cpcalendars.bacs-generator.kissdigital.co.uk
Issued by R3
About this certificate
This digital certificate with serial number 04:9b:ce:69:4e:3d:17:0d:9e:be:2a:86:03:86:63:c3:17:3a was issued on by Let's Encrypt.
With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cpcalendars.bacs-generator.kissdigital.co.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:9b:ce:69:4e:3d:17:0d:9e:be:2a:86:03:86:63:c3:17:3aSerial Number (int): 401467278344956288869141655514319727826746
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 50:d7:1a:55:9f:c4:85:df:12:9c:d2:c0:c5:6c:53:64:bd:6d:b1:2d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ba:c2:b6:8d:b0:f1:d6:1a:de:61:fc:7d:7f:2f:ac:55:05:84:9e:27
Fingerprint (sha256): 88:4e:39:26:83:fb:72:67:1f:dd:bb:de:56:cf:c2:1c:aa:18:46:8f:61:3b:5a:c2:de:88:86:5e:0d:b7:5f:9d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate cpcalendars.bacs-generator.kissdigital.co.uk
23
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cpcalendars.bacs-generator.kissdigital.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bacs-generator.kissdigital.co.uk
cpanel.bacs-generator.kissdigital.co.uk
cpcalendars.bacs-generator.kissdigital.co.uk
cpcontacts.bacs-generator.kissdigital.co.uk
kiscom.co.uk
kisscom.co.uk
kisscreativegroup.co.uk
kisscreativegroup.com
kissengage.co.uk
live-kisscom.kissdigital.co.uk
mail.bacs-generator.kissdigital.co.uk
mail.live-kisscom.kissdigital.co.uk
webdisk.bacs-generator.kissdigital.co.uk
webmail.bacs-generator.kissdigital.co.uk
wework.kisscom.co.uk
whm.bacs-generator.kissdigital.co.uk
www.bacs-generator.kissdigital.co.uk
www.kiscom.co.uk
www.kisscom.co.uk
www.kisscreativegroup.co.uk
www.kisscreativegroup.com
www.live-kisscom.kissdigital.co.uk
www.wework.kisscom.co.uk
cpanel.bacs-generator.kissdigital.co.uk
cpcalendars.bacs-generator.kissdigital.co.uk
cpcontacts.bacs-generator.kissdigital.co.uk
kiscom.co.uk
kisscom.co.uk
kisscreativegroup.co.uk
kisscreativegroup.com
kissengage.co.uk
live-kisscom.kissdigital.co.uk
mail.bacs-generator.kissdigital.co.uk
mail.live-kisscom.kissdigital.co.uk
webdisk.bacs-generator.kissdigital.co.uk
webmail.bacs-generator.kissdigital.co.uk
wework.kisscom.co.uk
whm.bacs-generator.kissdigital.co.uk
www.bacs-generator.kissdigital.co.uk
www.kiscom.co.uk
www.kisscom.co.uk
www.kisscreativegroup.co.uk
www.kisscreativegroup.com
www.live-kisscom.kissdigital.co.uk
www.wework.kisscom.co.uk
Other certificates including the domain name kissdigital.co.uk
(limited to 100 certificates)
flywheelmarketing.co.uk
durbinsolarlights.com
leaf-live.kissdigital.co.uk
nityr.us
neophore.com
live-phoremost.kissdigital.co.uk
live-ithaka.kissdigital.co.uk
cambridgecandi.org.uk
alimentaryhealth.ie
brand.rsc.org
ubiquigent.biz
live-eahsn.kissdigital.co.uk
leafexpressionsystems.net
kisshub.co.uk
tonejet.kissdigital.co.uk
mail.adayinthewoods.org.uk
www.live-cambridgefuturetraumacare.kissdigital.co.uk
cambridgecandi.org.uk
1spatial.kissdigital.co.uk
sbrihealthcare.co.uk
live-neophore.kissdigital.co.uk
mail.midatechlive.kissdigital.co.uk
mail.midatechlive.kissdigital.co.uk
phoremost.com
www.evonetix.uk
brand.rsc.org
live-flywheelmarketing.kissdigital.co.uk
live-eahsn.kissdigital.co.uk
khandel-light.co.uk
ithaka.co.uk
cambridgefuturetraumacare.net
kisshub.co.uk
nityr.us
pioneer-foods-uk.com
tonejet.kissdigital.co.uk
pioneer-foods-uk.com
kisshub.co.uk
biocair.com
live-cambridgecandi.kissdigital.co.uk
eahsn.org
