shibboleth.imperial.ac.uk

- Imperial College of Science, Technology and Medicine -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number b7:a1:fd:6f:f4:5b:f0:ee:5c:7f:d1:bb:68:5d:f8:55 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Imperial College of Science, Technology and Medicine

Organization: Imperial College of Science, Technology and Medicine
State / Province: London, City of
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): b7:a1:fd:6f:f4:5b:f0:ee:5c:7f:d1:bb:68:5d:f8:55
Serial Number (int): 244089823342444967356488216336102455381
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 92:f8:3b:9e:1d:b1:ef:15:f3:0e:09:e4:6c:8c:79:b0:f8:0c:4b:af
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 09:c4:7b:9b:db:cf:ab:8d:04:48:c0:31:d9:fc:bb:45:d5:88:d7:c9
Fingerprint (sha256): 02:14:18:24:c8:23:47:e4:f4:3d:1b:2f:bb:00:76:8d:49:92:eb:07:c7:da:42:b7:40:ce:46:45:4c:65:ad:a5

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate shibboleth.imperial.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shibboleth.imperial.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shibboleth.imperial.ac.uk
www.shibboleth.imperial.ac.uk

Other certificates including the domain name imperial.ac.uk

(limited to 100 certificates)
admissions.emeritus.org
accreditation.lumanity.com
alumnicredentials.kcl.ac.uk
www3.imperial.ac.uk
achievements.launchyou.com
forms.imperial.ac.uk
plexus.imperial.ac.uk
achievements.launchyou.com
exchange.imperial.ac.uk
eu.prod.campusgroups.com
shibboleth.imperial.ac.uk
remotehelp.ic.ac.uk
events.imperial.ac.uk
ichtb.med.imperial.ac.uk
accreditation.lumanity.com
servicemgtdev.imperial.ac.uk
wwwf.imperial.ac.uk
eu.prod.campusgroups.com
data.hpc.imperial.ac.uk
dataman.bioinformatics.ic.ac.uk
library-search.imperial.ac.uk
plexus.imperial.ac.uk
achievements.launchyou.com
icva.hep.ph.ic.ac.uk
gallego.bg.ic.ac.uk
rpssicprj06.imperial.ac.uk
office.imperial.ac.uk
ukcosmos.imperial.ac.uk
secureaccess.imperial.ac.uk
achievements.launchyou.com
ictsmartprd.cc.ic.ac.uk
wwwd.imperial.ac.uk
saml.imperial.ac.uk
accreditation.lumanity.com
media.imperial.ac.uk
ictprintservice-colour.cc.ic.ac.uk
fseuc-2.freshservice.com
cran.ma.imperial.ac.uk
admissions.emeritus.org
zenoss.hpc.imperial.ac.uk
accreditation.lumanity.com
cran.ma.imperial.ac.uk
rpssicprj03.imperial.ac.uk
eu.prod.campusgroups.com
search.imperial.ac.uk
accreditation.lumanity.com
www.counselling-form.imperial.ac.uk
search.imperial.ac.uk
admissions.emeritus.org
support.klaxon.io
hml.imperial.ac.uk
www.medbio.imperial.ac.uk
halls.imperial.ac.uk
plexus.imperial.ac.uk
imperial.ac.uk
prdsoa.imperial.ac.uk
wlsprd.imperial.ac.uk
mobile.imperial.ac.uk
imperial.ac.uk
www1.imperial.ac.uk
ictu-trial.cc.ic.ac.uk
admissions.emeritus.org
www3.imperial.ac.uk
wiki.imperial.ac.uk
admissions.emeritus.org
google.imperial.ac.uk
rpssicissan.imperial.ac.uk
forms.imperial.ac.uk
ictsgw.cc.ic.ac.uk
fseuc-2.freshservice.com
events.imperial.ac.uk
hml.imperial.ac.uk
exec-info.imperial.ac.uk
dcwadmin.imperial.ac.uk
asset-library.imperial.ac.uk
campaigns.imperial.ac.uk
webact.org
remotehelp.ic.ac.uk
www.inform.imperial.ac.uk
icis.imperial.ac.uk
webact.org
spam.ic.ac.uk
google.imperial.ac.uk
estore.imperial.ac.uk
ucu.imperial.ac.uk
fseuc-2.freshservice.com
www3.imperial.ac.uk
www1.imperial.ac.uk
jetpac.app
icseclzt.cc.ic.ac.uk
ictprintservice-mobile.imperial.ac.uk
wwwtest.imperial.ac.uk
www1.imperial.ac.uk
appstream.ic.ac.uk
ib-programmes.imperial.ac.uk
ictprintservice-www-dev.cc.imperial.ac.uk
fseuc-2.freshservice.com
fileexchange.imperial.ac.uk
ict-printservice-www.cc.imperial.ac.uk
google.imperial.ac.uk

