live.madeopen.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:b1:69:f7:58:26:31:6c:bb:97:89:d4:4a:d1:5b:77:dc:3c was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=live.madeopen.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b1:69:f7:58:26:31:6c:bb:97:89:d4:4a:d1:5b:77:dc:3c
Serial Number (int): 321707689965046333754204879518269978434620
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 37:9d:fa:cb:3f:9c:8b:e9:14:73:ef:ea:9e:5f:45:ab:44:37:d6:4e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ae:ea:8d:b3:17:f1:e6:a6:e5:94:1d:dc:de:a2:d6:7b:31:c3:ff:63
Fingerprint (sha256): db:e8:27:f3:f2:ad:cc:13:21:e7:2b:0f:4a:91:c9:51:90:6d:1d:8d:29:b9:63:2c:13:a5:ca:76:f2:d3:9c:18

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate live.madeopen.co.uk

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for live.madeopen.co.uk

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atherstone-and-mancetter.madeopen.co.uk
candobristol.co.uk
charnwoodtimebank.org.uk
community.budleaders.org
community.kaingaora.govt.nz
connectanglesey.co.uk
connectanglesey.wales
connectcarmarthenshire.org.uk
connectceredigion.org.uk
connectpembrokeshire.org.uk
connectrct.org.uk
connecttorfaen.org.uk
cornwall-link.co.uk
cw4.madeopen.co.uk
cysylltuynysmon.cymru
demonstration.madeopen.co.uk
devonconnect.org
givinglabs.madeopen.co.uk
hex.madeopen.co.uk
hub.tematawai.nz
hwbcymunedolsirbenfro.cymru
innovationcollective.co.uk
kaingaora.madeopen.co.uk
launcestontogether.com.au
live.madeopen.co.uk
madeopen.co.uk
marketplace.madeopen.co.uk
medrwnmon.madeopen.co.uk
melton.madeopen.co.uk
meltontimebank.org.uk
myinnovationcollective.online
nhstalent.co.uk
pembrokeshirecommunityhub.co.uk
pembrokeshirecommunityhub.com
pembrokeshirecommunityhub.org.uk
pembrokeshirecommunityhub.wales
ping-digital.co.uk
qkenz.com
restricted.madeopen.co.uk
sharewear.madeopen.co.uk
skillexchange.madeopen.co.uk
status.madeopen.co.uk
stnicholastimebank.madeopen.co.uk
support.madeopen.co.uk
talenttimebanking.co.uk
talenttimebanking.com
talenttimebanking.org
tbodemo.madeopen.co.uk
tbuk.madeopen.co.uk
techcornwall.madeopen.co.uk
tematawai.nz
tempsite1.madeopen.co.uk
testlive.madeopen.co.uk
time4good.co.uk
time4leicestershire.madeopen.co.uk
time4leicestershire.org.uk
timebank1.madeopen.co.uk
timebank2.madeopen.co.uk
timebank3.madeopen.co.uk
timebanks.madeopen.co.uk
together.madeopen.co.uk
torbaytogether.org.uk
training.madeopen.co.uk
vol.madeopen.co.uk
warwicktimebank.co.uk
wiltshiretogether.org.uk
www.candobristol.co.uk
www.charnwoodtimebank.org.uk
www.connectanglesey.co.uk
www.connectanglesey.wales
www.connectpembrokeshire.org.uk
www.connectrct.org.uk
www.connecttorfaen.org.uk
www.cornwall-link.co.uk
www.cysylltuynysmon.cymru
www.devonconnect.org
www.hwbcymunedolsirbenfro.cymru
www.innovationcollective.co.uk
www.meltontimebank.org.uk
www.myinnovationcollective.online
www.nhstalent.co.uk
www.pembrokeshirecommunityhub.co.uk
www.pembrokeshirecommunityhub.com
www.pembrokeshirecommunityhub.org.uk
www.pembrokeshirecommunityhub.wales
www.ping-digital.co.uk
www.qkenz.com
www.stnicholas.madeopen.co.uk
www.stnicholastimebank.madeopen.co.uk
www.talenttimebanking.co.uk
www.time4leicestershire.org.uk
www.warwicktimebank.co.uk

