ask.cardiff.ac.uk

Issued by TERENA SSL CA 2

About this certificate

This digital certificate with serial number 33:e7:c0:ab:bf:8d:03:fe:7c:c7:3a:f0:5f:9f:a9:7e was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ask.cardiff.ac.uk,OU=Domain Control Validated

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 33:e7:c0:ab:bf:8d:03:fe:7c:c7:3a:f0:5f:9f:a9:7e
Serial Number (int): 68993956189294060038214065250977687934
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 8a:47:43:06:3e:83:e9:31:08:dc:d9:d8:91:bf:51:52:0e:3f:db:ef
AuthorityKeyId: 5b:d0:8a:1c:9a:32:5b:e0:b5:dd:96:54:1b:e1:86:28:b0:fd:b6:bd

Fingerprint (sha1): e7:2c:5f:df:e6:c8:61:3c:cb:63:69:de:54:9c:ea:45:88:fe:80:2f
Fingerprint (sha256): 01:77:70:a9:21:d8:6c:47:c5:d6:0a:6b:36:2b:6b:bc:1e:41:87:a9:9b:39:c6:64:7a:6c:05:6a:9d:54:71:5f

Issuing Certificate URL: http://crt.usertrust.com/TERENASSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TERENASSLCA2.crl

Check the revocation status for certificate ask.cardiff.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ask.cardiff.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ask.cardiff.ac.uk

Other certificates including the domain name cardiff.ac.uk

(limited to 100 certificates)
medicinesdiscoverydata.cardiff.ac.uk
private.zacharyhill.dev
data.cardiff.ac.uk
ask.cardiff.ac.uk
bidr.cardiff.ac.uk
beta-status.astronomer.io
www.studygroup.com
api.vonagestatus.com
beta-status.astronomer.io
private.zacharyhill.dev
exampapers.cf.ac.uk
api.vonagestatus.com
private.zacharyhill.dev
cwaf.status.radwarecloud.com
beta-status.astronomer.io
roombooking.cardiff.ac.uk
private.zacharyhill.dev
status-pre.cardiff.ac.uk
www.studygroup.com
private.zacharyhill.dev
private.zacharyhill.dev
campionalumni.org
private.zacharyhill.dev
sharelatex.cs.cf.ac.uk
bidev.cardiff.ac.uk
api.vonagestatus.com
mappedsites.cardiff.ac.uk
muscat.astro.cf.ac.uk
campionalumni.org
remotesupport.cardiff.ac.uk
*.data.cardiff.ac.uk
learningcentral.cardiff.ac.uk
status.cardiff.ac.uk
campionalumni.org
www.studygroup.com
polls.cardiff.ac.uk
api.vonagestatus.com
fusion-dev.cardiff.ac.uk
community.mancosa.co.za
campionalumni.org
home.cf.ac.uk
private.zacharyhill.dev
lawpl.cardiff.ac.uk
private.zacharyhill.dev
campaigns.cardiff.ac.uk
connected.cardiff.ac.uk
status-pre.cardiff.ac.uk
api.vonagestatus.com
password-sso.cardiff.ac.uk
www.studygroup.com
www.cardiff.ac.uk
private.zacharyhill.dev
beta-status.astronomer.io
gems.cardiff.ac.uk
git.cardiff.ac.uk
*.data.cardiff.ac.uk
beta-status.astronomer.io
private.zacharyhill.dev
mssgweb02.id.add.cardiff.ac.uk
private.zacharyhill.dev
private.zacharyhill.dev
e2sapi.cardiff.ac.uk
campionalumni.org
private.zacharyhill.dev
mydispense.cardiff.ac.uk
module-evaluation.cardiff.ac.uk
www.studygroup.com
cwaf.status.radwarecloud.com
undergraduate-enews.cardiff.ac.uk
private.zacharyhill.dev
wwwstaging.cardiff.ac.uk
password.cardiff.ac.uk
extranet.cardiff.ac.uk
www.studygroup.com
api.vonagestatus.com
research.cardiff.ac.uk
vault.cardiff.ac.uk
intranet.cardiff.ac.uk
beta-status.astronomer.io
crmapi.cardiff.ac.uk
campaigns.cardiff.ac.uk
www.residences.cardiff.ac.uk
private.zacharyhill.dev
community.mancosa.co.za
gitlab.cs.cf.ac.uk
mmp.cardiff.ac.uk
xerte.cardiff.ac.uk
private.zacharyhill.dev
simstestlearn.cf.ac.uk
rssdp.cardiff.ac.uk
inside.biosi.cf.ac.uk
sitescardiff.cf.ac.uk
adfs.cardiff.ac.uk
www.studygroup.com
private.zacharyhill.dev
hmlupload.cardiff.ac.uk
helix-prod.cardiff.ac.uk
wikis.cf.ac.uk
challonershighnetwork.com
campionalumni.org