live-sbrihealthcare.kissdigital.co.uk
mail.midatech.kissdigital.co.uk
kisscreativegroup.co.uk
1spatial.kissdigital.co.uk
www.midatech.midatechpharma.com
ithaka.co.uk
brm-works.co.uk
evonetix.net
www.biocair.it
kisshosts.co.uk
cpanel.brm-works.com
webmail.midatechlive.kissdigital.co.uk
phoremost.com
www.sbrihealthcare.co.uk
biolinerx.com
flywheelmarketing.co.uk
www.leaf-live.kissdigital.co.uk
1spatial.kissdigital.co.uk
nityr.us
brand.rsc.org
cpanel.midatech.kissdigital.co.uk
www.bokomo.co.uk
webdisk.kisshub.co.uk
kisshub.co.uk
www.tonejet-live.kissdigital.co.uk
www.midatech.midatechpharma.com
adayinthewoods.org.uk
bison-rivers.com
biocair.com
neophore.com
cpanel.neophore.kissdigital.co.uk
webdisk.khandel-light.co.uk
cpcalendars.phoremost.kissdigital.co.uk
cpanel.midatech.kissdigital.co.uk
mail.live-neophore.kissdigital.co.uk
kisscom.co.uk
cpcalendars.phoremost.kissdigital.co.uk
evonetics.co.uk
midatechpharma.com
cpcalendars.iblon.kissdigital.co.uk
phoremost.com
reactabiotech.co.uk
leaf-live.kissdigital.co.uk
sbrihealthcare.co.uk
flywheelmarketing.co.uk
zymecommunications.com
webmail.neophore.kissdigital.co.uk
mail.biolinerx.kissdigital.co.uk
www.midatech.midatechpharma.com
kisscom.co.uk
marshallfleetsolutions.co.uk
tonejet.kissdigital.co.uk
flywheelmarketing.co.uk
nityr.us
whm.prototype.kissdigital.co.uk
tools.eahsn.org
mail.midatech.kissdigital.co.uk
live-alimentaryhealth.kissdigital.co.uk
phoremost.com
biocair.com
durbinsolarlights.com
leaf-live.kissdigital.co.uk
nityr.us
neophore.com
live-phoremost.kissdigital.co.uk
live-ithaka.kissdigital.co.uk
cambridgecandi.org.uk
alimentaryhealth.ie
brand.rsc.org
ubiquigent.biz
live-eahsn.kissdigital.co.uk
leafexpressionsystems.net
kisshub.co.uk
tonejet.kissdigital.co.uk
mail.adayinthewoods.org.uk
www.live-cambridgefuturetraumacare.kissdigital.co.uk
cambridgecandi.org.uk
1spatial.kissdigital.co.uk
sbrihealthcare.co.uk
live-neophore.kissdigital.co.uk
mail.midatechlive.kissdigital.co.uk
mail.midatechlive.kissdigital.co.uk
phoremost.com
www.evonetix.uk
brand.rsc.org
live-flywheelmarketing.kissdigital.co.uk
live-eahsn.kissdigital.co.uk
khandel-light.co.uk
ithaka.co.uk
cambridgefuturetraumacare.net
kisshub.co.uk
nityr.us
pioneer-foods-uk.com
tonejet.kissdigital.co.uk
pioneer-foods-uk.com
kisshub.co.uk
biocair.com
live-cambridgecandi.kissdigital.co.uk
eahsn.org
live-sbrihealthcare.kissdigital.co.uk
mail.midatech.kissdigital.co.uk
kisscreativegroup.co.uk
1spatial.kissdigital.co.uk
www.midatech.midatechpharma.com
ithaka.co.uk
brm-works.co.uk
evonetix.net
www.biocair.it
kisshosts.co.uk
cpanel.brm-works.com
webmail.midatechlive.kissdigital.co.uk
phoremost.com
www.sbrihealthcare.co.uk
biolinerx.com
flywheelmarketing.co.uk
www.leaf-live.kissdigital.co.uk
1spatial.kissdigital.co.uk
nityr.us
brand.rsc.org
cpanel.midatech.kissdigital.co.uk
www.bokomo.co.uk
webdisk.kisshub.co.uk
kisshub.co.uk
www.tonejet-live.kissdigital.co.uk
www.midatech.midatechpharma.com
adayinthewoods.org.uk
bison-rivers.com
biocair.com
neophore.com
cpanel.neophore.kissdigital.co.uk
webdisk.khandel-light.co.uk
cpcalendars.phoremost.kissdigital.co.uk
cpanel.midatech.kissdigital.co.uk
mail.live-neophore.kissdigital.co.uk
kisscom.co.uk
cpcalendars.phoremost.kissdigital.co.uk
evonetics.co.uk
midatechpharma.com
cpcalendars.iblon.kissdigital.co.uk
phoremost.com
reactabiotech.co.uk
leaf-live.kissdigital.co.uk
sbrihealthcare.co.uk
flywheelmarketing.co.uk
zymecommunications.com
