slevencrossfit.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f3:76:a1:e2:c1:ef:d8:d8:f0:b6:b8:33:f5:92:84:41:93 was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=slevencrossfit.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:76:a1:e2:c1:ef:d8:d8:f0:b6:b8:33:f5:92:84:41:93
Serial Number (int): 344183162419555465602048987163673573474707
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f8:d6:06:29:a6:87:39:ab:2d:80:ff:2b:57:76:92:60:50:8e:87:fb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c4:e9:7e:97:07:81:d1:e3:ec:6d:a9:ad:b7:a2:a5:2e:b1:a5:9b:4c
Fingerprint (sha256): ee:97:c7:34:56:9f:96:ea:96:44:cb:a0:4d:52:15:f0:3b:42:76:ff:14:10:18:70:97:32:6e:c6:ed:4b:db:43

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate slevencrossfit.com

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for slevencrossfit.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abyme.net
admin.comeragroup.co.uk
adogs-life.co.uk
allcoverservices.co.uk
antony.cornwall.sch.uk
api.velit-ent.com
app.towerhallsolutions.com
apps.comeragroup.co.uk
avizandum.com
beta.thehorseagilityclub.com
beyondhousing.co.uk
blackcatpcs.co.uk
bristoldoors.co.uk
clientmaps.nursing-24.com
creative-wolf.com
doordre.nl
dpc.upthereeverywhere.com
efibaarts.org.uk
fairwayconsulting.net
fp.lampdesign.co.uk
gglandscapes.co.uk
hexahomes.co.uk
horntrades2.klikkit.co.uk
i-jump.co.uk
images.portsmouthcitycoaches.co.uk
jaguarxkenginespecialist.co.uk
kcmap.comeramovementscience.co.uk
klikkit.co.uk
lclmh.co.uk
mail.projektproperty.co.uk
marianafeijo.com
michaelcoletta.co.uk
mindbasedtherapy.com
moodle.comeragroup.co.uk
persqft.co.uk
remote.packingpartner.uk
slevencrossfit.com
st-martins.cornwall.sch.uk
st-nicolas.cornwall.sch.uk
static.klikkit.co.uk
test.comeragroup.co.uk
thedropbar.co.uk
thedropwinebar.co.uk
themeparktrader.com
vanguardconsultancyservices.co.uk
woking-homes.co.uk
www.abyme.net
www.adogs-life.co.uk
www.allcoverservices.co.uk
www.app.towerhallsolutions.com
www.avizandum.com
www.blackcatpcs.co.uk
www.bristoldoors.co.uk
www.creative-wolf.com
www.doordre.nl
www.efibaarts.org.uk
www.fairwayconsulting.net
www.gglandscapes.co.uk
www.hexahomes.co.uk
www.i-jump.co.uk
www.images.portsmouthcitycoaches.co.uk
www.jaguarxkenginespecialist.co.uk
www.klikkit.co.uk
www.lclmh.co.uk
www.marianafeijo.com
www.michaelcoletta.co.uk
www.mindbasedtherapy.com
www.persqft.co.uk
www.slevencrossfit.com
www.thedropbar.co.uk
www.thedropwinebar.co.uk
www.thefootcareservice.co.uk
www.themeparktrader.com
www.vanguardconsultancyservices.co.uk
www.woking-homes.co.uk

Other certificates including the domain name slevencrossfit.com

(limited to 100 certificates)
slevencrossfit.com
e255a213cc03934980ac52c6d-17139.sites.k-hosting.co.uk
crossfit.slevencrossfit.com
slevencrossfit.com
*.slevenfitness.com
e255a213cc03934980ac52c6d-17139.sites.k-hosting.co.uk
cpcontacts.slevenfitness.com
slevencrossfit.com
slevencrossfit.com
www.slevencrossfit.com
cpcontacts.slevenfitness.co.uk
e255a213cc03934980ac52c6d-17139.sites.k-hosting.co.uk
vanguardconsultancyservices.co.uk
e255a213cc03934980ac52c6d-17139.sites.k-hosting.co.uk
crossfit.slevencrossfit.com
slevencrossfit.com
slevencrossfit.com
*.com.e255a213cc03934980ac52c6d-17139.sites.k-hosting.co.uk
slevencrossfit.com

