imaging-xnat.cruk.cam.ac.uk

- University of Cambridge -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number ef:4a:33:2d:36:53:b4:4e:32:ce:fb:af:4c:6d:70:3e was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Cambridge

Organization: University of Cambridge
State / Province: Cambridgeshire
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): ef:4a:33:2d:36:53:b4:4e:32:ce:fb:af:4c:6d:70:3e
Serial Number (int): 318070758945096953087462699650199154750
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f7:a9:eb:a5:47:5f:05:fb:a6:bf:48:59:a7:51:e1:7b:05:a3:93:b5
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 38:7a:7a:32:15:fb:00:d1:96:ea:a8:96:09:4b:b8:b2:06:ea:41:8b
Fingerprint (sha256): 01:7a:b4:8e:4a:5c:18:c3:c6:23:4e:b1:ca:92:71:62:55:a2:e6:be:c2:7c:b9:6d:eb:cb:48:1d:5b:98:c2:9a

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate imaging-xnat.cruk.cam.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imaging-xnat.cruk.cam.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

imaging-xnat.cruk.cam.ac.uk
img-dmzdcm002.cri.camres.org

Other certificates including the domain name cam.ac.uk

(limited to 100 certificates)
2015.gaobase.admin.cam.ac.uk
moorhen.magd.cam.ac.uk
iccs.cam.ac.uk
eh-ups1.net.homerton.private.cam.ac.uk
appleprofiles.csx.cam.ac.uk
www.payment.wolfson.cam.ac.uk
secure-euwe1-1.tessituranetwork.com
cam.ac.uk
suport.staff.utcluj.app
helpme.agilico.co.uk
webmail.medschl.cam.ac.uk
webserver.srcf.net
admissions.emeritus.org
*.st-edmunds.private.cam.ac.uk
www.jcr.magd.cam.ac.uk
cudl-prod-dev.lib.cam.ac.uk
darknessvisible.christs.cam.ac.uk
wiggum.educ.cam.ac.uk
cmih.maths.cam.ac.uk
www.kings.cam.ac.uk
www.cl.cam.ac.uk
infolib.blog.jbs.cam.ac.uk
www.lrc.girton.cam.ac.uk
winnie.srcf.net
webmail.mrc-mbu.cam.ac.uk
willow.csi.cam.ac.uk
mrc-epid.cam.ac.uk
www.cardiovascular.cam.ac.uk
whittle3d.eng.cam.ac.uk
accreditation.lumanity.com
apps.newn.cam.ac.uk
falcon-course.csx.cam.ac.uk
itservices.phy.cam.ac.uk
alumnicredentials.kcl.ac.uk
www.amest2020.eng.cam.ac.uk
camtools.admin.cam.ac.uk
go.jbs.cam.ac.uk
svr-swm11-bluespec.cl.cam.ac.uk
webapp.prod.rh-ballots.gcp.uis.cam.ac.uk
www.cne.psychol.cam.ac.uk
admin.phone.cam.ac.uk
secure-euwe1-1.tessituranetwork.com
learnonline3.cisl.cam.ac.uk
faraday.cam.ac.uk
econ.cam.ac.uk
intranet.geog.cam.ac.uk
achievements.launchyou.com
www.rnd2016.eng.cam.ac.uk
myip-external.uis.cam.ac.uk
shop.girton.cam.ac.uk
svr-rnw24-bsdcam.cl.cam.ac.uk
production.media.cam.ac.uk
imaging-xnat.cruk.cam.ac.uk
dada.cl.cam.ac.uk
www.eprg.group.cam.ac.uk
gradoffrt.maths.cam.ac.uk
cucmpub-a01-ms.phone.private.cam.ac.uk
www.syslog.cl.cam.ac.uk
www.eprg.group.cam.ac.uk
staging.apply.graduate.study.cam.ac.uk
live.deposit.dps.lib.cam.ac.uk
scop.mrc-lmb.cam.ac.uk
websvr-dev.newn.cam.ac.uk
pnp.arch.cam.ac.uk
heliconius.org
everify.cam.ac.uk
stage.learn.jbs.cam.ac.uk
map.cam.ac.uk
jbs.cam.ac.uk
www.eu.admin.cam.ac.uk
www.ccbi.cam.ac.uk
www-library.ch.cam.ac.uk
www.cbsb-4rdatabase.medschl.cam.ac.uk
www.cccw.cam.ac.uk
safety.eng.cam.ac.uk
www.interfaith.cam.ac.uk
helpdesk.centurionukrs.com
www.map.cam.ac.uk
achievements.launchyou.com
camtools.cam.ac.uk
inter-ace.cl.cam.ac.uk
alumni.d9.staging.drupal.uis.cam.ac.uk
*.lib.cam.ac.uk
www.seniortutors.admin.cam.ac.uk
heritage.arch.cam.ac.uk
mi.eng.cam.ac.uk
sensorid.cl.cam.ac.uk
steth.eng.cam.ac.uk
xnat01.wbic.cam.ac.uk
www.eprg.group.cam.ac.uk
web1-test.dns.cam.ac.uk
www.winton.phy.cam.ac.uk
www.digitalhumanities.cam.ac.uk
www.ch.cam.ac.uk
www.ccs.cam.ac.uk
www.laman-lab.path.cam.ac.uk
gitlab.dtg.cl.cam.ac.uk
h2-cluster.plantsci.cam.ac.uk
forms.girton.cam.ac.uk
fwmgmt.robinson.cam.ac.uk

