live.madeopen.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:85:0d:24:02:e7:e7:87:ea:b5:42:b0:bc:d3:7a:4d:48:ae was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=live.madeopen.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:85:0d:24:02:e7:e7:87:ea:b5:42:b0:bc:d3:7a:4d:48:ae
Serial Number (int): 393724165473096093485997002123281771088046
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a8:ec:4c:c9:23:2b:dc:ea:c6:e5:dc:0c:45:e5:21:1a:59:c1:9d:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5c:65:f4:4d:df:83:c9:a3:1a:0f:2f:f2:a0:9d:c6:d4:b9:fe:10:c2
Fingerprint (sha256): e2:7b:76:ea:96:de:4d:b4:b7:fc:46:ad:f8:93:91:da:41:54:95:fc:29:8d:48:6a:44:80:c0:54:5b:9c:71:53

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate live.madeopen.co.uk

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for live.madeopen.co.uk

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atherstone-and-mancetter.madeopen.co.uk
candobristol.co.uk
careconnect.org.uk
community.budleaders.org
community.kaingaora.govt.nz
community.ourplymouth.co.uk
connectanglesey.co.uk
connectanglesey.wales
connectcarmarthenshire.org.uk
connectceredigion.org.uk
connectmonmouthshire.org
connectpembrokeshire.org.uk
connectrct.org.uk
connecttorfaen.org.uk
cornwall-link.co.uk
cornwallvsf.org
cw4.madeopen.co.uk
cysylltuynysmon.cymru
demonstration.madeopen.co.uk
devonconnect.org
givinglabs.madeopen.co.uk
hexitime.com
innovationcollective.co.uk
kaingaora.madeopen.co.uk
launcestontogether.com.au
live.madeopen.co.uk
madeopen.co.uk
marketplace.madeopen.co.uk
medrwnmon.madeopen.co.uk
melton.madeopen.co.uk
meltontimebank.org.uk
myinnovationcollective.online
nhstalent.co.uk
northwarwickshiretimebank.co.uk
nuneatontimebank.co.uk
ping-digital.co.uk
qkenz.com
restricted.madeopen.co.uk
rugbytimebank.co.uk
sharewear.madeopen.co.uk
status.madeopen.co.uk
support.madeopen.co.uk
tbodemo.madeopen.co.uk
tbuk.madeopen.co.uk
testlive.madeopen.co.uk
thecompound-collective.com
thegivinglab.co.uk
time4leicestershire.madeopen.co.uk
time4leicestershire.org.uk
timebank1.madeopen.co.uk
timebank2.madeopen.co.uk
timebank3.madeopen.co.uk
timebanks.madeopen.co.uk
together.madeopen.co.uk
torbaytogether.org.uk
training.madeopen.co.uk
vol.madeopen.co.uk
warwicktimebank.co.uk
wiltshiretogether.org.uk
www.candobristol.co.uk
www.careconnect.org.uk
www.connectanglesey.co.uk
www.connectanglesey.wales
www.connectmonmouthshire.org
www.connectpembrokeshire.org.uk
www.connectrct.org.uk
www.connecttorfaen.org.uk
www.cornwall-link.co.uk
www.cornwallvsf.org
www.cysylltuynysmon.cymru
www.devonconnect.org
www.hexitime.com
www.innovationcollective.co.uk
www.meltontimebank.org.uk
www.myinnovationcollective.online
www.nhstalent.co.uk
www.northwarwickshiretimebank.co.uk
www.nuneatontimebank.co.uk
www.ping-digital.co.uk
www.qkenz.com
www.rugbytimebank.co.uk
www.thecompound-collective.com
www.thegivinglab.co.uk
www.time4leicestershire.org.uk
www.warwicktimebank.co.uk

