imaging-xnat.cruk.cam.ac.uk
- University of Cambridge -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number ef:4a:33:2d:36:53:b4:4e:32:ce:fb:af:4c:6d:70:3e was issued on by GEANT Vereniging.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
University of Cambridge
Organization:
University of Cambridge
State / Province:
Cambridgeshire
Country: GB
Country: GB
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate will expire on
Certificate Details
Serial Number (hex): ef:4a:33:2d:36:53:b4:4e:32:ce:fb:af:4c:6d:70:3eSerial Number (int): 318070758945096953087462699650199154750
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: f7:a9:eb:a5:47:5f:05:fb:a6:bf:48:59:a7:51:e1:7b:05:a3:93:b5
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 38:7a:7a:32:15:fb:00:d1:96:ea:a8:96:09:4b:b8:b2:06:ea:41:8b
Fingerprint (sha256): 01:7a:b4:8e:4a:5c:18:c3:c6:23:4e:b1:ca:92:71:62:55:a2:e6:be:c2:7c:b9:6d:eb:cb:48:1d:5b:98:c2:9a
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate imaging-xnat.cruk.cam.ac.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for imaging-xnat.cruk.cam.ac.uk
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
imaging-xnat.cruk.cam.ac.uk
img-dmzdcm002.cri.camres.org
img-dmzdcm002.cri.camres.org
Other certificates including the domain name cam.ac.uk
(limited to 100 certificates)
2015.gaobase.admin.cam.ac.uk
moorhen.magd.cam.ac.uk
iccs.cam.ac.uk
eh-ups1.net.homerton.private.cam.ac.uk
appleprofiles.csx.cam.ac.uk
www.payment.wolfson.cam.ac.uk
secure-euwe1-1.tessituranetwork.com
cam.ac.uk
suport.staff.utcluj.app
helpme.agilico.co.uk
webmail.medschl.cam.ac.uk
webserver.srcf.net
admissions.emeritus.org
*.st-edmunds.private.cam.ac.uk
www.jcr.magd.cam.ac.uk
cudl-prod-dev.lib.cam.ac.uk
darknessvisible.christs.cam.ac.uk
wiggum.educ.cam.ac.uk
cmih.maths.cam.ac.uk
www.kings.cam.ac.uk
www.cl.cam.ac.uk
infolib.blog.jbs.cam.ac.uk
www.lrc.girton.cam.ac.uk
winnie.srcf.net
webmail.mrc-mbu.cam.ac.uk
willow.csi.cam.ac.uk
mrc-epid.cam.ac.uk
www.cardiovascular.cam.ac.uk
whittle3d.eng.cam.ac.uk
accreditation.lumanity.com
apps.newn.cam.ac.uk
falcon-course.csx.cam.ac.uk
itservices.phy.cam.ac.uk
alumnicredentials.kcl.ac.uk
www.amest2020.eng.cam.ac.uk
camtools.admin.cam.ac.uk
go.jbs.cam.ac.uk
svr-swm11-bluespec.cl.cam.ac.uk
webapp.prod.rh-ballots.gcp.uis.cam.ac.uk
www.cne.psychol.cam.ac.uk
admin.phone.cam.ac.uk
secure-euwe1-1.tessituranetwork.com
learnonline3.cisl.cam.ac.uk
faraday.cam.ac.uk
econ.cam.ac.uk
intranet.geog.cam.ac.uk
achievements.launchyou.com
www.rnd2016.eng.cam.ac.uk
myip-external.uis.cam.ac.uk
shop.girton.cam.ac.uk
svr-rnw24-bsdcam.cl.cam.ac.uk
production.media.cam.ac.uk
imaging-xnat.cruk.cam.ac.uk
dada.cl.cam.ac.uk
www.eprg.group.cam.ac.uk
gradoffrt.maths.cam.ac.uk
cucmpub-a01-ms.phone.private.cam.ac.uk
