live.madeopen.co.uk

Issued by E5

About this certificate

This digital certificate with serial number 03:c8:d5:f5:03:91:27:1e:bb:65:cc:2f:05:e9:74:3b:3c:90 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=live.madeopen.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:c8:d5:f5:03:91:27:1e:bb:65:cc:2f:05:e9:74:3b:3c:90
Serial Number (int): 329677728927648380189885448421929333243024
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 37:9d:fa:cb:3f:9c:8b:e9:14:73:ef:ea:9e:5f:45:ab:44:37:d6:4e
AuthorityKeyId: 9f:2b:5f:cf:3c:21:4f:9d:04:b7:ed:2b:2c:c4:c6:70:8b:d2:d7:0d

Fingerprint (sha1): c3:88:b9:21:ed:e5:38:33:3b:3d:e0:c5:37:1a:9b:d2:87:6e:ff:56
Fingerprint (sha256): dc:4b:d5:50:a1:41:05:10:d9:69:62:63:88:de:95:81:8b:86:5d:e1:80:29:fc:5e:5d:a9:c3:75:d1:9e:7e:68

Issuing Certificate URL: http://e5.i.lencr.org/

Revocation information

OCSP Server: http://e5.o.lencr.org

Check the revocation status for certificate live.madeopen.co.uk

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for live.madeopen.co.uk

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atherstone-and-mancetter.madeopen.co.uk
candobristol.co.uk
charnwoodtimebank.org.uk
community.budleaders.org
community.kaingaora.govt.nz
connectanglesey.co.uk
connectanglesey.wales
connectcarmarthenshire.org.uk
connectceredigion.org.uk
connectingcarmarthenshire.wales
connectpembrokeshire.org.uk
connectrct.org.uk
connecttorfaen.org.uk
cornwall-link.co.uk
cw4.madeopen.co.uk
cyslltusirgar.cymru
cysylltuynysmon.cymru
demonstration.madeopen.co.uk
devonconnect.org
givinglabs.madeopen.co.uk
hex.madeopen.co.uk
hub.tematawai.nz
hwbcymunedolsirbenfro.cymru
innovationtemp.madeopen.co.uk
itstime4good.com
kaingaora.madeopen.co.uk
live.madeopen.co.uk
madeopen.co.uk
marketplace.madeopen.co.uk
medrwnmon.madeopen.co.uk
melton.madeopen.co.uk
meltontimebank.org.uk
nhstalent.co.uk
pembrokeshirecommunityhub.co.uk
pembrokeshirecommunityhub.com
pembrokeshirecommunityhub.org.uk
pembrokeshirecommunityhub.wales
ping-digital.co.uk
qkenz.com
restricted.madeopen.co.uk
sharewear.madeopen.co.uk
skillexchange.madeopen.co.uk
status.madeopen.co.uk
stnicholastimebank.madeopen.co.uk
support.madeopen.co.uk
talenttimebanking.co.uk
talenttimebanking.com
talenttimebanking.org
tbodemo.madeopen.co.uk
tbuk.madeopen.co.uk
techcornwall.madeopen.co.uk
tematawai.nz
tempsite1.madeopen.co.uk
testlive.madeopen.co.uk
time4good.co.uk
time4leicestershire.madeopen.co.uk
time4leicestershire.org.uk
timebank1.madeopen.co.uk
timebank2.madeopen.co.uk
timebank3.madeopen.co.uk
timebankireland.madeopen.co.uk
timebanks.madeopen.co.uk
together.madeopen.co.uk
torbaytogether.org.uk
training.madeopen.co.uk
vol.madeopen.co.uk
warwicktimebank.co.uk
wiltshiretogether.org.uk
www.candobristol.co.uk
www.charnwoodtimebank.org.uk
www.connectanglesey.co.uk
www.connectanglesey.wales
www.connectingcarmarthenshire.wales
www.connectpembrokeshire.org.uk
www.connectrct.org.uk
www.connecttorfaen.org.uk
www.cornwall-link.co.uk
www.cyslltusirgar.cymru
www.cysylltuynysmon.cymru
www.devonconnect.org
www.hwbcymunedolsirbenfro.cymru
www.meltontimebank.org.uk
www.nhstalent.co.uk
www.pembrokeshirecommunityhub.co.uk
www.pembrokeshirecommunityhub.com
www.pembrokeshirecommunityhub.org.uk
www.pembrokeshirecommunityhub.wales
www.ping-digital.co.uk
www.qkenz.com
www.stnicholas.madeopen.co.uk
www.stnicholastimebank.madeopen.co.uk
www.talenttimebanking.co.uk
www.time4leicestershire.org.uk
www.warwicktimebank.co.uk