Certificate

The complete raw certificate details for slevencrossfit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq9g+xj0U5suBaUstRs6
o7T6Dt2l4HNH9xnkcPEMI7ctenwEbFzgZ+x7uI63uUJfxas48pnVN0QZoRPon8lz
eSmyJD5TSWcVuRr+fhsvF97cxdwdSjJrDUgUDUKmHQtPEUci1erC/4WWu8b+kwu8
2o8ObnXrzDmvSIL8Jm83RXIdcgVsaURwoc4el1atlGaDIE/IEMHj8h8BQVxbuGJD
2vzXHB9eENIenvPK2aXmeUJOAY8mLokLEfbaEs3JVgkppRp5aMRcbiI+X0EKTBo7
0tIxfrZ5OjdM90Cn0xYzDXFt/VoZTxoVldzGyh7OMrNMb+sOIl+LBlNMZw3m148W
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344183162419555465602048987163673573474707
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 08:21:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 08:21:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'slevencrossfit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24071760468583753838690384077680515651484862921849039097124127564680193487024739893596578329815762210325548336768688698011330876024961667015850946601852981395896564628519465569934204038949547692962555890314116172613568141174062831406169827042138349492394160672427918475420774465038235643202880057217686734909784652430279572352278926643866449841070035340893064370037308619712241534331978174447493407043535387696056874977594664883460327954314206676602786108314494345791234844462564881647556978416703277832184279152291779270112844912841916983073904899745916215370460700378752280981925755350522301066181588364293819012789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8d60629a68739ab2d80ff2b57769260508e87fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1742 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abyme.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.comeragroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adogs-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allcoverservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antony.cornwall.sch.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.velit-ent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.towerhallsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.comeragroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avizandum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.thehorseagilityclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondhousing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackcatpcs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bristoldoors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientmaps.nursing-24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creative-wolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doordre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpc.upthereeverywhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efibaarts.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairwayconsulting.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp.lampdesign.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gglandscapes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hexahomes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horntrades2.klikkit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-jump.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.portsmouthcitycoaches.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaguarxkenginespecialist.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcmap.comeramovementscience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikkit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lclmh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.projektproperty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marianafeijo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelcoletta.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindbasedtherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moodle.comeragroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'persqft.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.packingpartner.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slevencrossfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-martins.cornwall.sch.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-nicolas.cornwall.sch.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.klikkit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.comeragroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedropbar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedropwinebar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themeparktrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanguardconsultancyservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woking-homes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abyme.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adogs-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allcoverservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.towerhallsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avizandum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackcatpcs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bristoldoors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creative-wolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doordre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.efibaarts.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairwayconsulting.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gglandscapes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hexahomes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i-jump.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.images.portsmouthcitycoaches.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaguarxkenginespecialist.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klikkit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lclmh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marianafeijo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michaelcoletta.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindbasedtherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.persqft.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slevencrossfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedropbar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedropwinebar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefootcareservice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themeparktrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanguardconsultancyservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woking-homes.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e3c44789d000004030046304402200846dd3c2926ac4ae3800f1cff2655762a1132c37b683b3c9fb880675c9da47602202b5fc56a2bcef63352c6a6c6d849c32b70dd31d28fa7eb4c1a68508debc94915007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e3c4478aa000004030047304502207eef642b6a7f9d3c6735fd163045c871e1759e5711f0219a5ce02acfca846c67022100fd386531e31cd7624fa427fca798245fb11fbf329eabf616f51636216686205b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000ef484454708390fe455a5b433218a11802e5b06bfe773927bbafa60143a621812ad4fb50b3438222364676b116ea9734ad3cab226bcedad8b7d2bb6776938c622fb8fe6d8c9efb49e0e3386562e5924a0c4e46a238e9687120b7739c3d4619f502fc26363079edf353b55f04be28bedbd16a8b929266b9277a8aad48b5a362318c898a38554f250d8713b1af92390b4697f0f916cd9089dcf5d5e1ec7f7257deb407fdc1713e88f76b93a238bdcba2d043be00431aa4ac018999cf13e10a00b699ece069d376461f22901d012b1a733140b0748974601213b7644a39928dd15134b9c120866eac90e94d72150e9bebf6e830f6034dbe42ff467bf5cb3f9404e