palmercapital.co.uk

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number bd:c3:ef:03:bb:a8:10:52 was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=palmercapital.co.uk

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): bd:c3:ef:03:bb:a8:10:52
Serial Number (int): 13674035692939251794
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 9e:0d:dc:f1:f9:a1:22:c9:4b:40:c1:77:da:cf:c9:00:1d:47:7b:2d
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 52:24:91:7d:c2:0e:77:4c:a7:e8:11:f3:0b:d4:75:14:7d:cb:bb:7a
Fingerprint (sha256): 54:93:45:d9:dd:be:b6:99:82:17:32:09:b9:db:c7:33:ec:fc:54:d6:f8:c7:43:da:ec:6a:3c:bd:ed:e8:b2:4b

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-19552.crl

Check the revocation status for certificate palmercapital.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for palmercapital.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

palmercapital.co.uk
www.palmercapital.co.uk

Other certificates including the domain name palmercapital.co.uk

(limited to 100 certificates)
palmercapital.co.uk
info.palmercapital.co.uk
www.palmercapital.co.uk
palmercapital.co.uk
palmercapital.co.uk
palmercapital.co.uk
palmercapital.palmer.lightningbasehosted.com
mail.palmercapital.co.uk
palmercapital.co.uk
palmercapital.co.uk
www.palmercapital.co.uk
info.palmercapital.co.uk
palmercapital.co.uk
palmercapital.co.uk
palmercapital.co.uk
palmercapital.co.uk
www.palmercapital.co.uk
palmercapital.co.uk
palmercapital.co.uk
palmercapital.co.uk
www.palmercapital.co.uk
info.palmercapital.co.uk
info.palmercapital.co.uk
www.palmercapital.co.uk
www.palmercapital.co.uk
palmercapital.co.uk
palmercapital.co.uk
palmercapital.co.uk
palmercapital.co.uk
palmercapital.co.uk
palmercapital.co.uk
palmercapital.co.uk
palmercapital.co.uk
palmercapital.co.uk
info.palmercapital.co.uk
palmercapital.palmer.lightningbasehosted.com
palmercapital.co.uk
palmercapital.co.uk
mail.palmercapital.co.uk
www.palmercapital.co.uk
palmercapital.co.uk
www.palmercapital.co.uk
info.palmercapital.co.uk
palmercapital.co.uk
palmercapital.co.uk
palmercapital.palmer.lightningbasehosted.com
palmercapital.co.uk
palmercapital.co.uk
palmercapital.co.uk
info.palmercapital.co.uk
info.palmercapital.co.uk
info.palmercapital.co.uk
palmercapital.co.uk