Certificate

The complete raw certificate details for shibboleth.imperial.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIpzCCBo+gAwIBAgIRALeh/W/0W/DuXH/Ru2hd+FUwDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIzMDkyNjAwMDAwMFoXDTI0MDkyNTIz
NTk1OVowgYoxCzAJBgNVBAYTAkdCMRgwFgYDVQQIEw9Mb25kb24sIENpdHkgb2Yx
PTA7BgNVBAoTNEltcGVyaWFsIENvbGxlZ2Ugb2YgU2NpZW5jZSwgVGVjaG5vbG9n
eSBhbmQgTWVkaWNpbmUxIjAgBgNVBAMTGXNoaWJib2xldGguaW1wZXJpYWwuYWMu
dWswggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDb/pmuZG9xtGbCdMVJ
GlbV5JVq76UvrZ5ab+zsxBcP+opot16duCuRa9sHukw9iTKOJd8BElMRlCRmsbst
8j77OQi2B2D3ICN2ZCpSccVGCTJVDIyxySDIu/itVM/WB8lwHPwamNxJ0Dstqgh9
sQh4rr/rNn0zyw0s8R73AS+BMlorL2XRJiP0xbBx+hlmxEwA/XS36GyATc+IhjXO
3FsQqBDsiDrEpUhSPICdbY8VTic+bS3Hzmhz3RM1USTBnh2blik9kjqvK/t7RC8h
xS+MfvGtNontwP6wXE6WFloFtuIN2FcmNfOTMTQRHw5e1yOy/PkvLadnh2Nawppz
PZIzKtSV0FeGuBu788EGZB4yYCTfN5Y+IJ4NlRrCIruHW8yyioCr5LuVOaf7fSxm
AGwHpq5zhM2lNijz6vw4HpSZfEI3Bce+vbwJHD46ViEpJwsTYC6V9GcD5nip70OC
c7GntQA5+Ub30ZdQ00SflWpBdmEFQeIin6J+YJOPUtF7kNFpJ3tPL+UrwI2XeCTs
4QE93DYaYDWdOJsaGcCOFcmnAREb6jVVr9xmwwrZ0a6nBQ8obzvFndv5w9JVT0eP
Gng/OoCaDmQqUoILRwX/NgNmmdsiRleQKvzUcvUZXizRxyTQNyi3qq47HRgY8K9u
WG9wqtRWvhaegPoozMt8g0uvDwIDAQABo4IDSzCCA0cwHwYDVR0jBBgwFoAUbx01
SRBsMvpZoJ68iugflb5xegwwHQYDVR0OBBYEFJL4O54dse8V8w4J5GyMebD4DEuv
MA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgJPMCUwIwYIKwYB
BQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjA/BgNVHR8E
ODA2MDSgMqAwhi5odHRwOi8vR0VBTlQuY3JsLnNlY3RpZ28uY29tL0dFQU5UT1ZS
U0FDQTQuY3JsMHUGCCsGAQUFBwEBBGkwZzA6BggrBgEFBQcwAoYuaHR0cDovL0dF
QU5ULmNydC5zZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNydDApBggrBgEFBQcw
AYYdaHR0cDovL0dFQU5ULm9jc3Auc2VjdGlnby5jb20wQwYDVR0RBDwwOoIZc2hp
YmJvbGV0aC5pbXBlcmlhbC5hYy51a4Idd3d3LnNoaWJib2xldGguaW1wZXJpYWwu
YWMudWswggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AHb/iD8KtvuVUcJhzPWH
ujS0pM27KdxoQgqf5mdMWjp0AAABitG/RcwAAAQDAEcwRQIhANI8LdHf6WRL61Mn
mSKBWJBVaOpps7jebZiJYJ4qQ2udAiAFe0AyUj445suL7eaZYaJfJARLBkA/2Z77
RT3LKgqvQwB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABitG/
RjQAAAQDAEcwRQIgTsXEfUJv/M41td3QNq7t2+yUFI2SmZgSUbX3eFfst+ACIQCg
dg2dTlW2zKXBr5jy3t1Pj4wkq1q4p0z2n6COhtJFwgB2AO7N0GTV2xrOxVy3nbTN
E6Iyh0Z8vOzew1FIWUZxH7WbAAABitG/RfoAAAQDAEcwRQIhAKBPQxk33rgcKXqr
l0OGkLJFfFLjVNhD8FW9+jt51NnHAiAsTHIRthXJDyxsknSpAphSvLolhK2eiJoB
udpNFxzWXzANBgkqhkiG9w0BAQwFAAOCAgEACWo2RJ5KjWvexMUcKW78d7pW7Kf3
336zecDyPAZpUwzEONwJ/pWvUD4BOPfCAvhs9KMMviSrTpyba8vaR1KTcpd5o/GR
2P/DjhUbFVQXxLx1HYJywYuslVlNKtY/pVVUDq0ASIVDyVmATC2b06VGhbPJ8lcM
iHMbICDUBBxNlf9BXdiKFEdfDd//1jXivKOGYdS7DEJDZfbVvaUvJ45jzT+v1KqW
RjcFDUNJ7ENbS54ksPgZCUNUeXCld2loHfiaHo2QnSeLE1nPMzVFHfNuAmOL4FOU
VIa9rot7tT5V8GOTLwtTcPKt+jBDQzhP5WblsNgHEESpOZg6G8LrRRtZ7XlTwvaP
Kd6uWbBIlYYgvo2JdieBJNsEgKiYs0arS7KSgD/pkKP2DSB6+xwARkLkaXRDEP8/
j2tdGsLUqsk+6OLpxvFRz3XtHbLpX1l9ule2mSg57AZBe3SY7P8250/Js6PJ7wH9
