webserver.srcf.net
Issued by R3
About this certificate
This digital certificate with serial number 04:f2:a8:c1:f1:d9:ec:7d:9e:b5:27:76:dc:64:16:92:68:99 was issued on by Let's Encrypt.
With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=webserver.srcf.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:f2:a8:c1:f1:d9:ec:7d:9e:b5:27:76:dc:64:16:92:68:99Serial Number (int): 431021793843820073906181230347772214012057
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 5e:40:dd:5d:c1:5c:09:a4:0b:94:12:89:5f:93:6e:47:c3:b9:d6:60
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 63:98:58:55:5c:88:16:ae:3b:a2:a0:0a:25:1a:4e:0d:32:c3:7a:73
Fingerprint (sha256): 00:67:82:2d:d0:3f:c0:f5:52:e3:c0:4a:02:83:72:89:51:cd:a9:c8:b2:00:5f:67:dd:fa:2d:30:f2:9c:2f:4c
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate webserver.srcf.net
29
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for webserver.srcf.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
agarri.ga
beta.solidaritee.org.uk
ci.dev.cuer.co.uk
crschneider.com
cuams.soc.ucam.org
cumc.org.uk
cuoc.org.uk
judo.soc.ucam.org
mail.solidaritee.org.uk
pembrokemayball.co.uk
rhs.trumpton.town
roomsview.magd.cam.ac.uk
sjcjcr.com
springball.com
srcf.uk
static.magdalenemayball.com
test.sjcjcr.com
ticketing.pembrokemayball.co.uk
webserver.srcf.net
www.crschneider.com
www.cuams.soc.ucam.org
www.cumc.org.uk
www.cuoc.org.uk
www.judo.soc.ucam.org
www.lt0.uk
www.pembrokemayball.co.uk
www.sjcjcr.com
www.springball.com
www.srcf.uk
beta.solidaritee.org.uk
ci.dev.cuer.co.uk
crschneider.com
cuams.soc.ucam.org
cumc.org.uk
cuoc.org.uk
judo.soc.ucam.org
mail.solidaritee.org.uk
pembrokemayball.co.uk
rhs.trumpton.town
roomsview.magd.cam.ac.uk
sjcjcr.com
springball.com
srcf.uk
static.magdalenemayball.com
test.sjcjcr.com
ticketing.pembrokemayball.co.uk
webserver.srcf.net
www.crschneider.com
www.cuams.soc.ucam.org
www.cumc.org.uk
www.cuoc.org.uk
www.judo.soc.ucam.org
www.lt0.uk
www.pembrokemayball.co.uk
www.sjcjcr.com
www.springball.com
www.srcf.uk
Other certificates including the domain name srcf.net
(limited to 100 certificates)
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
winnie.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
status.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
status.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webmail.pip.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
manatee-gw.malc.org.uk
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
seismograph.srcf.net
webserver.srcf.net
webmail.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
peterhousebc.org
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
cuastronomy.co.uk
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
winnie.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
status.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
status.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webmail.pip.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
manatee-gw.malc.org.uk
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
seismograph.srcf.net
webserver.srcf.net
webmail.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
peterhousebc.org
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
cuastronomy.co.uk
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
Certificate