www.syslog.cl.cam.ac.uk
www.eprg.group.cam.ac.uk
staging.apply.graduate.study.cam.ac.uk
live.deposit.dps.lib.cam.ac.uk
scop.mrc-lmb.cam.ac.uk
websvr-dev.newn.cam.ac.uk
pnp.arch.cam.ac.uk
heliconius.org
everify.cam.ac.uk
stage.learn.jbs.cam.ac.uk
map.cam.ac.uk
jbs.cam.ac.uk
www.eu.admin.cam.ac.uk
www.ccbi.cam.ac.uk
www-library.ch.cam.ac.uk
www.cbsb-4rdatabase.medschl.cam.ac.uk
www.cccw.cam.ac.uk
safety.eng.cam.ac.uk
www.interfaith.cam.ac.uk
helpdesk.centurionukrs.com
www.map.cam.ac.uk
achievements.launchyou.com
camtools.cam.ac.uk
inter-ace.cl.cam.ac.uk
alumni.d9.staging.drupal.uis.cam.ac.uk
*.lib.cam.ac.uk
www.seniortutors.admin.cam.ac.uk
heritage.arch.cam.ac.uk
mi.eng.cam.ac.uk
sensorid.cl.cam.ac.uk
steth.eng.cam.ac.uk
xnat01.wbic.cam.ac.uk
www.eprg.group.cam.ac.uk
web1-test.dns.cam.ac.uk
www.winton.phy.cam.ac.uk
www.digitalhumanities.cam.ac.uk
www.ch.cam.ac.uk
www.ccs.cam.ac.uk
www.laman-lab.path.cam.ac.uk
gitlab.dtg.cl.cam.ac.uk
h2-cluster.plantsci.cam.ac.uk
forms.girton.cam.ac.uk
fwmgmt.robinson.cam.ac.uk
moorhen.magd.cam.ac.uk
iccs.cam.ac.uk
eh-ups1.net.homerton.private.cam.ac.uk
appleprofiles.csx.cam.ac.uk
www.payment.wolfson.cam.ac.uk
secure-euwe1-1.tessituranetwork.com
cam.ac.uk
suport.staff.utcluj.app
helpme.agilico.co.uk
webmail.medschl.cam.ac.uk
webserver.srcf.net
admissions.emeritus.org
*.st-edmunds.private.cam.ac.uk
www.jcr.magd.cam.ac.uk
cudl-prod-dev.lib.cam.ac.uk
darknessvisible.christs.cam.ac.uk
wiggum.educ.cam.ac.uk
cmih.maths.cam.ac.uk
www.kings.cam.ac.uk
www.cl.cam.ac.uk
infolib.blog.jbs.cam.ac.uk
www.lrc.girton.cam.ac.uk
winnie.srcf.net
webmail.mrc-mbu.cam.ac.uk
willow.csi.cam.ac.uk
mrc-epid.cam.ac.uk
www.cardiovascular.cam.ac.uk
whittle3d.eng.cam.ac.uk
accreditation.lumanity.com
apps.newn.cam.ac.uk
falcon-course.csx.cam.ac.uk
itservices.phy.cam.ac.uk
alumnicredentials.kcl.ac.uk
www.amest2020.eng.cam.ac.uk
camtools.admin.cam.ac.uk
go.jbs.cam.ac.uk
svr-swm11-bluespec.cl.cam.ac.uk
webapp.prod.rh-ballots.gcp.uis.cam.ac.uk
www.cne.psychol.cam.ac.uk
admin.phone.cam.ac.uk
secure-euwe1-1.tessituranetwork.com
learnonline3.cisl.cam.ac.uk
faraday.cam.ac.uk
econ.cam.ac.uk
intranet.geog.cam.ac.uk
achievements.launchyou.com
www.rnd2016.eng.cam.ac.uk
myip-external.uis.cam.ac.uk
shop.girton.cam.ac.uk
svr-rnw24-bsdcam.cl.cam.ac.uk
production.media.cam.ac.uk
imaging-xnat.cruk.cam.ac.uk
dada.cl.cam.ac.uk
www.eprg.group.cam.ac.uk
gradoffrt.maths.cam.ac.uk
cucmpub-a01-ms.phone.private.cam.ac.uk
www.syslog.cl.cam.ac.uk
www.eprg.group.cam.ac.uk
staging.apply.graduate.study.cam.ac.uk
live.deposit.dps.lib.cam.ac.uk
scop.mrc-lmb.cam.ac.uk
websvr-dev.newn.cam.ac.uk
pnp.arch.cam.ac.uk
heliconius.org
everify.cam.ac.uk
stage.learn.jbs.cam.ac.uk
map.cam.ac.uk
jbs.cam.ac.uk
www.eu.admin.cam.ac.uk
