bidev.cardiff.ac.uk

- Cardiff University -

Issued by QuoVadis EV SSL ICA G3

About this certificate

This digital certificate with serial number 76:26:2b:77:77:67:9c:e8:71:cf:bd:a2:ee:8a:00:4b:33:7b:14:f4 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cardiff University

Company registration number: Government Entity
Organization: Cardiff University
Organization unit: University IT
State / Province: Glamorganshire
Locality: CARDIFF
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 76:26:2b:77:77:67:9c:e8:71:cf:bd:a2:ee:8a:00:4b:33:7b:14:f4
Serial Number (int): 674512125755370077368061190222281948723196663028
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 69:35:d3:ad:be:83:05:e7:3a:d4:76:25:bd:ef:aa:b2:ca:7d:cb:b0
AuthorityKeyId: e5:84:54:d0:90:49:9f:38:ba:f2:c9:e1:2a:08:c5:4e:9f:a0:48:3f

Fingerprint (sha1): 7f:94:7b:92:42:70:f4:c8:73:5f:ae:2e:b8:40:ab:94:e1:09:b5:09
Fingerprint (sha256): 08:1e:20:40:db:01:12:c7:91:74:65:05:20:a5:78:6c:c0:ad:d5:75:a7:1a:16:d5:02:22:fd:b5:db:2c:4e:f4

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevsslg3.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevsslg3.crl

Check the revocation status for certificate bidev.cardiff.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bidev.cardiff.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bidev.cardiff.ac.uk

Other certificates including the domain name cardiff.ac.uk

(limited to 100 certificates)
medicinesdiscoverydata.cardiff.ac.uk
private.zacharyhill.dev
data.cardiff.ac.uk
ask.cardiff.ac.uk
bidr.cardiff.ac.uk
beta-status.astronomer.io
www.studygroup.com
api.vonagestatus.com
beta-status.astronomer.io
private.zacharyhill.dev
exampapers.cf.ac.uk
api.vonagestatus.com
private.zacharyhill.dev
cwaf.status.radwarecloud.com
beta-status.astronomer.io
roombooking.cardiff.ac.uk
private.zacharyhill.dev
status-pre.cardiff.ac.uk
www.studygroup.com
private.zacharyhill.dev
private.zacharyhill.dev
campionalumni.org
private.zacharyhill.dev
sharelatex.cs.cf.ac.uk
bidev.cardiff.ac.uk
api.vonagestatus.com
mappedsites.cardiff.ac.uk
muscat.astro.cf.ac.uk
campionalumni.org
remotesupport.cardiff.ac.uk
*.data.cardiff.ac.uk
learningcentral.cardiff.ac.uk
status.cardiff.ac.uk
campionalumni.org
www.studygroup.com
polls.cardiff.ac.uk
api.vonagestatus.com
fusion-dev.cardiff.ac.uk
community.mancosa.co.za
campionalumni.org
home.cf.ac.uk
private.zacharyhill.dev
lawpl.cardiff.ac.uk
private.zacharyhill.dev
campaigns.cardiff.ac.uk
connected.cardiff.ac.uk
status-pre.cardiff.ac.uk
api.vonagestatus.com
password-sso.cardiff.ac.uk
www.studygroup.com
www.cardiff.ac.uk
private.zacharyhill.dev
beta-status.astronomer.io
gems.cardiff.ac.uk
git.cardiff.ac.uk
*.data.cardiff.ac.uk
beta-status.astronomer.io
private.zacharyhill.dev
mssgweb02.id.add.cardiff.ac.uk
private.zacharyhill.dev
private.zacharyhill.dev
e2sapi.cardiff.ac.uk
campionalumni.org
private.zacharyhill.dev
mydispense.cardiff.ac.uk
module-evaluation.cardiff.ac.uk
www.studygroup.com
cwaf.status.radwarecloud.com
undergraduate-enews.cardiff.ac.uk
private.zacharyhill.dev
wwwstaging.cardiff.ac.uk
password.cardiff.ac.uk
extranet.cardiff.ac.uk
www.studygroup.com
api.vonagestatus.com
research.cardiff.ac.uk
vault.cardiff.ac.uk
intranet.cardiff.ac.uk
beta-status.astronomer.io
crmapi.cardiff.ac.uk
campaigns.cardiff.ac.uk
www.residences.cardiff.ac.uk
private.zacharyhill.dev
community.mancosa.co.za
gitlab.cs.cf.ac.uk
mmp.cardiff.ac.uk
xerte.cardiff.ac.uk
private.zacharyhill.dev
simstestlearn.cf.ac.uk
rssdp.cardiff.ac.uk
inside.biosi.cf.ac.uk
sitescardiff.cf.ac.uk
adfs.cardiff.ac.uk
www.studygroup.com
private.zacharyhill.dev
hmlupload.cardiff.ac.uk
helix-prod.cardiff.ac.uk
wikis.cf.ac.uk
challonershighnetwork.com
campionalumni.org