The complete raw certificate details for webserver.srcf.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIEDCCBvigAwIBAgISBPKowfHZ7H2etSd23GQWkmiZMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjEwMTM2MTlaFw0yNDA3MjAwMTM2MThaMB0xGzAZBgNVBAMT EndlYnNlcnZlci5zcmNmLm5ldDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC ggIBAL/1/CjhABDIHWODkLJsYYuzxilEIhZuOdbZz9xI67/U/OYu+1OzT6rEFxrW vXZwXTntxK7Am7T8YC6Gpbx5JWG65u6dsTNBA1Ld6BV7VzAxYE/PJkQBF4qrBdht JBH29M0Otpbo8MGM+coF/ps/P4kuJftOOqByXjQVStoINK/JMXrqYxtjaU/1nArB TxTQwPQMvhQacI7W7CjSFcQTC1ILTQIGT0GK+FH+bq8IwYf6riyVHRd0VBX0Vb8Q zOTK6n7SSPkHpZNISmx6A19c5ctdT6eNyUFt/3fv5Bkf5JPWUKTtTPKleKJZCS1O Ju/DvpFxk6GqRpjUrDI5mYNjTSCJ8/Fvj5ovA5SKuRCf6gJVIEF+P+Hx8nxuEy8c 8dxhK4yWnxK+iSryOdlfmLMzlFyjK4sdS8LUCHlzCGIPdFpUnmY6QNusW0jXqM51 JxHZd4il5ur+z9rzGPCjhnofCLz91GtvBD7huTn9FaB3nZJ5WG4fHIUuaHtF+Lsw x/IJqVK8BU2h4F3x5mv1k+r7i6SaPb3KrZKakJz70t2RxBVYnZa+5Dg8kLwMoiMb 7aEYTw+88tyhLU1IOnjuYDneg+z+Xj1O/6ZLANdO6LGQFXx/0vW5/VvQAGg4WW4E U9BMuwwQJMHGbBi/N83pUkWXnI4uIPBPMrH7Drt7MwqUrxBPAgMBAAGjggQzMIIE LzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFF5A3V3BXAmkC5QSiV+TbkfDudZgMB8G A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo dHRwOi8vcjMuaS5sZW5jci5vcmcvMIICOQYDVR0RBIICMDCCAiyCCWFnYXJyaS5n YYIXYmV0YS5zb2xpZGFyaXRlZS5vcmcudWuCEWNpLmRldi5jdWVyLmNvLnVrgg9j cnNjaG5laWRlci5jb22CEmN1YW1zLnNvYy51Y2FtLm9yZ4ILY3VtYy5vcmcudWuC C2N1b2Mub3JnLnVrghFqdWRvLnNvYy51Y2FtLm9yZ4IXbWFpbC5zb2xpZGFyaXRl ZS5vcmcudWuCFXBlbWJyb2tlbWF5YmFsbC5jby51a4IRcmhzLnRydW1wdG9uLnRv d26CGHJvb21zdmlldy5tYWdkLmNhbS5hYy51a4IKc2pjamNyLmNvbYIOc3ByaW5n YmFsbC5jb22CB3NyY2YudWuCG3N0YXRpYy5tYWdkYWxlbmVtYXliYWxsLmNvbYIP dGVzdC5zamNqY3IuY29tgh90aWNrZXRpbmcucGVtYnJva2VtYXliYWxsLmNvLnVr ghJ3ZWJzZXJ2ZXIuc3JjZi5uZXSCE3d3dy5jcnNjaG5laWRlci5jb22CFnd3dy5j dWFtcy5zb2MudWNhbS5vcmeCD3d3dy5jdW1jLm9yZy51a4IPd3d3LmN1b2Mub3Jn LnVrghV3d3cuanVkby5zb2MudWNhbS5vcmeCCnd3dy5sdDAudWuCGXd3dy5wZW1i cm9rZW1heWJhbGwuY28udWuCDnd3dy5zamNqY3IuY29tghJ3d3cuc3ByaW5nYmFs bC5jb22CC3d3dy5zcmNmLnVrMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYB BAHWeQIEAgSB9gSB8wDxAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEf tZsAAAGO/oL3dwAABAMASDBGAiEA61L6PyW6f/DYhEvB6LcGt9Z6OYEBHdSNn7d6 mbeMB2wCIQCePatpuJlp/ogjfQYQQMbAkGZIKTgyLZub3IPvLSCvbAB2AN/hVuuq Ba+1nA+GcY2owDJOrlbZbqf1pWoB0cE7vlJcAAABjv6C+DUAAAQDAEcwRQIgAf6A mI+ICA8KTIskC+xH7DAIg2ZS9bS/aFl4PuxBUvICIQDLwrFhDGqCx4NgV8YZDrkT akd5a+WzM9xdC4Bl1BW+PDANBgkqhkiG9w0BAQsFAAOCAQEAo1mb7FaHprHStiwB s1zpa+cf52MmgzxpbZzW+4T4fOn4498aH6PAX5WUNDks46F0PzuF5eUfwqYQTCY+ Cs6z73lBHxkss8pYql5h0PGRLlrwCniKHzHZ5JlG4+7RywvdaDG49DbQ93f0QU+R o9CvcTgts9H2rIWj9RSrq3fcjiWwY/OX1wEUEqXKBcn9rHrqbdn8ihdC6kKiwuZM uo8gGZYgKYYorolOSRNjn403zSJPMX6iXT5rzCY7ezg7cjs60Yovzfjk4fPjnaip LCXaP+JYtiuOWsNb0w5YtNyaAyb/ae6uO/QLDl0GxKr1jt5VeSyizjaiVxRXuvFB 7ZlXuQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv/X8KOEAEMgdY4OQsmxh i7PGKUQiFm451tnP3Ejrv9T85i77U7NPqsQXGta9dnBdOe3ErsCbtPxgLoalvHkl Ybrm7p2xM0EDUt3oFXtXMDFgT88mRAEXiqsF2G0kEfb0zQ62lujwwYz5ygX+mz8/ iS4l+046oHJeNBVK2gg0r8kxeupjG2NpT/WcCsFPFNDA9Ay+FBpwjtbsKNIVxBML UgtNAgZPQYr4Uf5urwjBh/quLJUdF3RUFfRVvxDM5MrqftJI+Qelk0hKbHoDX1zl y11Pp43JQW3/d+/kGR/kk9ZQpO1M8qV4olkJLU4m78O+kXGToapGmNSsMjmZg2NN IInz8W+Pmi8DlIq5EJ/qAlUgQX4/4fHyfG4TLxzx3GErjJafEr6JKvI52V+YszOU XKMrix1LwtQIeXMIYg90WlSeZjpA26xbSNeoznUnEdl3iKXm6v7P2vMY8KOGeh8I vP3Ua28EPuG5Of0VoHedknlYbh8chS5oe0X4uzDH8gmpUrwFTaHgXfHma/WT6vuL pJo9vcqtkpqQnPvS3ZHEFVidlr7kODyQvAyiIxvtoRhPD7zy3KEtTUg6eO5gOd6D 7P5ePU7/pksA107osZAVfH/S9bn9W9AAaDhZbgRT0Ey7DBAkwcZsGL83zelSRZec ji4g8E8ysfsOu3szCpSvEE8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 431021793843820073906181230347772214012057 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-21 01:36:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-20 01:36:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webserver.srcf.