pYpU0B8T7fKM3EzoSWB+4YGzCpyRicYhBLyghA0/5Xc/kvGm+tpdUXitm9b873ps
3k9/oioXyngZ0ueaImsk2RNxSfxL4CKO13NsgTPZaBFg0WMA6OvNAhldnlAGLLXJ
f+1m7fHfI651/iGGLD0Uz9aPF8uHa7c85C36QC9CrPYZ0pQbxikyEGQeMNDtx4ag
NlZ8KtPG1Tw5AeQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 244089823342444967356488216336102455381
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London, City of'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Imperial College of Science, Technology and Medicine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shibboleth.imperial.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 897499389466912073715241636897306930898851667376130742610991815172504782234322016867241483420704972945973211622902237406096350470402068313790111855497432456234440220666629628549097819437044700842225171793459239068131371715018708375922007964167686291484283066118764642608531349987602111950800061877506768953542550103723095717143509886209150737539311340308820585253376971097922519886561524049360959698471897292378754011842179185439774716425776342651661173366033991787179285600652181371856543816096967751677062031268593705950707653994646193846255587572637108064349518266914283338525254182763649334777138555368106059373423848407524613342730549839063853267592377537592091812991653349042782464559426665247987391737869838773111470149328770366481706755078881765737724079760209058572008104405266427068465742634091065268402226622038711857472581525726225395117672286797846946276736776974586062311892866452201895947064697487278842841851021365430539550219239061683459581013411019586376335666100181343238061307493556179442139203685119008849619420609269093203083141899467075833734482671529488590352761820594581590641331346439805242982718428559757769972714011675278147775092643616309234198455590250178003042839280412069455208840444631324274989969167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92f83b9e1db1ef15f30e09e46c8c79b0f80c4baf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shibboleth.imperial.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shibboleth.imperial.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ad1bf45cc0000040300473045022100d23c2dd1dfe9644beb532799228158905568ea69b3b8de6d9889609e2a436b9d0220057b4032523e38e6cb8bede69961a25f24044b06403fd99efb453dcb2a0aaf43007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018ad1bf4634000004030047304502204ec5c47d426ffcce35b5ddd036aeeddbec94148d9299981251b5f77857ecb7e0022100a0760d9d4e55b6cca5c1af98f2dedd4f8f8c24ab5ab8a74cf69fa08e86d245c2007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ad1bf45fa0000040300473045022100a04f431937deb81c297aab97438690b2457c52e354d843f055bdfa3b79d4d9c702202c4c7211b615c90f2c6c9274a9029852bcba2584ad9e889a01b9da4d171cd65f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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