Certificate

The complete raw certificate details for bidev.cardiff.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIYDCCBkigAwIBAgIUdiYrd3dnnOhxz72i7ooASzN7FPQwDQYJKoZIhvcNAQEL
BQAwSTELMAkGA1UEBhMCQk0xGTAXBgNVBAoMEFF1b1ZhZGlzIExpbWl0ZWQxHzAd
BgNVBAMMFlF1b1ZhZGlzIEVWIFNTTCBJQ0EgRzMwHhcNMTgwNDE5MTM0MTMwWhcN
MjAwNDE5MTM1MTAwWjCB2DETMBEGCysGAQQBgjc8AgEDEwJHQjEaMBgGA1UEDwwR
R292ZXJubWVudCBFbnRpdHkxGjAYBgNVBAUTEUdvdmVybm1lbnQgRW50aXR5MQsw
CQYDVQQGEwJHQjEXMBUGA1UECAwOR2xhbW9yZ2Fuc2hpcmUxEDAOBgNVBAcMB0NB
UkRJRkYxGzAZBgNVBAoMEkNhcmRpZmYgVW5pdmVyc2l0eTEWMBQGA1UECwwNVW5p
dmVyc2l0eSBJVDEcMBoGA1UEAwwTYmlkZXYuY2FyZGlmZi5hYy51azCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMucxmmVO81cJ8D9ZgkA8ZaaXsT0Cif2
R43WB8lcWUeIi1Y4h8VZuLSxDjkixl0FyhbOAWL6+waIsYjCfs17YGT8wa+NmKID
sdl9Uyu05T6C/gOaVq87IdxIqmPmX2VCUtpUXf1X9dcJtRtryjWAXtOYpeSTbFpK
ocj8YArOxSkvZtutb2DnOEjS1d7p4gARqTL+1rljUeHIQyijlbs1V9XNNREX690n
x9M6R7A7l3vTleGDpCp0YBEoJcuTeNYiWBIyWSBms3VllIs3H/xzxvZu4JFSCvkI
SXyfb6fspJSE4OtLqhmK0jcR3dpNBcPYQy/zfVJuw7bq7PGl7ErDCOUCAwEAAaOC
A64wggOqMHgGCCsGAQUFBwEBBGwwajA5BggrBgEFBQcwAoYtaHR0cDovL3RydXN0
LnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdmV2c3NsZzMuY3J0MC0GCCsGAQUFBzABhiFo
dHRwOi8vZXYub2NzcC5xdW92YWRpc2dsb2JhbC5jb20wHQYDVR0OBBYEFGk1062+
gwXnOtR2Jb3vqrLKfcuwMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAU5YRU0JBJ
nzi68snhKgjFTp+gSD8wWgYDVR0gBFMwUTBGBgwrBgEEAb5YAAJkAQIwNjA0Bggr
BgEFBQcCARYoaHR0cDovL3d3dy5xdW92YWRpc2dsb2JhbC5jb20vcmVwb3NpdG9y
eTAHBgVngQwBATA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3JsLnF1b3ZhZGlz
Z2xvYmFsLmNvbS9xdmV2c3NsZzMuY3JsMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwHgYDVR0RBBcwFYITYmlkZXYuY2FyZGlm
Zi5hYy51azCCAfUGCisGAQQB1nkCBAIEggHlBIIB4QHfAHYAu9nfvB+KcbWTlCOX
qpJ7RzhXlQqrUugakJZkNo4e0YUAAAFi3iyozQAABAMARzBFAiAifzFCl9MN4eWE
mQ+733AVV8MwoNo/AoNFCX+C2czJLgIhAJI7QRe46j/lc4+ATNrA5FfLATynpUxg
6+LiNtEhRWq+AHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFi
3iyo6gAABAMARzBFAiB7kEi4v4xqItJl1u7vxXbL5QxOBB4QJu6rHL0kvq/oPAIh
AK667cM64WnDavRSEm6mRKda46/3SuPdR9NJKEJ+Ed46AHYAb1N2rDHwMRnYmQCk
URX/dxUcEdkCwQApBo2yCJo32RMAAAFi3iysHAAABAMARzBFAiA8z94RGIipPLUF
2O+QymcNANF6Z3F/zk1f7wcNS3R6ZQIhAOoD0zGrQBDPvDXZUEMnl9eXMll73g1P
WJFgozB5WwE3AHUAVhQGmi/XwuzT9eG9RLI+x0Z2ubyZEVzA75SYVdaJ0N0AAAFi
3iysLgAABAMARjBEAiB1/jTwo7Hsk9z+v2inx30l11K7fiQrEY3SJq/RKD2/5AIg
EPw4zy78tA88SctCMNJSriOMwnG4CZmk7CcYglRBCRgwDQYJKoZIhvcNAQELBQAD
ggIBAHRASQ1ubDPvcYfNkazDlfDse5f+ThzcLaFDr1etmumzFk/1y6NSEWYC8XBH
v/HpdXku3vXrNZ9fDv3YecRgqNCILkK00RktHqZQ8aBu7NuycmL3UCvQzk1K1Fpx
