vpn.staffs.ac.uk

- Staffordshire University -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number f4:3e:a1:09:72:4f:91:2a:f1:09:cc:d1:64:97:07:bb was issued on by GEANT Vereniging.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Staffordshire University

Organization: Staffordshire University
State / Province: Staffordshire
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): f4:3e:a1:09:72:4f:91:2a:f1:09:cc:d1:64:97:07:bb
Serial Number (int): 324656819593125764643469906701591185339
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 88:94:ca:89:58:1f:24:fb:5b:c2:79:ca:6f:86:99:31:53:3b:90:50
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 46:fb:7b:36:86:2a:b0:2e:1e:1d:58:77:82:b3:03:7d:1d:c8:47:a5
Fingerprint (sha256): 05:94:b9:19:7c:a1:1c:d8:0c:6c:dd:a5:f8:1e:9c:c7:a8:6d:2f:92:6a:48:0c:db:2a:87:3d:63:f9:b5:85:c1

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate vpn.staffs.ac.uk

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.staffs.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.staffs.ac.uk
vpn-int.staffs.ac.uk
vpn-prod.staffs.ac.uk
vpn-test.staffs.ac.uk
vpn1.staffs.ac.uk
vpn2.staffs.ac.uk
vpn3.staffs.ac.uk

Other certificates including the domain name staffs.ac.uk

(limited to 100 certificates)
paymentportal.staffs.ac.uk
staffsurvey.staffs.ac.uk
shop.staffs.ac.uk
accesscentre.staffs.ac.uk
www-int.staffs.ac.uk
libguides.staffs.ac.uk
surf.staffs.ac.uk
evision.staffs.ac.uk
ingenius.staffs.ac.uk
jira.games.staffs.ac.uk
reslifeportal.staffs.ac.uk
vpn.staffs.ac.uk
blackboard.staffs.ac.uk
gamestech.staffs.ac.uk
gamestech.staffs.ac.uk
eprints.staffs.ac.uk
iris.staffs.ac.uk
i3.staffs.ac.uk
myportal.staffs.ac.uk
allstokedup.staffs.ac.uk
airnet-secure.staffs.ac.uk
learning.staffs.ac.uk
vmp1wscan1.staff.staffs.ac.uk
www-int.staffs.ac.uk
crusweb3.staffs.ac.uk
blackboard.staffs.ac.uk
crusweb3.staffs.ac.uk
sspr.staffs.ac.uk
sid-uat.staffs.ac.uk
libcat.staffs.ac.uk
workvivo.staffs.ac.uk
digitalacademy.staffs.ac.uk
journals.staffs.ac.uk
staffs.ac.uk
iswiki.staffs.ac.uk
govdocs.staffs.ac.uk
beacon.staffs.ac.uk
staffs.ac.uk
unicard.staffs.ac.uk
eu-central-1-san1.blackboard.com
evision.staffs.ac.uk
*.staffs.ac.uk
coll-publisher-ms.staffs.ac.uk
crusmis14.staffs.ac.uk
vmp1wstuweb1.staff.staffs.ac.uk
staffdirectory.staffs.ac.uk
crwnfcet2.staffs.ac.uk
medialibrary.staffs.ac.uk
bitlocker.staffs.ac.uk
san-eu02-gd.hosted.exlibrisgroup.com
eu-central-1-san1.blackboard.com
alumni.staffs.ac.uk
search.staffs.ac.uk
unicard.staffs.ac.uk
crusldi6.staffs.ac.uk
dilondon2.staffs.ac.uk
adfs.staffs.ac.uk
wwwtest.staffs.ac.uk
VMT1UCAMPUSM1.staffs.ac.uk
*.staffs.ac.uk
crusetran4.staffs.ac.uk
cruscmc2.staffs.ac.uk
coll-cucm-imp-ms.staffs.ac.uk
workvivo.staffs.ac.uk
crwnident1.staffs.ac.uk
staffs.ac.uk
blackboard.staffs.ac.uk
images.staffs.ac.uk
crwncas1.staffs.ac.uk
libcat.staffs.ac.uk
grafana.staffs.ac.uk
staffs.ac.uk
crwnethot1.staffs.ac.uk
timetables.staffs.ac.uk
myview-test.staffs.ac.uk
rodc.staffs.ac.uk
cruscampus2.staffs.ac.uk
askus.staffs.ac.uk
myview.staffs.ac.uk
inplace-test.staffs.ac.uk
allstokedup.staffs.ac.uk
myportal.staffs.ac.uk
eu-central-1-san1.blackboard.com
vpn.staffs.ac.uk
www.staffs.ac.uk
adfs.staffs.ac.uk
*.staffs.ac.uk
search.staffs.ac.uk
coll-socialminer.staffs.ac.uk
*.ezproxy.staffs.ac.uk
staffs.ac.uk
blackboard.staffs.ac.uk
hotspot.staffs.ac.uk
staffdirectory.staffs.ac.uk
*.staffs.ac.uk
syllabus-test.staffs.ac.uk
adfs.staffs.ac.uk
accesscentre.staffs.ac.uk
shop.staffs.ac.uk
affiliates.staffs.ac.uk

Certificate

The complete raw certificate details for vpn.staffs.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324656819593125764643469906701591185339
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Staffordshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Staffordshire University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.staffs.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811973025996237668563248099985734827074795253087227528765808064540774491679971055370123110089330636908134987028375076035803601144205207223248168207216146848487427213026734488336813007003363343309168814285054900246557218927193812205965541066108994806690142812369612830838434791060548536671155448345096723769374224852471415921116497209497993040185741222792058657858991656443878652885857428340702264365898486998476641095423053449850150340837748559206457595397400757468598589698061361430591318233696839041772747784926662730426459717134648305065042238293000829307621003279844850659880689879586311051154891424112772242324274890944576265474943522210267427071346938076870295069410234460727320036166121307500633974840116547629989808421736881809150444650250986811510249137161772008330329753172810145442360010650108924433244469305919208906781213457041464880695591307011092482534455099907109834085197022922103539832477674764484547603319349314017143904482487285073105279294834013930502027342385699431316964849386432410408884693587264300725929298919674790168409870762738094329012094740975413880843379852764942970469228901947371405328124540625392399235348686323846247363500587683979113390996722426948534736386485447036420688747070896099792788113439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8894ca89581f24fb5bc279ca6f869931533b9050
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							016600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000187748114da0000040300473045022100aa3390123b45f04254711bbd96ed48cfb854a8f09e21dd0631f0fe96ffabbc0f022025c3dcc3bccbdaa72cc26ad3c3d3b9f178ab5bfe3098aa5e4ab1e6427d1c67ac007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018774811538000004030046304402207969698debc583a2eb71c473acd35883ce88a55bdc6a51c0112dbeaf361dca48022002f1d48b94f5dc98e7d20db1cde24d8380c4e6a11de9e90a8ef2e2c026495bc3007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018774811555000004030046304402200d318d57de86a0941f6e031de3ccb60ddf633a49a18e5cac7b5d7d6dde7096b6022055c84169ea69043b4cd61e37e1b1349100ad6773c3bbef5d43d508710653e8a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.staffs.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-int.staffs.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-prod.staffs.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-test.staffs.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn1.staffs.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn2.staffs.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn3.staffs.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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