www.ccbi.cam.ac.uk
www-library.ch.cam.ac.uk
www.cbsb-4rdatabase.medschl.cam.ac.uk
www.cccw.cam.ac.uk
safety.eng.cam.ac.uk
www.interfaith.cam.ac.uk
helpdesk.centurionukrs.com
www.map.cam.ac.uk
achievements.launchyou.com
camtools.cam.ac.uk
inter-ace.cl.cam.ac.uk
alumni.d9.staging.drupal.uis.cam.ac.uk
*.lib.cam.ac.uk
www.seniortutors.admin.cam.ac.uk
heritage.arch.cam.ac.uk
mi.eng.cam.ac.uk
sensorid.cl.cam.ac.uk
steth.eng.cam.ac.uk
xnat01.wbic.cam.ac.uk
www.eprg.group.cam.ac.uk
web1-test.dns.cam.ac.uk
www.winton.phy.cam.ac.uk
www.digitalhumanities.cam.ac.uk
www.ch.cam.ac.uk
www.ccs.cam.ac.uk
www.laman-lab.path.cam.ac.uk
gitlab.dtg.cl.cam.ac.uk
h2-cluster.plantsci.cam.ac.uk
forms.girton.cam.ac.uk
fwmgmt.robinson.cam.ac.uk
Certificate
The complete raw certificate details for imaging-xnat.cruk.cam.ac.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIizCCBnOgAwIBAgIRAO9KMy02U7ROMs77r0xtcD4wDQYJKoZIhvcNAQEMBQAw RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIzMDkwNjAwMDAwMFoXDTI0MDkwNTIz NTk1OVowbjELMAkGA1UEBhMCR0IxFzAVBgNVBAgTDkNhbWJyaWRnZXNoaXJlMSAw HgYDVQQKExdVbml2ZXJzaXR5IG9mIENhbWJyaWRnZTEkMCIGA1UEAxMbaW1hZ2lu Zy14bmF0LmNydWsuY2FtLmFjLnVrMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC CgKCAgEAzR9K7w5I9G9aBOLM48ZcGr/oyxy2Or4rZCPEPjBjbtyvB+zQqIgqmzwE qdhuK0jx+BWd3l3lOdXYClGKexEqWmzi4fZkfxnvbZT2lEJO/8e/xgCQAH3AW1ln q8RkBQqFD29yb+aDCxmBIovB4L5A72Wv4lmXBqR5O5DUnayLR02iVMhx9OJmwqsE av+w2eB8VaEjLNYZ+f0iY2341ab+CcqX6k7qIo5YiT8Ga3b4IVrVxmZuFEt0O2aV 0jXPtueZMzTLLbios4WRPGwFS6fzZFfXH1ik7zqSJkOipmvDJfFAykwn8tuIKDjE 0T2zx5XbyPQxKOOmNauCBYCcAp/vzYN4raYLMINebJTSCcWJJMfjY7c5/YuMtRcm 3lz8FU8kCygGel/TimetNAikmqeAO9WofIeItwE+T4zqWJXkqGaa+Ayzhz0Dn0uU 5MrMZNmGJnkBFbUtYU38jCKglqO8SRKAs27rLSLTTsMSkSwLPxmVF5xIcRzoFLmT Hnn7z9mu/RAMhtSmiPqJK67PvKdxJcmUzKvr+rgmMqvA+wmXQxLiVCRDeSENqDxZ wYXZMM/ODc5o2nmVnXuMt6jt95ip7pUQg7b5WDPY07J0tgN6bM7tvyY988xaYpYN +Mh1x3BmTyeb/88tgkL6QfIqmXtNnQgQ2OMfTj/wFs6t/cD/oLECAwEAAaOCA0ww ggNIMB8GA1UdIwQYMBaAFG8dNUkQbDL6WaCevIroH5W+cXoMMB0GA1UdDgQWBBT3 qeulR18F+6a/SFmnUeF7BaOTtTAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIw ADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0Bgsr BgEEAbIxAQICTzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQ UzAIBgZngQwBAgIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL0dFQU5ULmNybC5z ZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNybDB1BggrBgEFBQcBAQRpMGcwOgYI KwYBBQUHMAKGLmh0dHA6Ly9HRUFOVC5jcnQuc2VjdGlnby5jb20vR0VBTlRPVlJT QUNBNC5jcnQwKQYIKwYBBQUHMAGGHWh0dHA6Ly9HRUFOVC5vY3NwLnNlY3RpZ28u Y29tMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdQB2/4g/Crb7lVHCYcz1h7o0 tKTNuyncaEIKn+ZnTFo6dAAAAYppuCLRAAAEAwBGMEQCIDSXKg4oUSANcRGcaSG0 a6w+mrRHQGeUS4t32W962n2yAiAMAnoVuhUI7pG9tyqrsWiV47Q6vgQI1pXy0C9H