IiFvm6Lqp/9vtmmuEpFmL8zUf7RzL2K6iAFESM6kNfV9d4Rfdk3H+pmGYiRRxnQq
9u63jDCKGH0p6uIjRs4lWlLHk2+aEaVXTq1jef+Rox8ne/pf7ua8m6pW4qAOToCj
A48XS0NHj8HOPkEVd0sqIti4epu1sOJJ2WgKV+Qt7umjGMdUmTHhE5lK7x22Qk97
lfUgA1YOoxTvEzryZHhOpOVnhb1Ozw2UYnQcFa4iGmsYQuWSZii5D10BdycI6RbB
x8VpHUaYSJXGP8l4D8BFEfEb/+cVGl1Tz9eEi+5H5dspB48YoTP1kQ1qPbKhG5Lf
qL779URMX5IOoHyTj+Xd/zvbEz0rz51kx3RKX3da22r3Z3llZuCSUsnfAJsH97QM
kNT4/O9AyodM0K8YoVE0J71XiP/VqxJcNXuwpSarCBVi2AZmhGFnw5a4wuhlz6Nx
QgyaC5HAYTUk/KCY/cWSrMQk4vdM0W2AlrTbLET40GSNpf3hGg5hPX/pkJJglqT2
EspJvefmyPUUWhl6EwoOHE6AIiufGDNVM6WOB941TtG9DPWK
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5zGaZU7zVwnwP1mCQDx
lppexPQKJ/ZHjdYHyVxZR4iLVjiHxVm4tLEOOSLGXQXKFs4BYvr7BoixiMJ+zXtg
ZPzBr42YogOx2X1TK7TlPoL+A5pWrzsh3EiqY+ZfZUJS2lRd/Vf11wm1G2vKNYBe
05il5JNsWkqhyPxgCs7FKS9m261vYOc4SNLV3uniABGpMv7WuWNR4chDKKOVuzVX
1c01ERfr3SfH0zpHsDuXe9OV4YOkKnRgESgly5N41iJYEjJZIGazdWWUizcf/HPG
9m7gkVIK+QhJfJ9vp+yklITg60uqGYrSNxHd2k0Fw9hDL/N9Um7Dturs8aXsSsMI
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 674512125755370077368061190222281948723196663028
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis EV SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-19 13:41:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-19 13:51:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Glamorganshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CARDIFF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cardiff University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'bidev.cardiff.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25703684565891849925551338301227919177441243598581739337475739258933144534259240285522111549269608305526998488688144574004081316492911493734081346666926325505615105679745526692773986274777191271820628520028754384338624868044379617867179170787650597046785158600438374921849734537311601826535854229232510904118772574667998389262509195043114831988370740489431431404984348953005544043874069606878082047190890585577764587960115928302556423524279741274576345133904791652870384557317047913414435397935234752100730427665886246867872877825515339812402166986452821665002192842032762032856423101971568525319562685982683479345381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6935d3adbe8305e73ad47625bdefaab2ca7dcbb0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e58454d090499f38baf2c9e12a08c54e9fa0483f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidev.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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