prism.brighton.ac.uk

- University of Brighton -

Issued by QuoVadis Europe EV SSL CA G1

About this certificate

This digital certificate with serial number 16:4d:2d:60:06:fc:0e:5d:f1:a1:b8:ea:5b:2f:47:bf:34:36:fc:79 was issued on by QuoVadis Trustlink B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Brighton

Company registration number: 133796
Organization: University of Brighton
State / Province: East Sussex
Locality: Brighton
Country: GB

QuoVadis Trustlink B.V.

Organization: QuoVadis Trustlink B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 16:4d:2d:60:06:fc:0e:5d:f1:a1:b8:ea:5b:2f:47:bf:34:36:fc:79
Serial Number (int): 127318907067669599316014240590214909545388899449
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: f9:d3:ff:12:99:a9:02:d1:3a:81:fb:e7:dd:a9:ba:b5:b7:f4:2b:3b
AuthorityKeyId: 49:3d:0e:dc:79:c5:cb:db:12:a3:d5:0d:ab:f2:cf:a9:af:e3:66:a9

Fingerprint (sha1): 72:4e:18:00:67:3c:a1:c2:e4:bc:ae:17:58:00:95:eb:d2:da:12:84
Fingerprint (sha256): 05:36:d1:b7:5c:a2:bb:72:2c:fa:a0:90:53:f6:49:66:04:72:fe:85:2f:ef:1c:11:46:8c:4d:d8:59:9d:d6:d7

Issuing Certificate URL: http://trust.quovadisglobal.com/quovadiseuropeevsslcag1.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/quovadiseuropeevsslcag1.crl

Check the revocation status for certificate prism.brighton.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prism.brighton.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prism.brighton.ac.uk

Other certificates including the domain name brighton.ac.uk

(limited to 100 certificates)
email.brighton.ac.uk
dataviewdev.brighton.ac.uk
idp.brighton.ac.uk
id.dev.brighton.ac.uk
evsidv.brighton.ac.uk
www.inam.brighton.ac.uk
researchers.brighton.ac.uk
shop.brighton.ac.uk
wadslive.brighton.ac.uk
staffmail.dev.brighton.ac.uk
evsipr.brighton.ac.uk
www.brighton.ac.uk
authenticate.brighton.ac.uk
wattsmedia.brighton.ac.uk
prism.brighton.ac.uk
shs.brighton.ac.uk
arch.brighton.ac.uk
pay.brighton.ac.uk
timetable.brighton.ac.uk
tel-ms-pro01.university.brighton.ac.uk
lists.brighton.ac.uk
mailer.brighton.ac.uk
data4impact.brighton.ac.uk
mysite.brighton.ac.uk
ahs.brighton.ac.uk
prism.brighton.ac.uk
alumni.brighton.ac.uk
emea-san1.blackboard.com
eu-central-1-san1.blackboard.com
mimosa.brighton.ac.uk
alumni.brighton.ac.uk
alumni.brighton.ac.uk
studentfolio.brighton.ac.uk
socialwork.brighton.ac.uk
peri.brighton.ac.uk
screenarchive.brighton.ac.uk
lyncwsext.brighton.ac.uk
unicard.brighton.ac.uk
dataview.brighton.ac.uk
voicemail.brighton.ac.uk
idp-test.brighton.ac.uk
remote.brighton.ac.uk
extranet.brighton.ac.uk
evsipr.brighton.ac.uk
blogs.brighton.ac.uk
studentcentral.brighton.ac.uk
uni.brighton.ac.uk
unicardcentral.brighton.ac.uk
evsite.brighton.ac.uk
studentcentralsupport.brighton.ac.uk
autodiscover.brighton.ac.uk
check-mk.brighton.ac.uk
peri.brighton.ac.uk
eu-central-1-san1.blackboard.com
mailer.brighton.ac.uk
efin5.brighton.ac.uk
shs.brighton.ac.uk
about.brighton.ac.uk
emea-san1.blackboard.com
smtp.brighton.ac.uk
dataview.brighton.ac.uk
staffmaildev.brighton.ac.uk
remote.brighton.ac.uk
email.brighton.ac.uk
autodiscoverdev.brighton.ac.uk
student.brighton.ac.uk
resource.brighton.ac.uk
emea-san1.blackboard.com
www.inam.brighton.ac.uk
eu-central-1-san1.blackboard.com
studentfoliotest.brighton.ac.uk
holiday.brighton.ac.uk
idp-test.brighton.ac.uk
stsdev.brighton.ac.uk
security.brighton.ac.uk
pay.brighton.ac.uk
blogs.brighton.ac.uk
sclink.brighton.ac.uk
eu-central-1-san1.blackboard.com
confirm.brighton.ac.uk
shs.brighton.ac.uk
issd.brighton.ac.uk
issd-dev.brighton.ac.uk
socialwork.brighton.ac.uk
peri.brighton.ac.uk
www.brighton.ac.uk
emea-san1.blackboard.com
transport.brighton.ac.uk
shop.brighton.ac.uk
studentcentraltestsupport.brighton.ac.uk
eu-central-1-san1.blackboard.com
authgen.brighton.ac.uk
pcbookings.brighton.ac.uk
tel-krnl-pro01.university.brighton.ac.uk
*.brighton.ac.uk
springboard.brighton.ac.uk
sportbookings.brighton.ac.uk
moviesandmemories.brighton.ac.uk
alumni.brighton.ac.uk
myinfo.brighton.ac.uk