Other certificates including the domain name madeopen.co.uk

(limited to 100 certificates)
help.forummc.com
madeopen.co.uk
madeopen.co.uk
live.madeopen.co.uk
www.monmouthshire.madeopen.co.uk
aide.insideout.fr
live.madeopen.co.uk
www.madeopen.co.uk
support.os-consultech.fr
support.xeranet.de
help.k2ms.com
*.madeopen.co.uk
help.infiniumcap.com
madeopen.co.uk
support.stodeo.com
launceston.madeopen.co.uk
live.madeopen.co.uk
madeopen.co.uk
weare.madeopen.co.uk
torbaytogether.org.uk
*.madeopen.co.uk
live.madeopen.co.uk
mitchellsbutlers.support.ignitehospitality.com
*.madeopen.co.uk
www.monmouthshire.madeopen.co.uk
launceston.madeopen.co.uk
torbaytogether.org.uk
live.madeopen.co.uk
weare.madeopen.co.uk
computacenter.becrypt.com
live.madeopen.co.uk
support.stodeo.com
launceston.madeopen.co.uk
support.stodeo.com
live.madeopen.co.uk
torbaytogether.org.uk
support.aliceandbob.company
support.stodeo.com
timebanksorg.madeopen.co.uk
support.stodeo.com
*.madeopen.co.uk
support.jp-networks.de
torbaytogether.org.uk
new.torbaytogether.org.uk
support.aliceandbob.company
weare.madeopen.co.uk
bigdev.madeopen.co.uk
monmouthshire.madeopen.co.uk
weare.madeopen.co.uk
live.madeopen.co.uk
weare.madeopen.co.uk
support.aliceandbob.company
launceston.madeopen.co.uk
weare.madeopen.co.uk
helpdesk.cloud4you.pt
www.timebanksorg.madeopen.co.uk
madeopen.co.uk
new.madeopen.co.uk
torbaytogether.org.uk
weare.madeopen.co.uk
madeopen.co.uk
live.madeopen.co.uk
torbaytogether.org.uk
support.stodeo.com
live.madeopen.co.uk
launceston.madeopen.co.uk
support.stodeo.com
support.jp-networks.de
new.madeopen.co.uk
live.madeopen.co.uk
live.madeopen.co.uk
live.madeopen.co.uk
torbaytogether.org.uk
www.community.madeopen.co.uk
live.madeopen.co.uk
new.madeopen.co.uk
torbaytogether.org.uk
support.madeopen.co.uk
support.stodeo.com
support.jp-networks.de
launceston.madeopen.co.uk
madeopen.co.uk
live.madeopen.co.uk
launceston.madeopen.co.uk
desk-tst.smartglobal.com
bigdev.madeopen.co.uk
support.gamaxlabsol.com
madeopen.co.uk
madeopen.co.uk
bigdev.madeopen.co.uk
bigdev.madeopen.co.uk
timebanksorg.madeopen.co.uk
bigdev.madeopen.co.uk
live.madeopen.co.uk
launceston.madeopen.co.uk
new.torbaytogether.org.uk
madeopen.co.uk
support.stodeo.com
helpdesk.thehelpdesk247.com
bigdev.madeopen.co.uk

Certificate

The complete raw certificate details for live.madeopen.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE9l3fyysIVmohqxYd9wSyOcczMnBr
BszGRxkZrn1QOrhQZNSBKjChzVTUNrbH60XTCIZXMX1zqpObYKJ8VqmXzw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329677728927648380189885448421929333243024
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'E5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 14:06:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-10 14:06:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'live.madeopen.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004f65ddfcb2b08566a21ab161df704b239c73332706b06ccc6471919ae7d503ab85064d4812a30a1cd54d436b6c7eb45d3088657317d73aa939b60a27c56a997cf
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							379dfacb3f9c8be91473efea9e5f45ab4437d64e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f2b5fcf3c214f9d04b7ed2b2cc4c6708bd2d70d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e5.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e5.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2457 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atherstone-and-mancetter.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candobristol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charnwoodtimebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.budleaders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.kaingaora.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectanglesey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectanglesey.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectcarmarthenshire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectceredigion.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectingcarmarthenshire.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectpembrokeshire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectrct.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connecttorfaen.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwall-link.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cw4.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyslltusirgar.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cysylltuynysmon.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demonstration.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devonconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givinglabs.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hex.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.tematawai.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hwbcymunedolsirbenfro.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovationtemp.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itstime4good.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaingaora.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medrwnmon.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melton.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meltontimebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhstalent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pembrokeshirecommunityhub.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pembrokeshirecommunityhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pembrokeshirecommunityhub.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pembrokeshirecommunityhub.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ping-digital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qkenz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restricted.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharewear.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skillexchange.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stnicholastimebank.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talenttimebanking.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talenttimebanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talenttimebanking.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbodemo.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbuk.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techcornwall.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tematawai.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempsite1.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testlive.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time4good.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time4leicestershire.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time4leicestershire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebank1.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebank2.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebank3.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebankireland.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebanks.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'together.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torbaytogether.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vol.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warwicktimebank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiltshiretogether.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.candobristol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charnwoodtimebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectanglesey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectanglesey.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectingcarmarthenshire.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectpembrokeshire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectrct.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connecttorfaen.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwall-link.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyslltusirgar.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cysylltuynysmon.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devonconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hwbcymunedolsirbenfro.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meltontimebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhstalent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pembrokeshirecommunityhub.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pembrokeshirecommunityhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pembrokeshirecommunityhub.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pembrokeshirecommunityhub.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ping-digital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qkenz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stnicholas.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stnicholastimebank.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talenttimebanking.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.time4leicestershire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warwicktimebank.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca000001900cfc2b6d000004030046304402207f81423e4898fe6e718e9ddeb5c9fc6944baaaa76db71de0a173efc8f24a1bb702200cc10b2191367903d0a43dac772cfb39fad209d001347d91f4335c2ff1066c2f00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001900cfc2b680000040300483046022100ca747d682e4df59a58cc65672d0928bdf0e2a3066e9da2b40febcb6ca7909d1f022100a7985d9f9f56df9172d502bf5edeb41c204582868139e117cecd88db5e34db4a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (832 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 32359020180611306114762360685408389860697383718320225036591031306973240091508345349669945984310576595139095070160766
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22790117375479414457229066218857336927975384140686027529833767830279922415388107361155874712584151357570473137502358