proxy.signin.education.gov.uk

- Education & Skills Funding Agency -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 78:30:80:7e:2b:e2:ce:3c:0a:b4:5f:23 was issued on by GlobalSign nv-sa.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Education & Skills Funding Agency

Organization: Education & Skills Funding Agency
Organization unit: IM Services
State / Province: West Midlands
Locality: Coventry
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 78:30:80:7e:2b:e2:ce:3c:0a:b4:5f:23
Serial Number (int): 37196836408264787694990941987
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 52:5a:09:83:3a:86:5e:eb:b1:f6:20:ca:86:a7:14:59:10:11:57:f8
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 35:bf:ca:e9:51:96:7f:18:fa:2d:8f:87:14:ca:25:f7:3e:76:d7:14
Fingerprint (sha256): 07:86:f7:65:4e:a9:de:18:dd:52:a6:5a:1f:81:a0:3d:6c:b7:d8:cc:c5:90:7e:dc:5e:49:98:ba:6f:20:8e:93

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate proxy.signin.education.gov.uk

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for proxy.signin.education.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

proxy.signin.education.gov.uk
dev-dqt.signin.education.gov.uk
test-dqt.signin.education.gov.uk
pp-dqt.signin.education.gov.uk
dqt.signin.education.gov.uk
dev-kts.signin.education.gov.uk
test-kts.signin.education.gov.uk
pp-kts.signin.education.gov.uk
kts.signin.education.gov.uk
dev-asp.signin.education.gov.uk
test-asp.signin.education.gov.uk
pp-asp.signin.education.gov.uk
asp.signin.education.gov.uk
dev-gias.signin.education.gov.uk
test-gias.signin.education.gov.uk
pp-gias.signin.education.gov.uk
gias.signin.education.gov.uk
edd-gias.signin.education.gov.uk
dev-collect.signin.education.gov.uk
test-collect.signin.education.gov.uk
pp-collect.signin.education.gov.uk
collect.signin.education.gov.uk
edd-collect.signin.education.gov.uk
dev-s2s.signin.education.gov.uk
test-s2s.signin.education.gov.uk
pp-s2s.signin.education.gov.uk
s2s.signin.education.gov.uk
edd-s2s.signin.education.gov.uk
dev-psp.signin.education.gov.uk
test-psp.signin.education.gov.uk
pp-psp.signin.education.gov.uk
psp.signin.education.gov.uk
edd-psp.signin.education.gov.uk
dev-iex.signin.education.gov.uk
test-iex.signin.education.gov.uk
pp-iex.signin.education.gov.uk
iex.signin.education.gov.uk
dev-kts-sa.signin.education.gov.uk
test-kts-sa.signin.education.gov.uk
pp-kts-sa.signin.education.gov.uk
kts-sa.signin.education.gov.uk
dev-aforms.signin.education.gov.uk
test-aforms.signin.education.gov.uk
pp-aforms.signin.education.gov.uk
edd-aforms.signin.education.gov.uk
aforms.signin.education.gov.uk

