office-nextcloud-mmsid.ouce.ox.ac.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5d:cc:9b:46:6e:75:30:b3:bb:86:39:a1:d1:48:cc:18:c8 was issued on by Let's Encrypt.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=office-nextcloud-mmsid.ouce.ox.ac.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5d:cc:9b:46:6e:75:30:b3:bb:86:39:a1:d1:48:cc:18:c8
Serial Number (int): 293255086664601251533857595067864435136712
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ae:21:4d:42:79:e7:fb:5b:71:67:a1:89:04:2c:6c:26:5b:9a:83:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 64:f6:42:e4:33:2c:cc:f1:da:ac:ce:2e:0a:08:6c:b7:9d:62:84:0c
Fingerprint (sha256): 01:61:01:f3:27:93:e9:c9:cc:84:63:19:5e:e0:ea:52:7d:4a:b1:07:6c:41:89:df:bb:17:0d:a3:ae:52:05:fe

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate office-nextcloud-mmsid.ouce.ox.ac.uk

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for office-nextcloud-mmsid.ouce.ox.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atlasofaction.ouce.ox.ac.uk
fcrn-d6.ouce.ox.ac.uk
fcrn-dev.ouce.ox.ac.uk
fcrn-foodsource.ouce.ox.ac.uk
fcrn-production.ouce.ox.ac.uk
fcrn.org.uk
foodsource.org.uk
gem.ouce.ox.ac.uk
jupyter.ouce.ox.ac.uk
nextcloud-annexe.ouce.ox.ac.uk
nextcloud-creds.ouce.ox.ac.uk
nextcloud-dev.ouce.ox.ac.uk
nextcloud-fcrn.ouce.ox.ac.uk
nextcloud-gcrf.ouce.ox.ac.uk
nextcloud-hmtf.ouce.ox.ac.uk
nextcloud-itrc.ouce.ox.ac.uk
nextcloud-mmsid.ouce.ox.ac.uk
nextcloud-mscalumni.ouce.ox.ac.uk
nextcloud-reach.ouce.ox.ac.uk
nextcloud-realvalue.ouce.ox.ac.uk
nextcloud.ouce.ox.ac.uk
nismod-int-beta.ouce.ox.ac.uk
odoo.ouce.ox.ac.uk
office-nextcloud-dev.ouce.ox.ac.uk
office-nextcloud-fcrn.ouce.ox.ac.uk
office-nextcloud-gcrf.ouce.ox.ac.uk
office-nextcloud-hmtf.ouce.ox.ac.uk
office-nextcloud-itrc.ouce.ox.ac.uk
office-nextcloud-mmsid.ouce.ox.ac.uk
office-nextcloud-reach.ouce.ox.ac.uk
office-nextcloud-realvalue.ouce.ox.ac.uk
office-nextcloud.ouce.ox.ac.uk
pgadmin.ouce.ox.ac.uk
rstudio.ouce.ox.ac.uk
rstudio32.ouce.ox.ac.uk
rstudio34.ouce.ox.ac.uk
rstudio35.ouce.ox.ac.uk
twodegreepathways.ouce.ox.ac.uk
www.fcrn.org.uk
www.foodsource.org.uk