Certificate

The complete raw certificate details for palmercapital.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGqTCCBZGgAwIBAgIJAL3D7wO7qBBSMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD
VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa
MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0
cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj
dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTI0MDQwNTAyMzYzOFoX
DTI1MDQwNTAyMzYzOFowHjEcMBoGA1UEAxMTcGFsbWVyY2FwaXRhbC5jby51azCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAODcinbM4TSHqAu5rWdm/se3
feM5ht0Wc0P/HajHuwhjOr9LUjex+E71vhoCjRqJsY8sm77hDbMCliMEeHY6sUle
nHMCA9X4PLB4LE76g6Ndv9tJv83MBFUjMZmHIZHXzZBhVGuyX4/3klhDioqhdH3B
QbEYJf+dBo3F5UA/MnqJdu8aD2ZSVBBquuUnObXHbhd2ZL3wOEtJ3hKErU3hURIs
Z9M/Z0OOlUQ6sJlUcXYXIhA3F7jhebGYprQPTgCBp+BBviEi5B0Ez92OAC2VhSaI
ZCHzAnLiX3Sm6UIk4XYZbQy2B+ZGOEP8qjY7BLpDd+E36jG1raRl/sJ/Ebft18EC
AwEAAaOCA1EwggNNMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA5BgNVHR8EMjAwMC6gLKAqhihodHRw
Oi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtMTk1NTIuY3JsMF0GA1UdIARWMFQw
SAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2NlcnRpZmljYXRl
cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYIKwYBBQUHAQEE
ajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNvbS8wQAYIKwYB
BQUHMAKGNGh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9y
eS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAUQMK9J47MNIMwojPX+2yz8LQsgM4wNwYD
VR0RBDAwLoITcGFsbWVyY2FwaXRhbC5jby51a4IXd3d3LnBhbG1lcmNhcGl0YWwu
Y28udWswHQYDVR0OBBYEFJ4N3PH5oSLJS0DBd9rPyQAdR3stMIIBgQYKKwYBBAHW
eQIEAgSCAXEEggFtAWsAdwBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo5
3wAAAY6sHYHeAAAEAwBIMEYCIQCI9xD/6l4E+dKYQ1UIytEOBlqJYH50n45VeiaQ
Fa4OlgIhAIt+eRVJUzVBPlXixcZz0rtW0a46gCLHExzPfIMl/FYPAHcAfVkeEuF4
KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowuebgAAAGOrB2C4wAABAMASDBGAiEAnVFx
/pFBz60QxZljS8SL04XTV14xiqWiKOHZfyXRD/QCIQCL3ok6r089LJ2kvYcdcbxx
1a9BUF9pn3XMj33qZJhJ5QB3AMz7D2qFcQll/pWbU87psnwi6YVcDZeNtql+VMD+
TA2wAAABjqwdg4UAAAQDAEgwRgIhAJ+Ak0bzPHfyG0QmOCnzRLnRnkl/P4kRSlON
UnHZVxXdAiEA8LmLkuFyjdBpaF/x5CYRB3cuRbEhbmJ0Z0umAStJrVUwDQYJKoZI
hvcNAQELBQADggEBAKQzxCOuz/fA8szUejHLXeWzx7rujxj0wfOjKUqHiExsKJoi
3u02fPDQ087cLRkXwhB2hKi4EgX437Pb7l6/RHVGcbrkxsgyt39mNaPnInhfsSfA
/bfkhzHbttsj1YEXLzH9tmMei02jo+9rFdLUMjrUTj0KoUpbe6cekZUbaDEhQX4s
1TlVPBthhDfEmJVSwpzLQIoEv5hHYUKJVKCnfLHaA2RjCemK17Wvl6u98po7DxXs
21ll/xo1SerXv6HJJ5I1u/0O4brv4o6+e/tBIFThESt/X5nkokv7fOSPZHm0G33Y
7Vfauyun/aQJVoVBFMiV4pnQzFrwpqKyVbvfpqA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NyKdszhNIeoC7mtZ2b+
x7d94zmG3RZzQ/8dqMe7CGM6v0tSN7H4TvW+GgKNGomxjyybvuENswKWIwR4djqx
SV6ccwID1fg8sHgsTvqDo12/20m/zcwEVSMxmYchkdfNkGFUa7Jfj/eSWEOKiqF0
fcFBsRgl/50GjcXlQD8yeol27xoPZlJUEGq65Sc5tcduF3ZkvfA4S0neEoStTeFR
Eixn0z9nQ46VRDqwmVRxdhciEDcXuOF5sZimtA9OAIGn4EG+ISLkHQTP3Y4ALZWF
JohkIfMCcuJfdKbpQiThdhltDLYH5kY4Q/yqNjsEukN34TfqMbWtpGX+wn8Rt+3X
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13674035692939251794
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 02:36:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-05 02:36:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'palmercapital.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28386133071253190235761597450868594883622360046686876262905202853603150937685196610447721097611723945180893159626057302250055647041993919583335770471716062580992949137782088057379839873421661912943637854161536910945076798491011254677524711036406841131265666276915677056409017015811510286785634063735533947857298745439260867297492590963721617551177972066581211524413879133268422627170554673156072180121559202199414828037796500675890523037095260225271527556708180560444786466450115667308445826908382638188285785452497227803242715448645284524878186557481232196351380921434054960936290845463733539325659772627800852125633
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-19552.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmercapital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palmercapital.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e0ddcf1f9a122c94b40c177dacfc9001d477b2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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