Certificate

The complete raw certificate details for prism.brighton.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHdzCCBV+gAwIBAgIUFk0tYAb8Dl3xobjqWy9HvzQ2/HkwDQYJKoZIhvcNAQEL
BQAwVjELMAkGA1UEBhMCTkwxIDAeBgNVBAoMF1F1b1ZhZGlzIFRydXN0bGluayBC
LlYuMSUwIwYDVQQDDBxRdW9WYWRpcyBFdXJvcGUgRVYgU1NMIENBIEcxMB4XDTIw
MTAxNDEwMjMwNVoXDTIxMTAxNDEwMzMwMFowgbgxEzARBgsrBgEEAYI3PAIBAxMC
R0IxGjAYBgNVBA8MEUdvdmVybm1lbnQgRW50aXR5MQ8wDQYDVQQFEwYxMzM3OTYx
CzAJBgNVBAYTAkdCMRQwEgYDVQQIDAtFYXN0IFN1c3NleDERMA8GA1UEBwwIQnJp
Z2h0b24xHzAdBgNVBAoMFlVuaXZlcnNpdHkgb2YgQnJpZ2h0b24xHTAbBgNVBAMM
FHByaXNtLmJyaWdodG9uLmFjLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr8klI/O2VXsjQnw/DTlsWoNpDo+Pv1goXVUvEYjiRmHkpjnjmex50wAF
iPdQ6uIuIO2cHDqfrALpObWvf58tGgx/5dm2cqVXtNxqnaSyVcSOtdP20snpkRWd
B0g9F1uh0/D5dTCGzoRR+tqU4o32TFzPKFyFVb6hdXc9SxZhj9YNJ+1MfgR/JpXw
+PyPRXDT1fY+O0o8YVNz+vFy+04Fu7+aDz9AlYtQXdE8Xs3kKZhDuV4ykQRLEMOY
DwauZ4XK98TBbf/Uh6giiigY6M1pZHmIIXuJmvuS+jX4Os4srzuNVJIWSwd30qFU
hBZmMVCpKr7OXOFPAAOpw0ZsfQB/FwIDAQABo4IC2DCCAtQwDAYDVR0TAQH/BAIw
ADAfBgNVHSMEGDAWgBRJPQ7cecXL2xKj1Q2r8s+pr+NmqTCBgwYIKwYBBQUHAQEE
dzB1MEcGCCsGAQUFBzAChjtodHRwOi8vdHJ1c3QucXVvdmFkaXNnbG9iYWwuY29t
L3F1b3ZhZGlzZXVyb3BlZXZzc2xjYWcxLmNydDAqBggrBgEFBQcwAYYeaHR0cDov
L29jc3AucXVvdmFkaXNnbG9iYWwuY29tMB8GA1UdEQQYMBaCFHByaXNtLmJyaWdo
dG9uLmFjLnVrMFoGA1UdIARTMFEwRgYMKwYBBAG+WAACZAECMDYwNAYIKwYBBQUH
AgEWKGh0dHA6Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tL3JlcG9zaXRvcnkwBwYF
Z4EMAQEwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMEoGA1UdHwRDMEEw
P6A9oDuGOWh0dHA6Ly9jcmwucXVvdmFkaXNnbG9iYWwuY29tL3F1b3ZhZGlzZXVy
b3BlZXZzc2xjYWcxLmNybDAdBgNVHQ4EFgQU+dP/EpmpAtE6gfvn3am6tbf0Kzsw
DgYDVR0PAQH/BAQDAgWgMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcAfT7y+I//
iFVoJMLAyp5SiXkrxQ54CX8uapdomX4i8NcAAAF1JquseAAABAMASDBGAiEAovjc
ww18H02DdXWcM7NPhjIalaspJm+e+FZ86CpnYPMCIQDuncXEDzxefRTLFl6FfpQQ
1bBjzjPOhi9rXSp1CjqkzAB1AESUZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT/TM5a1
toGoAAABdSarrM8AAAQDAEYwRAIgFxWYfCNyFPkG3kgL2ehpCXjXuWSTEf8eJ3j3
tV7P1k8CIGSGBqrfQYVG1HrVfS+gVsM9LIIi8yg+cwSKxQLp1BOdMA0GCSqGSIb3
DQEBCwUAA4ICAQAU6153ZZwYG7GFFBM0PFsWDwjWq7vpTJRAbxdDR65a8tlU2jj/
DBZ8N4Nmy5YKl48+d52aAIeZC8GCYH0WhiVuhs94i/tBzx98xPYjOlluNUnlKnui
u0ChK+vsXvLkqo3BeZORFJq0oycLjJwsvnuQYICJ+K86ySLrHWG7+kj9Q9lQzOtH
ffEkRX/LlaeL0ETH7f6UpvpM14gXSk0qS2PFG9YgM4v2mpqiFVzNdTz+JuGqW7/U
8wrEw6yIAa5VdPrWG7bDmieMVrLCjdOzdIXnY2pfLwiAosQDvZjTZkcratNZuWd8
YuGBjb3QWa3Qg5zcFpMCby/W1yINHcH0FTNjCOabaeUyEc0gZKZtS/RmwXjgLRxB
BYZe7AzvVCbzF68OyUAHdRUaH8ylLzX/zH5MrR6FMhuXhheKFuS8kORJKTzoP7Kt
xMGaIiVJ72OvdG8aZdFkImtPbhhDaHtYONopMfGO8ZFMPPr7crwr96NITLE/v9VK
8ITRd4K9O/J0kUC3q9JrqXDPLyh0GtYx2sVl8hs2adcD7r5eKc6T7buBAx6OekuR
D8DjtVAFgWGQpOHJekw62TcHjfqmX/bOpgs5eFdt0gHO5kJUfgHuCbq1uxmhYL+t