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783132060902093755123139303162375701661745353788959212542833193396350956672303611834950257166756706305715592864342946503131929003366655541151976461161269257675426067442326047271414954739440173379302239633701677738451854217003350682190700017792858637268433152810949794373669027548898117467651509464717626410792804323680398891886803187123339491835063971082353526192213351663502281623377020464788357172157892961608259749136932125702953719383629007805851289704859743851258655633782240834334007884132559876544186744275582839164751078602709872475302504154082087257792863951181797813903790165856700730027420418393057334922077087029963040439807673013015537729780718033885687734218938124056376567949157924366219111543385478652521613484747119587390250622304524435679115752086590303968000258720058153918915285147453257251990135484472200035259126894776678581339822263853340684552461773583458469415468654410808168004203650123237364942079868341831077251647611363921338368847418578547282091077907273643996577324188274322335510657158613464503686367616861061779264203920959667353707920202582915752106872449083418960692455592782194089497883903459521424539871165869830202385504910420217283447224215982458111605199355913745184844944974701555054875185231 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5e40dd5dc15c09a40b9412895f936e47c3b9d660 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (560 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agarri.ga' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.solidaritee.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.dev.cuer.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crschneider.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuams.soc.ucam.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumc.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuoc.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'judo.soc.ucam.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.solidaritee.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pembrokemayball.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhs.trumpton.town' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roomsview.magd.cam.ac.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcjcr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springball.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srcf.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.magdalenemayball.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sjcjcr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.pembrokemayball.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webserver.srcf.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crschneider.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuams.soc.ucam.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumc.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuoc.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.judo.soc.ucam.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lt0.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pembrokemayball.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcjcr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.springball.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srcf.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018efe82f7770000040300483046022100eb52fa3f25ba7ff0d8844bc1e8b706b7d67a3981011dd48d9fb77a99b78c076c0221009e3dab69b89969fe88237d061040c6c09066482938322d9b9bdc83ef2d20af6c007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018efe82f8350000040300473045022001fe80988f88080f0a4c8b240bec47ec3008836652f5b4bf6859783eec4152f2022100cbc2b1610c6a82c7836057c6190eb9136a47796be5b333dc5d0b8065d415be3c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a3599bec5687a6b1d2b62c01b35ce96be71fe76326833c696d9cd6fb84f87ce9f8e3df1a1fa3c05f959434392ce3a1743f3b85e5e51fc2a6104c263e0aceb3ef79411f192cb3ca58aa5e61d0f1912e5af00a788a1f31d9e49946e3eed1cb0bdd6831b8f436d0f777f4414f91a3d0af71382db3d1f6ac85a3f514abab77dc8e25b063f397d7011412a5ca05c9fdac7aea6dd9fc8a1742ea42a2c2e64cba8f20199620298628ae894e4913639f8d37cd224f317ea25d3e6bcc263b7b383b723b3ad18a2fcdf8e4e1f3e39da8a92c25da3fe258b62b8e5ac35bd30e58b4dc9a0326ff69eeae3bf40b0e5d06c4aaf58ede55792ca2ce36a2571457baf141ed9957b9