blogs.bristol.ac.uk

- University of Bristol -

Issued by QuoVadis EV SSL ICA G3

About this certificate

This digital certificate with serial number 6a:2d:4c:d4:f7:8c:7f:92:f1:8a:a3:65:de:00:b4:7e:46:d1:dc:54 was issued on by QuoVadis Limited.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Bristol

Company registration number: May-17-09
Organization: University of Bristol
Organization unit: CampusPress
State / Province: City of Bristol
Locality: BRISTOL
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 6a:2d:4c:d4:f7:8c:7f:92:f1:8a:a3:65:de:00:b4:7e:46:d1:dc:54
Serial Number (int): 606163248243902292654935734095511649361385872468
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 3f:27:d5:4f:2b:89:88:8e:1e:56:10:89:d4:d1:84:37:7b:50:9d:88
AuthorityKeyId: e5:84:54:d0:90:49:9f:38:ba:f2:c9:e1:2a:08:c5:4e:9f:a0:48:3f

Fingerprint (sha1): 35:5e:b0:49:82:fe:64:fa:ae:4d:0d:23:65:e4:7e:5d:d6:3b:3f:a3
Fingerprint (sha256): 02:45:17:a3:49:c3:0a:53:d4:33:56:a9:d7:9a:de:87:a9:cc:34:3c:56:3a:6f:60:5c:4b:fe:32:85:11:53:7c

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevsslg3.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevsslg3.crl

Check the revocation status for certificate blogs.bristol.ac.uk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blogs.bristol.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blogs.bristol.ac.uk
africanreadingcultures.org
www.africanreadingcultures.org

Other certificates including the domain name bristol.ac.uk

(limited to 100 certificates)
myerp-archive-test.bris.ac.uk
wwwa-dev.fen.bris.ac.uk
amis.bris.ac.uk
netmon.netcomms.bristol.ac.uk
estates.bris.ac.uk
DVAtraining.bristol.ac.uk
blogs.bristol.ac.uk
evision.apps.bristol.ac.uk
naturelocator.ilrt.bris.ac.uk
www.brtcrandomisation.bristol.ac.uk
fitnetnhs.bristol.ac.uk
aerosol-cdt.ac.uk
galaxy-gio.acrc.bristol.ac.uk
www.alspac.bristol.ac.uk
research-information.bris.ac.uk
dialogue.bristol.ac.uk
status.resnet.bris.ac.uk
blogs-test.bristol.ac.uk
evision-b.apps.bristol.ac.uk
blogs.bristol.ac.uk
proposals.epi.bris.ac.uk
data.bristol.ac.uk
www.survey.bris.ac.uk
xerte.bris.ac.uk
www.by-band.bristol.ac.uk
laharflow.bris.ac.uk
www.gradconnection.bristol.ac.uk
cteu.bristol.ac.uk
mwgit.bris.ac.uk
blogs.bristol.ac.uk
myerp-archive-test.bris.ac.uk
research-information.bris.ac.uk
interdelphi.rit.bristol.ac.uk
cteu-trials.bristol.ac.uk
app-dc2-cirx-p0-vip.services.bris.ac.uk
ci.ilrt.bristol.ac.uk
wwwtestdev-ole.bris.ac.uk
oas.apps.bristol.ac.uk
its-dc2-lemma2-p0-vip.computing-service.bristol.ac.uk
blogs.bristol.ac.uk
xerte-beta.bris.ac.uk
xerte.bris.ac.uk
mediasite-dev.bristol.ac.uk
rds-web.bristol.ac.uk
intelligentsystems.bristol.ac.uk
www.cs.bris.ac.uk
mediasite.services.bris.ac.uk
purchasing-system.bristol.ac.uk
www.iser.bristol.ac.uk
corestream.bristol.ac.uk
its-splusiis-prod.cse.bris.ac.uk
myerp-archive.bristol.ac.uk
www.digitalscreens.bris.ac.uk
myerp-int.bristol.ac.uk
go.resnet.bristol.ac.uk
blogs.bristol.ac.uk
manage.resnet.bristol.ac.uk
www.ole.bris.ac.uk
reportandsupport.bris.ac.uk
research-information.bris.ac.uk
contact.voicemail.bristol.ac.uk
heart-institute.bristol.ac.uk
consult.bristol.ac.uk
evision-b.apps.bristol.ac.uk
train.sls.bristol.ac.uk
seis.bristol.ac.uk
blogs.bristol.ac.uk
child-cough.bristol.ac.uk
blogs.bristol.ac.uk
blogs.bristol.ac.uk
www.bristol.ac.uk
leder-test.rit.bristol.ac.uk
imagelibrary.bristol.ac.uk
dedefi.ilrt.bristol.ac.uk
reportandsupport.bris.ac.uk
imagelibrary.bristol.ac.uk
training-data-warehouse.epi.bris.ac.uk
www.wireless.bris.ac.uk
dedefi.ilrt.bristol.ac.uk
gpo-srv.bristol.ac.uk
careers.bristol.ac.uk
fluff.bris.ac.uk
child-cough.bristol.ac.uk
fluff.bris.ac.uk
team.resnet.bristol.ac.uk
btc-test.bristol.ac.uk
blogs.bristol.ac.uk
blogs.bristol.ac.uk
sphere1-connect.een.bristol.ac.uk
ITS-SOCSWEB.cse.bris.ac.uk
www.brtcrandomisation.bristol.ac.uk
develop.bristol.ac.uk
mlbook.cs.bris.ac.uk
galaxy-gio.acrc.bristol.ac.uk
www.acrc.bris.ac.uk
www.gradconnection.bristol.ac.uk
ole.bristol.ac.uk
child-cough.bristol.ac.uk
parking-permits.bristol.ac.uk
www.wireless.bris.ac.uk

Certificate

The complete raw certificate details for blogs.bristol.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwIpOgTNPWLIuBPWRb6X
MpaNiVtsrXToK+uPv34ahtaVHuqCDpzqw5L+OXIUhWMNqdFXg4DhvhVPyjPizAxH
hOcrcGntNc3KqGrso9KdWUZYKVom9fYx5kzPHS5w+h0wpJLqq1vlHtRwXT7plxkU
RfO/nI3J4Q5SOd9lXCer2FvdxXQUKfURNFB4Ac6hTUd0YIdpL/Jf4jueg33yNMj8
6A0aa3dyEhNwNmquJRJcDCG5TxJEofO6l6u9V9uWHzndy2uHnknO5quF9G36oQQS
yg6royb8jsUH5taTlNb1bQ0qIRJJwaDxMQU+xlo92JAZMbsZaEttnyXOG/RG/o/W
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 606163248243902292654935734095511649361385872468
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis EV SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-23 09:47:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-23 09:57:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'May-17-09'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'City of Bristol'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BRISTOL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Bristol'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CampusPress'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'blogs.bristol.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24112581897820808273452630022866114212907596374276823087790427797042890071766373452616503838829313836657041103023487671036043691593139602138870060198195436172512996675252304171298238555165087503543548951249011994849668223492342073700605687357928589410434641126200324344453972015387922554920128690196664660473656410812674141365706622144261164372854067382999700494871914615165394838834246308565134939670796155877302925780021387254190166737057302944554897196540332906219203366097752306463823046586176585042072265921395130421518115150098702141797586292541346934745843746479129817806120843488218317731466804943836968638041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f27d54f2b89888e1e561089d4d184377b509d88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e58454d090499f38baf2c9e12a08c54e9fa0483f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.bristol.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africanreadingcultures.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africanreadingcultures.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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