DDSxiDne12KOLc1LwI6myXg8lLVPQhumu9hrXHNuq3PD2CGVAcEZFyWO8g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8klI/O2VXsjQnw/DTls
WoNpDo+Pv1goXVUvEYjiRmHkpjnjmex50wAFiPdQ6uIuIO2cHDqfrALpObWvf58t
Ggx/5dm2cqVXtNxqnaSyVcSOtdP20snpkRWdB0g9F1uh0/D5dTCGzoRR+tqU4o32
TFzPKFyFVb6hdXc9SxZhj9YNJ+1MfgR/JpXw+PyPRXDT1fY+O0o8YVNz+vFy+04F
u7+aDz9AlYtQXdE8Xs3kKZhDuV4ykQRLEMOYDwauZ4XK98TBbf/Uh6giiigY6M1p
ZHmIIXuJmvuS+jX4Os4srzuNVJIWSwd30qFUhBZmMVCpKr7OXOFPAAOpw0ZsfQB/
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 127318907067669599316014240590214909545388899449
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Europe EV SSL CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-14 10:23:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-14 10:33:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '133796'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'East Sussex'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Brighton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Brighton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'prism.brighton.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22190891704726300097895349562562846587146640152490638530596255810319430908258410875942588969822337256427654868157005079808748723641118800098188694891886099295833059705226379926088870906459578069494389614446258619566827706999315987440336638371035697908138994242928048699588560363147126109040716478404348635121164984989555896620658892885077932646385172106113761051485643121828167608895900956249628013573663473948021626306354649535565771793512054622941558123024988944098719622687910644748532926901063865864465167609801104663130033068288303970531823353020667995162016765698536805620217193222515411128093790045231074279191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 493d0edc79c5cbdb12a3d50dabf2cfa9afe366a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/quovadiseuropeevsslcag1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prism.brighton.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/quovadiseuropeevsslcag1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9d3ff1299a902d13a81fbe7dda9bab5b7f42b3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017526abac780000040300483046022100a2f8dcc30d7c1f4d8375759c33b34f86321a95ab29266f9ef8567ce82a6760f3022100ee9dc5c40f3c5e7d14cb165e857e9410d5b063ce33ce862f6b5d2a750a3aa4cc0075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017526abaccf000004030046304402201715987c237214f906de480bd9e8690978d7b9649311ff1e2778f7b55ecfd64f0220648606aadf418546d47ad57d2fa056c33d2c8222f3283e73048ac502e9d4139d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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