webmail.neophore.kissdigital.co.uk
mail.biolinerx.kissdigital.co.uk
www.midatech.midatechpharma.com
kisscom.co.uk
marshallfleetsolutions.co.uk
tonejet.kissdigital.co.uk
flywheelmarketing.co.uk
nityr.us
whm.prototype.kissdigital.co.uk
tools.eahsn.org
mail.midatech.kissdigital.co.uk
live-alimentaryhealth.kissdigital.co.uk
phoremost.com
biocair.com
Certificate
The complete raw certificate details for cpcalendars.bacs-generator.kissdigital.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHwDCCBqigAwIBAgISBJvOaU49Fw2eviqGA4Zjwxc6MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDYwMTQxMDhaFw0yNDAzMDUwMTQxMDdaMDcxNTAzBgNVBAMT LGNwY2FsZW5kYXJzLmJhY3MtZ2VuZXJhdG9yLmtpc3NkaWdpdGFsLmNvLnVrMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB/HirJ0u8FO1aIRYpVqYJKZ h6taavDxqZpJXQTZY/s2w4e8m9syjPmWdKLkknrYgCHWMaqEpjajipHa00hxKv2N YGOT3m0mYK1CmT2Ag5LpFab6D2a58dzv+3aPlWnorEuxNjNb5N2TUJZCtVjBkoq2 Y5B7BxOTyNVYP2vEwJtBG+FmBxftijY0XE1BiPT10DwlBQSb7FvcX00HK7zSujEV QrjgddEomx9N1jLOQstTFh2swjjMwA7bni72BKxqbXkOTDknWmeKcGLnHdChffP4 SAFRI9zJGD09kEg92M/4ZuP8E2zsLDHBb9cXralYB1lJjGZeaQRKK6OGr72DCQID AQABo4IEyTCCBMUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRQ1xpVn8SF3xKc0sDF bFNkvW2xLTAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEF BQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggr BgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCAs8GA1UdEQSCAsYwggLC giBiYWNzLWdlbmVyYXRvci5raXNzZGlnaXRhbC5jby51a4InY3BhbmVsLmJhY3Mt Z2VuZXJhdG9yLmtpc3NkaWdpdGFsLmNvLnVrgixjcGNhbGVuZGFycy5iYWNzLWdl bmVyYXRvci5raXNzZGlnaXRhbC5jby51a4IrY3Bjb250YWN0cy5iYWNzLWdlbmVy YXRvci5raXNzZGlnaXRhbC5jby51a4IMa2lzY29tLmNvLnVrgg1raXNzY29tLmNv LnVrghdraXNzY3JlYXRpdmVncm91cC5jby51a4IVa2lzc2NyZWF0aXZlZ3JvdXAu Y29tghBraXNzZW5nYWdlLmNvLnVrgh5saXZlLWtpc3Njb20ua2lzc2RpZ2l0YWwu Y28udWuCJW1haWwuYmFjcy1nZW5lcmF0b3Iua2lzc2RpZ2l0YWwuY28udWuCI21h aWwubGl2ZS1raXNzY29tLmtpc3NkaWdpdGFsLmNvLnVrgih3ZWJkaXNrLmJhY3Mt Z2VuZXJhdG9yLmtpc3NkaWdpdGFsLmNvLnVrgih3ZWJtYWlsLmJhY3MtZ2VuZXJh dG9yLmtpc3NkaWdpdGFsLmNvLnVrghR3ZXdvcmsua2lzc2NvbS5jby51a4Ikd2ht LmJhY3MtZ2VuZXJhdG9yLmtpc3NkaWdpdGFsLmNvLnVrgiR3d3cuYmFjcy1nZW5l cmF0b3Iua2lzc2RpZ2l0YWwuY28udWuCEHd3dy5raXNjb20uY28udWuCEXd3dy5r aXNzY29tLmNvLnVrght3d3cua2lzc2NyZWF0aXZlZ3JvdXAuY28udWuCGXd3dy5r aXNzY3JlYXRpdmVncm91cC5jb22CInd3dy5saXZlLWtpc3Njb20ua2lzc2RpZ2l0 YWwuY28udWuCGHd3dy53ZXdvcmsua2lzc2NvbS5jby51azATBgNVHSAEDDAKMAgG BmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AKLiv9Ye3i8vB6DWTm03 p9xlQ7DGtS6i2reK+Jpt9RfYAAABjD0AJRwAAAQDAEcwRQIgax7vuLHk1EdPTiOA SckzRqljF7lk1zGxPZ3xHi3sJFYCIQDlpJmflCR5X5yQlwKk5k/Zv+JSu2OJ10a0 /H+dcFZv2gB3AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjD0A JUQAAAQDAEgwRgIhAIdCvOJKiapDBNRvY2cWlFprbPDMpqjn0R6NHqEACCTJAiEA /caNIGqhWYLiVLeUQaHGRbP3bZMIqaa8HkbWEGHs954wDQYJKoZIhvcNAQELBQAD ggEBADHV2a90P4oXNRYPdzxOH4MYWolS02gUdeHY9Z7MaxxRouZXlx4wOZA+6gnJ 62sU9k4/6a0BoSYh4RU6BPTNqonKUZCUMy+lHXv8+4XDB8yCk8e9XSR8Q2mSf1+L uvHhEzI5RiG+Pr3RMwCch8kswDsKwmefhWVRaPMQ2SaAFldShmpNR84OREDyVzfD j/tRzbCOcVVd5TDDcqLYdO2dBIh+pHMjVZhH8fdZtl5Y2krjOjHW0fIOnO9mi6Zb nmbW12K3NTs9Rc120R5OGCgdgz7JIGYeS7nQ9zx0WFhfmzJPNLYy1d7ZbUWei5HJ XHCd0OyBhAMm11sLE53Fq/Gh4oM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB/HirJ0u8FO1aIRYpVq YJKZh6taavDxqZpJXQTZY/s2w4e8m9syjPmWdKLkknrYgCHWMaqEpjajipHa00hx Kv2NYGOT3m0mYK1CmT2Ag5LpFab6D2a58dzv+3aPlWnorEuxNjNb5N2TUJZCtVjB koq2Y5B7BxOTyNVYP2vEwJtBG+FmBxftijY0XE1BiPT10DwlBQSb7FvcX00HK7zS ujEVQrjgddEomx9N1jLOQstTFh2swjjMwA7bni72BKxqbXkOTDknWmeKcGLnHdCh ffP4SAFRI9zJGD09kEg92M/4ZuP8E2zsLDHBb9cXralYB1lJjGZeaQRKK6OGr72D CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 401467278344956288869141655514319727826746 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 01:41:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 01:41:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpcalendars.bacs-generator.kissdigital.