Other certificates including the domain name madeopen.co.uk

(limited to 100 certificates)
help.forummc.com
madeopen.co.uk
madeopen.co.uk
live.madeopen.co.uk
www.monmouthshire.madeopen.co.uk
aide.insideout.fr
live.madeopen.co.uk
www.madeopen.co.uk
support.os-consultech.fr
support.xeranet.de
help.k2ms.com
*.madeopen.co.uk
help.infiniumcap.com
madeopen.co.uk
support.stodeo.com
launceston.madeopen.co.uk
live.madeopen.co.uk
madeopen.co.uk
weare.madeopen.co.uk
torbaytogether.org.uk
*.madeopen.co.uk
live.madeopen.co.uk
mitchellsbutlers.support.ignitehospitality.com
*.madeopen.co.uk
www.monmouthshire.madeopen.co.uk
launceston.madeopen.co.uk
torbaytogether.org.uk
live.madeopen.co.uk
weare.madeopen.co.uk
computacenter.becrypt.com
live.madeopen.co.uk
support.stodeo.com
launceston.madeopen.co.uk
support.stodeo.com
live.madeopen.co.uk
torbaytogether.org.uk
support.aliceandbob.company
support.stodeo.com
timebanksorg.madeopen.co.uk
support.stodeo.com
*.madeopen.co.uk
support.jp-networks.de
torbaytogether.org.uk
new.torbaytogether.org.uk
support.aliceandbob.company
weare.madeopen.co.uk
bigdev.madeopen.co.uk
monmouthshire.madeopen.co.uk
weare.madeopen.co.uk
live.madeopen.co.uk
weare.madeopen.co.uk
support.aliceandbob.company
launceston.madeopen.co.uk
weare.madeopen.co.uk
helpdesk.cloud4you.pt
www.timebanksorg.madeopen.co.uk
madeopen.co.uk
new.madeopen.co.uk
torbaytogether.org.uk
weare.madeopen.co.uk
madeopen.co.uk
live.madeopen.co.uk
torbaytogether.org.uk
support.stodeo.com
live.madeopen.co.uk
launceston.madeopen.co.uk
support.stodeo.com
support.jp-networks.de
new.madeopen.co.uk
live.madeopen.co.uk
live.madeopen.co.uk
live.madeopen.co.uk
torbaytogether.org.uk
www.community.madeopen.co.uk
live.madeopen.co.uk
new.madeopen.co.uk
torbaytogether.org.uk
support.madeopen.co.uk
support.stodeo.com
support.jp-networks.de
launceston.madeopen.co.uk
madeopen.co.uk
live.madeopen.co.uk
launceston.madeopen.co.uk
desk-tst.smartglobal.com
bigdev.madeopen.co.uk
support.gamaxlabsol.com
madeopen.co.uk
madeopen.co.uk
bigdev.madeopen.co.uk
bigdev.madeopen.co.uk
timebanksorg.madeopen.co.uk
bigdev.madeopen.co.uk
live.madeopen.co.uk
launceston.madeopen.co.uk
new.torbaytogether.org.uk
madeopen.co.uk
support.stodeo.com
helpdesk.thehelpdesk247.com
bigdev.madeopen.co.uk

Certificate

The complete raw certificate details for live.madeopen.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE9l3fyysIVmohqxYd9wSyOcczMnBr
BszGRxkZrn1QOrhQZNSBKjChzVTUNrbH60XTCIZXMX1zqpObYKJ8VqmXzw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393724165473096093485997002123281771088046
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-03 22:44:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-02 22:44:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'live.madeopen.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004f65ddfcb2b08566a21ab161df704b239c73332706b06ccc6471919ae7d503ab85064d4812a30a1cd54d436b6c7eb45d3088657317d73aa939b60a27c56a997cf
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8ec4cc9232bdceac6e5dc0c45e5211a59c19d68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atherstone-and-mancetter.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candobristol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.budleaders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.kaingaora.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.ourplymouth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectanglesey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectanglesey.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectcarmarthenshire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectceredigion.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectmonmouthshire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectpembrokeshire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectrct.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connecttorfaen.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwall-link.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwallvsf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cw4.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cysylltuynysmon.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demonstration.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devonconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givinglabs.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hexitime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovationcollective.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaingaora.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'launcestontogether.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medrwnmon.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melton.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meltontimebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinnovationcollective.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhstalent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwarwickshiretimebank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuneatontimebank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ping-digital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qkenz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restricted.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbytimebank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharewear.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbodemo.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbuk.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testlive.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecompound-collective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegivinglab.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time4leicestershire.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time4leicestershire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebank1.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebank2.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebank3.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timebanks.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'together.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torbaytogether.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vol.madeopen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warwicktimebank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiltshiretogether.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.candobristol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectanglesey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectanglesey.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectmonmouthshire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectpembrokeshire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectrct.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connecttorfaen.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwall-link.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwallvsf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cysylltuynysmon.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devonconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hexitime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovationcollective.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meltontimebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myinnovationcollective.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhstalent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northwarwickshiretimebank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nuneatontimebank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ping-digital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qkenz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbytimebank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecompound-collective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegivinglab.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.time4leicestershire.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warwicktimebank.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187498265020000040300483046022100c8f4b30d9ed3ea6a4bdfaf40edede7eb3e4715a5cae26a83aed7f1c9e934c1370221008ec1bf3dbac29f09a03e0376e4f89cf32a4a67135eaed277a1ebe3494d229961007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018749826540000004030046304402204d9a1a870d2a6198af139f9ba3930ae698a53e7e1f71cac860565795bd6b30f5022031922a60fd47908ccb4405418bc3dc3072e22605bf76b2c6b1bbc0a378f9a245
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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