jB8HdwB3ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABimm4Iy8A AAQDAEgwRgIhAOwX7THZskBMeUi97270ioUf4ztH+snNZxZOVW6DNuGEAiEA0Vm7 Olzv0JbA88o/NZ77JF/zH7ZBUCO6YiTRVB6pus8AdgDuzdBk1dsazsVct520zROi ModGfLzs3sNRSFlGcR+1mwAAAYppuCL8AAAEAwBHMEUCIQC3ddxwdZDnVEsMzkx2 m0hdKHEaFMF/HQcl4dpx5visigIgdFHez5+JSotdlhwbCuoYMd9ju7/74KCQj2nW iTt/e/EwRAYDVR0RBD0wO4IbaW1hZ2luZy14bmF0LmNydWsuY2FtLmFjLnVrghxp bWctZG16ZGNtMDAyLmNyaS5jYW1yZXMub3JnMA0GCSqGSIb3DQEBDAUAA4ICAQBB hFMPo757nNaE6FZPNzEV3B6emaMm+U1sdb6jRLsgPTYu4pA78OHToaEM/V+AV+ug FeYRSZ2FjaJxRInGJme1jWy32GXASBVvEYATbaBflK/RJ+jMQqNtqtqFdDVzdIM+ Gz5ISHyWqgfWf2DLwGA3dRdIarnb64DF6DmX/fjDy0taDAvH/7jOHNgVSQaJuY0M 7nxvKRUxsDyR1J95e8mMyidzUMQaO/ReOWTjBRf9MFyRlOym4orkeSHAzNSVO2mS UdknY022pGdV2XCjKgpKKYx0a3v5nitQmWoVu09/kzJkBYfhBQJUtUqu4EMOiXMX QfL4g2WI+iNAH32ZUx4vLqdHQUKuUB0B+Sj4NdXKOJUnZ7zda3X5bUpnWxemP/Q1 V0Q8hNhIM7Hcbs5u7OmpzRihC4VfndMsRKfKShY6Ym7oL7QxGMEouNJOnKNWwoBs EMOnZY+3XdxwTApWEXHCAdHppq58GLs/jdoHdb+gxJIP3gcrHD4XRfUjK+lAu7Xu vRiQ020tszVZmitE0thf60zoYd5e/NocnyOXAtRfhEB0lulQMopLtiuqvdCkGB04 VXsK6SW4zysz3gPt8O/Mq8u1pFxJcTFN1ExfdRrKzKcDqsb0SP+E87w4eT75q0xD 1mO1MtNoJEG7cx8NnV54MTBZ2ovqQ6AWAAWPic1OfA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzR9K7w5I9G9aBOLM48Zc Gr/oyxy2Or4rZCPEPjBjbtyvB+zQqIgqmzwEqdhuK0jx+BWd3l3lOdXYClGKexEq Wmzi4fZkfxnvbZT2lEJO/8e/xgCQAH3AW1lnq8RkBQqFD29yb+aDCxmBIovB4L5A 72Wv4lmXBqR5O5DUnayLR02iVMhx9OJmwqsEav+w2eB8VaEjLNYZ+f0iY2341ab+ CcqX6k7qIo5YiT8Ga3b4IVrVxmZuFEt0O2aV0jXPtueZMzTLLbios4WRPGwFS6fz ZFfXH1ik7zqSJkOipmvDJfFAykwn8tuIKDjE0T2zx5XbyPQxKOOmNauCBYCcAp/v zYN4raYLMINebJTSCcWJJMfjY7c5/YuMtRcm3lz8FU8kCygGel/TimetNAikmqeA O9WofIeItwE+T4zqWJXkqGaa+Ayzhz0Dn0uU5MrMZNmGJnkBFbUtYU38jCKglqO8 SRKAs27rLSLTTsMSkSwLPxmVF5xIcRzoFLmTHnn7z9mu/RAMhtSmiPqJK67PvKdx JcmUzKvr+rgmMqvA+wmXQxLiVCRDeSENqDxZwYXZMM/ODc5o2nmVnXuMt6jt95ip 7pUQg7b5WDPY07J0tgN6bM7tvyY988xaYpYN+Mh1x3BmTyeb/88tgkL6QfIqmXtN nQgQ2OMfTj/wFs6t/cD/oLECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 318070758945096953087462699650199154750 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambridgeshire' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Cambridge' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'imaging-xnat.cruk.cam.ac.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 836825718004860458463832835625224297648916164998899423451355947367951254156263110708815221050342801242937805832526694831966647990411983683467122117377610831101520080597774706019505113328668697795705083917586515564158850069600957452870247318361915501653112148630902230934056178396829555836493447407402060221588983321888848967879752065399870459586407262890525263839382795667003932298445367266035133473997539644945554855511986409567495660089614512402823624593200030667305066807532776297225514498509767638285020139541163026679972810496624