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21728659490004747795890243687247797851610891765654957849408016293446872794439365816451906148187170127528008202341192886878071270106548132071652403046177649060020362916469116649653016948001880785311213126013314483097364273328705403669410122505938816705537020476384847084011359843108362930551871439591651710549700615650095287339763885773597384903523359467807317974126492324187295442529160595136090866472549829019133869771199284144797449397964130760672755328193975220555485499737705102914158416199120265439172892356976826187604786638332210856487253328572525427138470438194645633250492338782878323413566539575303077724937 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 50d71a559fc485df129cd2c0c56c5364bd6db12d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (710 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bacs-generator.kissdigital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.bacs-generator.kissdigital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.bacs-generator.kissdigital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.bacs-generator.kissdigital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiscom.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kisscom.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kisscreativegroup.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kisscreativegroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kissengage.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-kisscom.kissdigital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bacs-generator.kissdigital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.live-kisscom.kissdigital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.bacs-generator.kissdigital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.bacs-generator.kissdigital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wework.kisscom.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whm.bacs-generator.kissdigital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bacs-generator.kissdigital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiscom.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kisscom.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kisscreativegroup.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kisscreativegroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.live-kisscom.kissdigital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wework.kisscom.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c3d00251c000004030047304502206b1eefb8b1e4d4474f4e238049c93346a96317b964d731b13d9df11e2dec2456022100e5a4999f9424795f9c909702a4e64fd9bfe252bb6389d746b4fc7f9d70566fda00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c3d00254400000403004830460221008742bce24a89aa4304d46f636716945a6b6cf0cca6a8e7d11e8d1ea1000824c9022100fdc68d206aa15982e254b79441a1c645b3f76d9308a9a6bc1e46d61061ecf79e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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