM9S6OfGbn6xLv1xn5IIhfmjsv8cNQZJbrXGYE3EqJaz8+HpXfo1x9MfbLj
Z99rSk3i
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzvjNXG86Pji071D3iu2
8hy170O8EsJ4oU4sbxyGDREblxUP4rdHTTV4I0btpQSSiWnwjOFVSo51mRjIecXQ
KA1G2TI04Dm0740IOtOS35UbUEd2Xl73wnO4FH89dg7c0lVpg0JUvoRY13XbLyN4
K+WNutdX/jacoC/E5pMlxmoDlqUFEbLbm4wpOKdVy+6dfh1E0wwDw00Qky5UE1IF
g5RstlCkgPgnVBob3nqkSRzXuYemBl5oLwFsLVQRk0r9wA9CssQ1JXPABIyilGlm
7TYzclgJ15/l4XmgunI0+EFkqg25sZAxVhm/QtLe0F2oZ6YYJ+5bXWr+1Nq5s0Ac
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326046912436175924123584852502415483738712
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-10 03:34:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-08 03:34:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gardencentreblog.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25655907551905610874521590307797400038448166639351347780654527372044696904804931459414167140480521763251486097481011859578653116210937333908065939272008286875158247316048588982786036914355771660639249880103339488820813893575723881794097757680836814417768529594766514576723823107616322748694002460537445238305590974330202334353194974030117723169654161167548803454243144190134402635793101016284466015306757383311318889547260160341107433055388318312818627230934512856854451950644563811611642074172904315457578892186587363153223888453632654059336644542353724615513035815672223762091790598822838707284026823752939651210369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1aad0574036d63c657c122794660843bac66941
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (936 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'averysplantcentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'averysplantcentre.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardencentrebloc.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardencentreblog.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantenthusiastblog.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantenthusiastblog.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantoholic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantoholic.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sue-overton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sue-overton.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sueovertonappliedpractice.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.averysplantcentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.averysplantcentre.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.email.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gardencentrebloc.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gardencentreblog.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantenthusiastblog.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantenthusiastblog.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantoholic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantoholic.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sue-overton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sue-overton.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sueovertonappliedpractice.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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