Other certificates including the domain name ox.ac.uk

(limited to 100 certificates)
idp.iamtest.ox.ac.uk
sn.sdc.ox.ac.uk
toothless.glam.ox.ac.uk
asmeals.chch.ox.ac.uk
sbs-libprox.sbs.ox.ac.uk
grasp-bestpractice.octru.ox.ac.uk
drupal-pilot-rai.it.ox.ac.uk
seldenmap.bodleian.ox.ac.uk
bits.uas.ox.ac.uk
web.crested-test.haiku.fry-it.com
www.ict.ox.ac.uk
webcms-app-td.nsms.ox.ac.uk
community.bsg.ox.ac.uk
community.bsg.ox.ac.uk
ball.gtc.ox.ac.uk
autodiscover.nexus.ox.ac.uk
mobile.chorus.ox.ac.uk
golab.bsg.ox.ac.uk
tabul.ndorms.ox.ac.uk
print.new.ox.ac.uk
gbrowse.molbiol.ox.ac.uk
webmail.isis.ox.ac.uk
*.web.ox.ac.uk
isupplier.uas.ox.ac.uk
network.rhodeshouse.ox.ac.uk
castrovalva.it.ox.ac.uk
ssl1.aluminati.net
dpuk.fmrib.ox.ac.uk
grasp-bestpractice.octru.ox.ac.uk
ouclf.law.ox.ac.uk
www2.oxford-man.ox.ac.uk
exprodo.fmrib.ox.ac.uk
trainforpedhiv.conted.ox.ac.uk
zoo-godfray.zoo.ox.ac.uk
print.lmh.ox.ac.uk
zoo-kfoster.zoo.ox.ac.uk
openclinica2.ocdem.ox.ac.uk
e2.shared.global.fastly.net
hrisprd.uas.ox.ac.uk
zoo-oxlel.zoo.ox.ac.uk
status.museums.ox.ac.uk
minerva.maths.ox.ac.uk
lists.maths.ox.ac.uk
e2.shared.global.fastly.net
incapsula.com
www.alumniweb.ox.ac.uk
epos.merton.ox.ac.uk
dars-project-training.bsp.ox.ac.uk
ibme-linuxdev.eng.ox.ac.uk
talks-dev.oucs.ox.ac.uk
rramp-test.octru.ox.ac.uk
bits.uas.ox.ac.uk
zoo-nercdtp.zoo.ox.ac.uk
fe1.chorus.ox.ac.uk
www.ml.ox.ac.uk
mimas.sgc.ox.ac.uk
webcms-1.nsms.ox.ac.uk
admn-sql03.connect.ox.ac.uk
cposxfs01.physics.ox.ac.uk
nsmsweb44.nsms.ox.ac.uk
printing.wadham.ox.ac.uk
app-vadalog.cs.ox.ac.uk
www.conted.ox.ac.uk
rramp-test.octru.ox.ac.uk
www.occt.ox.ac.uk
mysite.nexus.ox.ac.uk
www.bodleian.ox.ac.uk
spivey.oriel.ox.ac.uk
office-nextcloud-mmsid.ouce.ox.ac.uk
dars-website-test-one.bsp.ox.ac.uk
case-sql01.connect.ox.ac.uk
ridd.octru.ox.ac.uk
gower.octru.ox.ac.uk
sjc-kx.sjc.ox.ac.uk
malmecc.eu
webmail.earth.ox.ac.uk
dse.oucs.ox.ac.uk
sansonegroup.eng.ox.ac.uk
files.new.ox.ac.uk
analytics.spc.ox.ac.uk
medievalpaternosterwheels.bodleian.ox.ac.uk
tolkien.bodleian.ox.ac.uk
munki.orchard.ox.ac.uk
www.greenlightcreative.co.uk
staging.gatewayticketing.hosting
nsmsweb44.nsms.ox.ac.uk
www.mpls.ox.ac.uk
shapestacks.robots.ox.ac.uk
incapsula.com
webmail.earth.ox.ac.uk
owa.nexus.ox.ac.uk
live2.podcasts.ox.ac.uk
portal.stats.ox.ac.uk
bcfw.balliol.ox.ac.uk
www.kellogg.ox.ac.uk
drupaldev.conted.ox.ac.uk
worc-argon.worc.ox.ac.uk
members.hmc.ox.ac.uk
muninn.pmb.ox.ac.uk
mail.physiol.ox.ac.uk

Certificate

The complete raw certificate details for office-nextcloud-mmsid.ouce.ox.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3DQSKpdTC8SWTZuCfhX
nPjKC47JZAlWlpGJlaPA69yf4iNObl+d3Jr4SDytWdpxJu7xJcJYXiYx76+VlrSk
X39xIIAX50yy0gEhY1dVh532mZTiNJ3izT0dEqgF+Neq3LxNelHvrV6+ACzARGAN
XyiSRbggD47HQ9J7y2+AzNaLRaPhJtxH/z/cT9zKzRQ6Qqetju82hpxULAAUdYaK
POW14EyNiRjkntYeH3HvyibuPdHEfocVYRBS6a/2aq4SgX05ohUn1NW0fFeHYV9H
pvsorC3qK6Bh+GRH5ix/a0mfM5wxwR0YvjzHVca+pV1N32wPQzvqR31GpVi2TBm5
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293255086664601251533857595067864435136712
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-19 07:42:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-17 07:42:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'office-nextcloud-mmsid.ouce.ox.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26186959591842946997279010479678024412227339264291296283017647202997313035159567923031665225599312335508691095129261590316256141630052497070759099007889269999502974740470440440302505002563483118040679040726486799967541583317021719449237828809497411095491711309971742655626190954426994656574245760112199856913807472712098158135965404952609408231399588038122996367870980674534984821126295894043820480801915959684406449750394128806775470991769632872124781898958323399936057689649196110533145305529751820891084043358320949479364431453427912994347405665351925648082061260676831086667519685944672213043513798314030293170621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae214d4279e7fb5b7167a189042c6c265b9a8393
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlasofaction.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcrn-d6.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcrn-dev.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcrn-foodsource.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcrn-production.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcrn.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodsource.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gem.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jupyter.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud-annexe.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud-creds.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud-dev.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud-fcrn.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud-gcrf.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud-hmtf.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud-itrc.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud-mmsid.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud-mscalumni.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud-reach.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud-realvalue.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nismod-int-beta.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odoo.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office-nextcloud-dev.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office-nextcloud-fcrn.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office-nextcloud-gcrf.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office-nextcloud-hmtf.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office-nextcloud-itrc.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office-nextcloud-mmsid.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office-nextcloud-reach.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office-nextcloud-realvalue.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office-nextcloud.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgadmin.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstudio.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstudio32.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstudio34.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstudio35.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twodegreepathways.ouce.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcrn.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodsource.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001668b7d5b6f000004030048304602210095072d2446cd670b4f5c0b838d7b48c3a20d945e209cfd0a59f808a2e509ed00022100838ffeaa51fc0eddf4188f8adfdc4ade6ef2fe3ea58d6c66dcd74e6c23322055007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001668b7d5d660000040300473045022028822b2899f90d618c826356c267f17494cdc65030353b4f9da7885a933fd7f6022100dc11c16033ad974b0e31a4577a2554d06b368d2ef30e3b56121ce52481311023
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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