Certificate

The complete raw certificate details for ask.cardiff.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEnDCCA4SgAwIBAgIQM+fAq7+NA/58xzrwX5+pfjANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg
Q0EgMjAeFw0xNDEwMTcwMDAwMDBaFw0xNzEwMTYyMzU5NTlaMD8xITAfBgNVBAsT
GERvbWFpbiBDb250cm9sIFZhbGlkYXRlZDEaMBgGA1UEAxMRYXNrLmNhcmRpZmYu
YWMudWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgJxvNF+yBMvhe
7a4zvRSpeozyWaedQubL/Fd/7moD2ynyUiQT7odKdorf+aCrVGDvAaIT4k5T5tSf
X6AWmpov2zARKFbv6n4ZTRdY2FONmENpW+SASXmzQ2pm/fpRUk6orK6huGzD+zZV
B5atcMWgAT1RL0poMIRfEDcOXh7ruSmGlPR5ioPRpWO9usXvpcnaxINYlJUQBh9k
dVTKg/yN/UC/0yuWAPRVeKv85+YyZvg8rmeYtaUJAOUiblAwHQjDc+rwun2EI4FC
8Ogw377UrgnMJDTOiTNNDhcdKbTf6cJ53is93e8e/nqwUpRod8wXaVGu0ZoN/swn
RPwBPhqfAgMBAAGjggFtMIIBaTAfBgNVHSMEGDAWgBRb0IocmjJb4LXdllQb4YYo
sP22vTAdBgNVHQ4EFgQUikdDBj6D6TEI3NnYkb9RUg4/2+8wDgYDVR0PAQH/BAQD
AgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MCIGA1UdIAQbMBkwDQYLKwYBBAGyMQECAh0wCAYGZ4EMAQIBMDoGA1UdHwQzMDEw
L6AtoCuGKWh0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9URVJFTkFTU0xDQTIuY3Js
MGwGCCsGAQUFBwEBBGAwXjA1BggrBgEFBQcwAoYpaHR0cDovL2NydC51c2VydHJ1
c3QuY29tL1RFUkVOQVNTTENBMi5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3Nw
LnVzZXJ0cnVzdC5jb20wHAYDVR0RBBUwE4IRYXNrLmNhcmRpZmYuYWMudWswDQYJ
KoZIhvcNAQELBQADggEBAKulVg8dQ17Q/4K/jUTKJaFlV1aTNegkLuoT3YzRVIJG
lI8K4uf+f8jEP5rWBtH448JrV9c6viaH+Wf5pNrKhWRIdVn5V3QLmxbJv46uJWpb
aKKmUGuq6QW+LK1RBdDui2UPG+Go77A0KzCQhCtETpe68P0aNiPqpXeMNAFS4BBm
LiL6KP2SE6O4hU8wTBhgSKVH1tqEKYIa/JdgD0huhKmR9htsf1cpAZgWX2BwYLO7
CHQERI35kHazORVBbv4umJz+hjxO8qjWUpcpuWzd0pfXyNtiEvw5sgdjHymtImUf
eOGqdq92nc9JLKY6ipKUzxRW0A20p0gYgm9h2ngZgfQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCcbzRfsgTL4Xu2uM70U
qXqM8lmnnULmy/xXf+5qA9sp8lIkE+6HSnaK3/mgq1Rg7wGiE+JOU+bUn1+gFpqa
L9swEShW7+p+GU0XWNhTjZhDaVvkgEl5s0NqZv36UVJOqKyuobhsw/s2VQeWrXDF
oAE9US9KaDCEXxA3Dl4e67kphpT0eYqD0aVjvbrF76XJ2sSDWJSVEAYfZHVUyoP8
jf1Av9MrlgD0VXir/OfmMmb4PK5nmLWlCQDlIm5QMB0Iw3Pq8Lp9hCOBQvDoMN++
1K4JzCQ0zokzTQ4XHSm03+nCed4rPd3vHv56sFKUaHfMF2lRrtGaDf7MJ0T8AT4a
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 68993956189294060038214065250977687934
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ask.cardiff.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20217413963123548556043012295064203448238347556970474188001576015427375337736556906535221118362446400622257379437055315038021505507466059222818656703195807952580060999218632044878082183480810862218101355941251265284997051567866371287796248200180522452727397780416685040609219717072055346371511705987444224068849309409311510531142055129031063460645761198377326440942029522608742498078150171605445605951979301525282177648643711647067470509347115631913297961255365174779602468341355890425171927209044711983834160368495873378518983441884011268421681711330046440828710486760928739036893792688812959717739553798191044237983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5bd08a1c9a325be0b5dd96541be18628b0fdb6bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a4743063e83e93108dcd9d891bf51520e3fdbef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TERENASSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TERENASSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.cardiff.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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