Other certificates including the domain name education.gov.uk

(limited to 100 certificates)
ilsype.education.gov.uk
complete.education.gov.uk
fsm.education.gov.uk
cipdev.docs.platform.education.gov.uk
plan-your-grant.education.gov.uk
Pr-nndr-scanservice.education.gov.uk
Report-extremism.education.gov.uk
onlinecollections-preprod.education.gov.uk
manage-training-for-early-career-teachers.education.gov.uk
www.keytosuccess.education.gov.uk
operations.platform.education.gov.uk
education.gov.uk
oat-api-services-fcs.education.gov.uk
test.docs.platform.education.gov.uk
applyforerasmusgovernmentguarantee.education.gov.uk
pp-ws.lrs.education.gov.uk
ssl809275.cloudflaressl.com
traineeteacherportal-dv.education.gov.uk
consult.education.gov.uk
api-lrs.education.gov.uk
*.education.gov.uk
*.traineeships.education.gov.uk
idp.lrs.education.gov.uk
consult.education.gov.uk
schooljobs.education.gov.uk
publish-teacher-training-courses.education.gov.uk
findapprenticeshiptraining-api.apprenticeships.education.gov.uk
dms-information-exchange.education.gov.uk
section96.education.gov.uk
apim-ltm-api.apprenticeships.education.gov.uk
publish-teacher-training-courses.education.gov.uk
test-api-customerengagement.platform.education.gov.uk
ilsype.education.gov.uk
doat-web-operations-fcs.education.gov.uk
admin.apprenticeships.education.gov.uk
proxy.signin.education.gov.uk
approvals.providers.apprenticeships.education.gov.uk
api-services-fcs.education.gov.uk
teacherservices-pp.education.gov.uk
schoolexperience-staging.education.gov.uk
pp-lrs.education.gov.uk
consult.education.gov.uk
lrspaas-test08-idp.dev.lrs.education.gov.uk
apply-the-service-standard.education.gov.uk
lrs.education.gov.uk
traineeteacherportal.education.gov.uk
idp.lrs.education.gov.uk
consult.education.gov.uk
transfers-api.apprenticeships.education.gov.uk
help.apprenticeships.education.gov.uk
www.ecs2.education.gov.uk
collectdatauat.education.gov.uk
www.keytosuccess.education.gov.uk
cmp-lrs.education.gov.uk
ur1-idp.lrs.education.gov.uk
test.docs.platform.education.gov.uk
nca-pr.education.gov.uk
lrspaas-test01.dev.lrs.education.gov.uk
sni1c3d7gl.wpc.edgecastcdn.net
signin.education.gov.uk
schoolexperience-ta-recruit.education.gov.uk
clauat.education.gov.uk
doat-api-services-fcs.education.gov.uk
dev-api-customerengagement.platform.education.gov.uk
fsm2.education.gov.uk
status.apprenticeships.education.gov.uk
apply-for-qts-in-england.education.gov.uk
studentbursary.education.gov.uk
*.industryplacementmatching.education.gov.uk
dfe-hradvice.education.gov.uk
teachingjobs.education.gov.uk
education.gov.uk
sfs-dev.dev.funding.education.gov.uk
signin.education.gov.uk
subscriptions.apprenticeships.education.gov.uk
mta-sts.service.education.gov.uk
tasks.apprenticeships.education.gov.uk
pensionsregulator-api.apprenticeships.education.gov.uk
efadatacollections-stg.education.gov.uk
*.dev.lrs.education.gov.uk
help-for-early-years-providers.education.gov.uk
collectdatauat.education.gov.uk
refdata.apprenticeships.education.gov.uk
proxy.signin.education.gov.uk
ssl809273.cloudflaressl.com
status.apprenticeships.education.gov.uk
api-calculate-funding.education.gov.uk
www.primaryassessmentgateway.education.gov.uk
www.onetoonetuitiondata.education.gov.uk
dataprovision.education.gov.uk
mailshe.education.gov.uk
consult.education.gov.uk
ilsype.education.gov.uk
dev-search.apprenticeships.education.gov.uk
notifications.apprenticeships.education.gov.uk
apim-apprv-api.apprenticeships.education.gov.uk
cla.education.gov.uk
receptionbaselinetao.education.gov.uk
login.apprenticeships.education.gov.uk
efa-information-exchange.education.gov.uk

Certificate

The complete raw certificate details for proxy.signin.education.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO1h8HA5al0Cfrrqiik9
JwMTSJd7FqMIs2LXo4p2kUniphWqTjQjdRgnwCOd6TeO7zG2GL9cm/7CPDbR1GHL
e84xb5wiRgHrykV90u9ohpAkKg4z2ruGpXbrcbOlhd3MlEC8hxJN1yFUH7Fo9qYB
rmQX/KFgXMsS5kJKtKld28ePHIqAg+6Q9cLWwnfqry1/iyBnqsLt0hA9mmX8IOFK
bPIujSrC15Ucux+8D0J0lFBtFOM9DdXNz8+p01UeomLXZYUDAydYpr2xfenWprga
8FfTi5uJGpJjjpg2Gwv8Db7RtQu+LqAAeWBJ7Y/iqyieiX+C/QqWrSMsorrF5gAN
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37196836408264787694990941987
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 10:48:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-11 13:16:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Midlands'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coventry'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IM Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Education & Skills Funding Agency'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'proxy.signin.education.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19810233285262161511369395711053137755861648774479164332886792391539997202090700375452715205115075169324320244350443654532942502374600640279423443100535003938022713758217411295179385881509089350771486574593624301789111592155270155151720192097865864035609270985511419266217189027550855380461987928242149108096381867226677217058533350853138997614206702692193725411545589030300656572769750336867247674224581710820786370850464102243321995585201673954068535593017094915500634478009398339177368481906679557405758051132332127714932514865920809525033851019452143589886111099825873945779753969253705306930167462485447172689157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1532 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxy.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-dqt.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-dqt.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-dqt.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dqt.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-kts.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-kts.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-kts.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kts.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-asp.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-asp.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-asp.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asp.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-gias.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-gias.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-gias.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gias.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edd-gias.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-collect.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-collect.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-collect.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collect.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edd-collect.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-s2s.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-s2s.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-s2s.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2s.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edd-s2s.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-psp.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-psp.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-psp.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edd-psp.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-iex.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-iex.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-iex.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iex.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-kts-sa.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-kts-sa.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-kts-sa.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kts-sa.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-aforms.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-aforms.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-aforms.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edd-aforms.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aforms.signin.education.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							525a09833a865eebb1f620ca86a71459101157f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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