Other certificates including the domain name madeopen.co.uk

(limited to 100 certificates)
help.forummc.com
madeopen.co.uk
madeopen.co.uk
live.madeopen.co.uk
www.monmouthshire.madeopen.co.uk
aide.insideout.fr
live.madeopen.co.uk
www.madeopen.co.uk
support.os-consultech.fr
support.xeranet.de
help.k2ms.com
*.madeopen.co.uk
help.infiniumcap.com
madeopen.co.uk
support.stodeo.com
launceston.madeopen.co.uk
live.madeopen.co.uk
madeopen.co.uk
weare.madeopen.co.uk
torbaytogether.org.uk
*.madeopen.co.uk
live.madeopen.co.uk
mitchellsbutlers.support.ignitehospitality.com
*.madeopen.co.uk
www.monmouthshire.madeopen.co.uk
launceston.madeopen.co.uk
torbaytogether.org.uk
live.madeopen.co.uk
weare.madeopen.co.uk
computacenter.becrypt.com
live.madeopen.co.uk
support.stodeo.com
launceston.madeopen.co.uk
support.stodeo.com
live.madeopen.co.uk
torbaytogether.org.uk
support.aliceandbob.company
support.stodeo.com
timebanksorg.madeopen.co.uk
support.stodeo.com
*.madeopen.co.uk
support.jp-networks.de
torbaytogether.org.uk
new.torbaytogether.org.uk
support.aliceandbob.company
weare.madeopen.co.uk
bigdev.madeopen.co.uk
monmouthshire.madeopen.co.uk
weare.madeopen.co.uk
live.madeopen.co.uk
weare.madeopen.co.uk
support.aliceandbob.company
launceston.madeopen.co.uk
weare.madeopen.co.uk
helpdesk.cloud4you.pt
www.timebanksorg.madeopen.co.uk
madeopen.co.uk
new.madeopen.co.uk
torbaytogether.org.uk
weare.madeopen.co.uk
madeopen.co.uk
live.madeopen.co.uk
torbaytogether.org.uk
support.stodeo.com
live.madeopen.co.uk
launceston.madeopen.co.uk
support.stodeo.com
support.jp-networks.de
new.madeopen.co.uk
live.madeopen.co.uk
live.madeopen.co.uk
live.madeopen.co.uk
torbaytogether.org.uk
www.community.madeopen.co.uk
live.madeopen.co.uk
new.madeopen.co.uk
torbaytogether.org.uk
support.madeopen.co.uk
support.stodeo.com
support.jp-networks.de
launceston.madeopen.co.uk
madeopen.co.uk
live.madeopen.co.uk
launceston.madeopen.co.uk
desk-tst.smartglobal.com
bigdev.madeopen.co.uk
support.gamaxlabsol.com
madeopen.co.uk
madeopen.co.uk
bigdev.madeopen.co.uk
bigdev.madeopen.co.uk
timebanksorg.madeopen.co.uk
bigdev.madeopen.co.uk
live.madeopen.co.uk
launceston.madeopen.co.uk
new.torbaytogether.org.uk
madeopen.co.uk
support.stodeo.com
helpdesk.thehelpdesk247.com
bigdev.madeopen.co.uk

Certificate

The complete raw certificate details for live.madeopen.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE9l3fyysIVmohqxYd9wSyOcczMnBr
BszGRxkZrn1QOrhQZNSBKjChzVTUNrbH60XTCIZXMX1zqpObYKJ8VqmXzw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321707689965046333754204879518269978434620
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 11:14:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 11:14:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'live.madeopen.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004f65ddfcb2b08566a21ab161df704b239c73332706b06ccc6471919ae7d503ab85064d4812a30a1cd54d436b6c7eb45d3088657317d73aa939b60a27c56a997cf
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							379dfacb3f9c8be91473efea9e5f45ab4437d64e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2413 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atherstone-and-mancetter.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candobristol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charnwoodtimebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.budleaders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.kaingaora.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectanglesey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectanglesey.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectcarmarthenshire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectceredigion.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectpembrokeshire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectrct.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connecttorfaen.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwall-link.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cw4.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cysylltuynysmon.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demonstration.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devonconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givinglabs.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hex.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.tematawai.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hwbcymunedolsirbenfro.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovationcollective.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaingaora.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'launcestontogether.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medrwnmon.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melton.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meltontimebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinnovationcollective.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhstalent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pembrokeshirecommunityhub.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pembrokeshirecommunityhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pembrokeshirecommunityhub.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pembrokeshirecommunityhub.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ping-digital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qkenz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restricted.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharewear.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skillexchange.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stnicholastimebank.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talenttimebanking.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talenttimebanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talenttimebanking.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbodemo.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbuk.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techcornwall.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tematawai.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempsite1.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testlive.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time4good.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time4leicestershire.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time4leicestershire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebank1.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebank2.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebank3.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebanks.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'together.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torbaytogether.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vol.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warwicktimebank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiltshiretogether.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.candobristol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charnwoodtimebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectanglesey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectanglesey.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectpembrokeshire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectrct.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connecttorfaen.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwall-link.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cysylltuynysmon.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devonconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hwbcymunedolsirbenfro.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovationcollective.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meltontimebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myinnovationcollective.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhstalent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pembrokeshirecommunityhub.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pembrokeshirecommunityhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pembrokeshirecommunityhub.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pembrokeshirecommunityhub.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ping-digital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qkenz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stnicholas.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stnicholastimebank.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talenttimebanking.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.time4leicestershire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warwicktimebank.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dc149b8b5000004030047304502207401a7cb992d4c36bb91d7319468cbfe797722c93fd15088bd59df034d12e266022100c0e1a312870b388ce8abe28e0611563c33f6601ae36b137c9c1308f4c5ef3e9200750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018dc149bae90000040300463044022020f9d438da3f34d73c39d977e66511ee37e0a78549dc8e18219acbd3313a0fbf022036c037c5f6ad8ea7009c963cc74410b2927f94e34ceb4168825de16aa33abd91
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008531bd85cc22f2215e6e088ac7989d9fd6d800d0ac5eb36a54e6130768ad0468ff57e91553e7cadbac0117ee7535ff9bf1c2da69e76c6611cf2752bca109317d1920bc93873d4424a0af5faefdf590f8ce31ec4f3fa1a7f41d9b353f391f80fff90aa9b895a3334ce6fd8d696579dad00f91950f2a3f3655c7d0a504aa5f1d4c4e853a38b21052307353360d6a891455ec511aa7644ec082111688aac3c36aba136ee340c2bdf3da96d3f038324e3d6af8fa30c55429180078df7469b1fc31abe61d1c36b60af4052e119c6c9d122bcf5da74095c4fafb5da5b325188ef9db4fbd6be8a1bf0fbaab13e430dfdb537c057f1fe9ffc5a19221790d2c96c5fb3af3