246696172201023959394494737511758553443873320766283422372091003609046505312774598484959554454778897895158738888803435876427375367850423306268763042530965722290086223361763022522834620333713883056814346196702683437306756190653202059905799599085172137608281542065584800726291737466615127286194888281731166186884644388782312789492526916071999394715763237617366067234473115389890198744746102445387489091736607216011017657375145650184683611400801796428772999993752596066397907050498601836685234113139534010027538643677312116609626050440832347356049351081388329719386407722723975004636298280158700735636290841630100452618933744385918758568697456398345716422468488118605781713551838355655617313373696270513 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f7a9eba5475f05fba6bf4859a751e17b05a393b5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 016800750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018a69b822d10000040300463044022034972a0e2851200d71119c6921b46bac3e9ab4474067944b8b77d96f7ada7db202200c027a15ba1508ee91bdb72aabb16895e3b43abe0408d695f2d02f478c1f0777007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a69b8232f0000040300483046022100ec17ed31d9b2404c7948bdef6ef48a851fe33b47fac9cd67164e556e8336e184022100d159bb3a5cefd096c0f3ca3f359efb245ff31fb6415023ba6224d1541ea9bacf007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018a69b822fc0000040300473045022100b775dc707590e7544b0cce4c769b485d28711a14c17f1d0725e1da71e6f8ac8a02207451decf9f894a8b5d961c1b0aea1831df63bbbffbe0a0908f69d6893b7f7bf1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaging-xnat.cruk.cam.ac.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img-dmzdcm002.cri.camres.org' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 004184530fa3be7b9cd684e8564f373115dc1e9e99a326f94d6c75bea344bb203d362ee2903bf0e1d3a1a10cfd5f8057eba015e611499d858da2714489c62667b58d6cb7d865c048156f1180136da05f94afd127e8cc42a36daada8574357374833e1b3e48487c96aa07d67f60cbc060377517486ab9dbeb80c5e83997fdf8c3cb4b5a0c0bc7ffb8ce1cd815490689b98d0cee7c6f291531b03c91d49f797bc98cca277350c41a3bf45e3964e30517fd305c9194eca6e28ae47921c0ccd4953b699251d927634db6a46755d970a32a0a4a298c746b7bf99e2b50996a15bb4f7f9332640587e1050254b54aaee0430e89731741f2f8836588fa23401f7d99531e2f2ea7474142ae501d01f928f835d5ca38952767bcdd6b75f96d4a675b17a63ff43557443c84d84833b1dc6ece6eece9a9cd18a10b855f9dd32c44a7ca4a163a626ee82fb43118c128b8d24e9ca356c2806c10c3a7658fb75ddc704c0a561171c201d1e9a6ae7c18bb3f8dda0775bfa0c4920fde072b1c3e1745f5232be940bbb5eebd1890d36d2db335599a2b44d2d85feb4ce861de5efcda1c9f239702d45f84407496e950328a4bb62baabdd0a4181d38557b0ae925b8cf2b33de03edf0efccabcbb5a45c4971314dd44c5f751acacca703aac6f448ff84f3bc38793ef9ab4c43d663b532d3682441bb731f0d9d5e78313059da8bea43a01600058f89cd4e7c