ws2.qsys.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:9f:f1:31:ec:df:c0:cf:28:88:9a:5a:50:9a:58:1e:0e:f3 was issued on by Let's Encrypt.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ws2.qsys.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9f:f1:31:ec:df:c0:cf:28:88:9a:5a:50:9a:58:1e:0e:f3
Serial Number (int): 315762357309616406825891941201106639392499
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 59:6b:60:4d:f7:ed:02:0f:37:1f:0f:f4:8e:ef:03:93:64:d3:d1:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ab:c5:6b:3a:8e:b6:96:a3:20:41:85:bd:c8:26:45:77:4a:36:6e:6c
Fingerprint (sha256): ec:df:6b:33:3c:ac:e3:c8:9b:bb:eb:75:1e:19:2a:45:81:f6:12:3e:dd:76:76:50:f5:e3:ab:7a:25:f8:08:75

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ws2.qsys.co.uk

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ws2.qsys.co.uk

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bernhards-nurseries.co.uk
bernhardsnurseries.co.uk
bridgenursery.co.uk
bridgevps.bridgenursery.co.uk
connect.qsys.co.uk
countrywestern.org.uk
cranecounselling.co.uk
dreamtree.cloud
dreamtree.me
education-sales.co.uk
education-sales.com
fatboysound.uk
hawkinshatton.co.uk
helpdesk.thecomputerfactory.co.uk
hemaxhealthcare.co.uk
heulwentrust.co.uk
hunterlloyd.co.uk
jasminenursery.co.uk
lloydwatson.com
officehouse.biz
oliversplants.co.uk
orders.bridgenursery.co.uk
orders.dreamtree.cloud
orders.oliversplants.co.uk
orders.tandeenursery.co.uk
premiergardenplants.co.uk
qsys.co.uk
robinsonandyoung.com
tandeenursery.co.uk
thecomputerfactory.co.uk
wemremembers.org
ws2.qsys.co.uk
www.bernhards-nurseries.co.uk
www.bernhardsnurseries.co.uk
www.bridgenursery.co.uk
www.countrywestern.org.uk
www.cranecounselling.co.uk
www.dreamtree.cloud
www.dreamtree.me
www.education-sales.co.uk
www.education-sales.com
www.fatboysound.uk
www.hawkinshatton.co.uk
www.hemaxhealthcare.co.uk
www.heulwentrust.co.uk
www.hunterlloyd.co.uk
www.jasminenursery.co.uk
www.lloydwatson.com
www.officehouse.biz
www.oliversplants.co.uk
www.premiergardenplants.co.uk
www.qsys.co.uk
www.robinsonandyoung.com
www.tandeenursery.co.uk
www.thecomputerfactory.co.uk
www.wemremembers.org

Other certificates including the domain name qsys.co.uk

(limited to 100 certificates)
connect.qsys.co.uk
ws2.qsys.co.uk
connect.qsys.co.uk
connect.qsys.co.uk
connect.qsys.co.uk
connect.qsys.co.uk
qsys.co.uk
connect.qsys.co.uk
autodiscover.education-sales.com
connect.qsys.co.uk
connect.qsys.co.uk
connect.qsys.co.uk
ws2.qsys.co.uk
connect.qsys.co.uk
connect.qsys.co.uk
connect.qsys.co.uk
ws2.qsys.co.uk
autodiscover.education-sales.com
connect.qsys.co.uk
exch01.education-sales.com
autodiscover.education-sales.com
ws2.qsys.co.uk
connect.qsys.co.uk
ws2.qsys.co.uk
ws2.qsys.co.uk
connect.qsys.co.uk
ws2.qsys.co.uk