Certificate

The complete raw certificate details for imaging-xnat.cruk.cam.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzR9K7w5I9G9aBOLM48Zc
Gr/oyxy2Or4rZCPEPjBjbtyvB+zQqIgqmzwEqdhuK0jx+BWd3l3lOdXYClGKexEq
Wmzi4fZkfxnvbZT2lEJO/8e/xgCQAH3AW1lnq8RkBQqFD29yb+aDCxmBIovB4L5A
72Wv4lmXBqR5O5DUnayLR02iVMhx9OJmwqsEav+w2eB8VaEjLNYZ+f0iY2341ab+
CcqX6k7qIo5YiT8Ga3b4IVrVxmZuFEt0O2aV0jXPtueZMzTLLbios4WRPGwFS6fz
ZFfXH1ik7zqSJkOipmvDJfFAykwn8tuIKDjE0T2zx5XbyPQxKOOmNauCBYCcAp/v
zYN4raYLMINebJTSCcWJJMfjY7c5/YuMtRcm3lz8FU8kCygGel/TimetNAikmqeA
O9WofIeItwE+T4zqWJXkqGaa+Ayzhz0Dn0uU5MrMZNmGJnkBFbUtYU38jCKglqO8
SRKAs27rLSLTTsMSkSwLPxmVF5xIcRzoFLmTHnn7z9mu/RAMhtSmiPqJK67PvKdx
JcmUzKvr+rgmMqvA+wmXQxLiVCRDeSENqDxZwYXZMM/ODc5o2nmVnXuMt6jt95ip
7pUQg7b5WDPY07J0tgN6bM7tvyY988xaYpYN+Mh1x3BmTyeb/88tgkL6QfIqmXtN
nQgQ2OMfTj/wFs6t/cD/oLECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318070758945096953087462699650199154750
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambridgeshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Cambridge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'imaging-xnat.cruk.cam.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 836825718004860458463832835625224297648916164998899423451355947367951254156263110708815221050342801242937805832526694831966647990411983683467122117377610831101520080597774706019505113328668697795705083917586515564158850069600957452870247318361915501653112148630902230934056178396829555836493447407402060221588983321888848967879752065399870459586407262890525263839382795667003932298445367266035133473997539644945554855511986409567495660089614512402823624593200030667305066807532776297225514498509767638285020139541163026679972810496624246696172201023959394494737511758553443873320766283422372091003609046505312774598484959554454778897895158738888803435876427375367850423306268763042530965722290086223361763022522834620333713883056814346196702683437306756190653202059905799599085172137608281542065584800726291737466615127286194888281731166186884644388782312789492526916071999394715763237617366067234473115389890198744746102445387489091736607216011017657375145650184683611400801796428772999993752596066397907050498601836685234113139534010027538643677312116609626050440832347356049351081388329719386407722723975004636298280158700735636290841630100452618933744385918758568697456398345716422468488118605781713551838355655617313373696270513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7a9eba5475f05fba6bf4859a751e17b05a393b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaging-xnat.cruk.cam.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img-dmzdcm002.cri.camres.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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