Certificate

The complete raw certificate details for ws2.qsys.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAv8jGUdYJe6hk6XHdHFNV
nqFMaX2lG8IDEYK4s7nYetqwjJFJVbGFYsL994aVoNLpEnCtWcOUxrkDuPZNDirL
Wj4JQLYDQ1A/tedfDvSDc5arVBeWM7knuJd5mlcn5toaQDDhk19Cf7/QzPajtxNQ
f3O/GCBGrfnKFxTf3XxpedBUED97XtKsh58PoLulNp2U5M4tTI8ABB3jn3Mk6Leh
UF5Enchvh85nmTXsglcOdAl34Di3QuXJ2NLhhIK8Y7F2vaesnAHt9iQbpIlFF8Fd
2DchbtDi3+F5c9drKMhncFqznN8FeRaA4nHfR99BL5Y8ST+4H0pO8p4Bsl4wDtAr
NjHhyphBfMFhrNuDh3HebGsFJA5aMmA/NrvHqZxRLpfvr6lYHSWGS6UwIT4uLAkt
L1bLRWCEOgp0hXGdd9EmPWQ1aah6gkVyl0zdiiz17PXxooeSqKB6WC6P9YPLems2
M3/yybVWWZ2g7l5gxdcE0LCcPc8TmQh7gSRsSwd/pTHxAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315762357309616406825891941201106639392499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-12 15:45:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 15:45:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ws2.qsys.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4352308907629225030757917706926443850059628186163603148276612584358057215206581412383021210095187614396531572526334451917064294474477054020515256883502460609928202757163309445411363164111273221185890560632061891085396252762918417937820084655349601693515012251406414331838989983576828873885620391541244372368238388460996606071235714263601610893594372456549964048724640149413192295458163453083126714768148372315620304981854442640195639694571124308882330622290073141972202905663307059298551757091258791629402359152691795745540090070957578501219292948412874123754537498443654129324903617006752344961734127673164187971244035915355319911236731044985168178162498026661103210122782792705937394343764006837425900205690557074617972596591907475193602143559484221600678474930442121754303324907863757522658183984120700557178069987223544070774593296947241384272367340302115074270381912725946534032670817611654885284546345848768396007911921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							596b604df7ed020f371f0ff48eef039364d3d198
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1306 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bernhards-nurseries.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bernhardsnurseries.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgenursery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgevps.bridgenursery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.qsys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countrywestern.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cranecounselling.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamtree.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamtree.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education-sales.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education-sales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatboysound.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkinshatton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.thecomputerfactory.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemaxhealthcare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heulwentrust.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hunterlloyd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jasminenursery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lloydwatson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officehouse.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oliversplants.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.bridgenursery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.dreamtree.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.oliversplants.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.tandeenursery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiergardenplants.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qsys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robinsonandyoung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tandeenursery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecomputerfactory.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wemremembers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws2.qsys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bernhards-nurseries.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bernhardsnurseries.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgenursery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countrywestern.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cranecounselling.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamtree.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamtree.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.education-sales.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.education-sales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatboysound.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkinshatton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hemaxhealthcare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heulwentrust.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hunterlloyd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jasminenursery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lloydwatson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.officehouse.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oliversplants.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premiergardenplants.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qsys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robinsonandyoung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tandeenursery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecomputerfactory.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wemremembers.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cfe908011000004030046304402200c5a5828ab56f9c27fb0abb902f853bf87cf8358dafab45495ab068c35c531e80220447f0a0ee310bcec1ce942a0d5006a0ac371544e016c7c895e5088e20e53fbac00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cfe90824000000403004830460221009e30afd96b09aef924527ff9dbc54d1d8b2f952f5b897b237ae20755c4f99179022100a7d848f902e0ed61d219c487fa0436e93e6c787c68589867227ba02be28bd18f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00992b2946e7e46344c6405460cb9263316e3c9b213317402f1105692353b4f8cae297a188c99e4185ddd8cee96d9dc531e75111898f0dcafb9cce3ec887cbb5f637d1fa0fb11db0653656a04bbc2d22d887828acb26d1582f55a50ab6f91aed24703323e350c51c6529467168268a79a90fbd0a51f79e5bf615e29e91b1bf0104d5124119dcafd99f0d86e18cc17a532597565f56f0f153518851cb06827450d695e66874dd7db8bd44eda625bd1acfcf1bc3eb7230078ff255afb3c0a95dad77a501f352c27698003f3d50d463617db09e08184a45e4a012addb408d29e67b678227300d666248c46b08194e24d18ee14d1b797b0b5731c3ff306b8d2bf5ecc5