mappedsites.cardiff.ac.uk

- Cardiff University -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 1c:83:66:4d:c4:b0:c2:99:95:63:b6:11:66:7e:24:82:8d:3d:20:7d was issued on by QuoVadis Limited.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cardiff University

Organization: Cardiff University
Organization unit: University IT
State / Province: Glamorganshire
Locality: CARDIFF
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:83:66:4d:c4:b0:c2:99:95:63:b6:11:66:7e:24:82:8d:3d:20:7d
Serial Number (int): 162782051120428789144040273759130045596552732797
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: e4:55:ec:dc:29:15:9f:b5:ac:1c:7b:6c:fd:39:d6:74:a3:d0:07:6b
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 94:80:d3:de:01:bc:54:86:69:b7:ad:56:7e:13:b4:d1:25:6b:e8:54
Fingerprint (sha256): 08:ed:f6:54:21:30:f2:6a:6e:1f:cc:31:be:2f:62:86:53:bd:f8:29:d0:6d:46:2c:b9:35:1f:e6:d4:50:4c:ae

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate mappedsites.cardiff.ac.uk

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mappedsites.cardiff.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mappedsites.cardiff.ac.uk
www.gw4water.com
gw4water.com
meguk.ac.uk
www.meguk.ac.uk
digidol.cf.ac.uk
www.digidol.cf.ac.uk
innodc.org
www.innodc.org
www.catalysis-cdt.ac.uk
catalysis-cdt.ac.uk
www.gw4bridgingthegap.com
gw4bridgingthegap.com
www.asera.org.uk
asera.org.uk
www.gw4cancer.com
gw4cancer.com
gw4-cat.ac.uk
www.gw4fresh.co.uk
gw4fresh.co.uk
hftc.cardiff.ac.uk
walesmep.ac.uk
www.walesmep.ac.uk
cures.cardiff.ac.uk
www.gw4biomed.ac.uk
www.cpel.ac.uk
www.dcssproject.net
dcssproject.net
www.severnestuarypartnership.org.uk
severnestuarypartnership.org.uk
www.severnestuarycoastalgroup.org.uk
www.lsrnw.ac.uk
cmerg.engineering.cf.ac.uk
concerts.cardiff.ac.uk
routesintolanguagescymru.co.uk
www.hepcw.ac.uk
compoundsemiconductorhub.org
cardiffhomeworkclubs.co.uk
www.cardiffhomeworkclubs.co.uk
www.cukc.org.uk
cukc.org.uk
www.lessonsfrompiracy.net
www.severnestuary.net
severnestuary.net
www.hewit.ac.uk
www.romtext.org.uk
bonifazi-group.eu
bonifazi-group.co.uk
www.vaughanassociation.org
vaughanassociation.org

Other certificates including the domain name cardiff.ac.uk

(limited to 100 certificates)
medicinesdiscoverydata.cardiff.ac.uk
private.zacharyhill.dev
data.cardiff.ac.uk
ask.cardiff.ac.uk
bidr.cardiff.ac.uk
beta-status.astronomer.io
www.studygroup.com
api.vonagestatus.com
beta-status.astronomer.io
private.zacharyhill.dev
exampapers.cf.ac.uk
api.vonagestatus.com
private.zacharyhill.dev
cwaf.status.radwarecloud.com
beta-status.astronomer.io
roombooking.cardiff.ac.uk
private.zacharyhill.dev
status-pre.cardiff.ac.uk
www.studygroup.com
private.zacharyhill.dev
private.zacharyhill.dev
campionalumni.org
private.zacharyhill.dev
sharelatex.cs.cf.ac.uk
bidev.cardiff.ac.uk
api.vonagestatus.com
mappedsites.cardiff.ac.uk
muscat.astro.cf.ac.uk
campionalumni.org
remotesupport.cardiff.ac.uk
*.data.cardiff.ac.uk
learningcentral.cardiff.ac.uk
status.cardiff.ac.uk
campionalumni.org
www.studygroup.com
polls.cardiff.ac.uk
api.vonagestatus.com
fusion-dev.cardiff.ac.uk
community.mancosa.co.za
campionalumni.org
home.cf.ac.uk
private.zacharyhill.dev
lawpl.cardiff.ac.uk
private.zacharyhill.dev
campaigns.cardiff.ac.uk
connected.cardiff.ac.uk
status-pre.cardiff.ac.uk
api.vonagestatus.com
password-sso.cardiff.ac.uk
www.studygroup.com
www.cardiff.ac.uk
private.zacharyhill.dev
beta-status.astronomer.io
gems.cardiff.ac.uk
git.cardiff.ac.uk
*.data.cardiff.ac.uk
beta-status.astronomer.io
private.zacharyhill.dev
mssgweb02.id.add.cardiff.ac.uk
private.zacharyhill.dev
private.zacharyhill.dev
e2sapi.cardiff.ac.uk
campionalumni.org
private.zacharyhill.dev
mydispense.cardiff.ac.uk
module-evaluation.cardiff.ac.uk
www.studygroup.com
cwaf.status.radwarecloud.com
undergraduate-enews.cardiff.ac.uk
private.zacharyhill.dev
wwwstaging.cardiff.ac.uk
password.cardiff.ac.uk
extranet.cardiff.ac.uk
www.studygroup.com
api.vonagestatus.com
research.cardiff.ac.uk
vault.cardiff.ac.uk
intranet.cardiff.ac.uk
beta-status.astronomer.io
crmapi.cardiff.ac.uk
campaigns.cardiff.ac.uk
www.residences.cardiff.ac.uk
private.zacharyhill.dev
community.mancosa.co.za
gitlab.cs.cf.ac.uk
mmp.cardiff.ac.uk
xerte.cardiff.ac.uk
private.zacharyhill.dev
simstestlearn.cf.ac.uk
rssdp.cardiff.ac.uk
inside.biosi.cf.ac.uk
sitescardiff.cf.ac.uk
adfs.cardiff.ac.uk
www.studygroup.com
private.zacharyhill.dev
hmlupload.cardiff.ac.uk
helix-prod.cardiff.ac.uk
wikis.cf.ac.uk
challonershighnetwork.com
campionalumni.org

Certificate

The complete raw certificate details for mappedsites.cardiff.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RtDyFnfz0BOvT5Vt4xS
1DDtoIxGdezmKswvpX8I+5kZXQZg/B7hR4mmOTs9xnmfM6jmdJo//kcOVQnDiuf9
ZdWdfL1kz75Bm+5WwqoyOpgyB0B2FRZuiSvUm8XVz5F3ifjYT4zEMA9/GyAuDEYm
hm7qcih1Ip1MPpOxm2kcAgBXasjmR0+M63Q3yb08RoVSEVcZrgwdCXNIBUqeY6JG
fKnrbLnQNu0FQMgAeNseS05lWooU5XvVbIVQwQoqymDZC6nPToSUIGDMeYSSSuBD
oIf8aL94jF8fLWKwgJHJsDR5gcFPJz9i7tObC7EJHyrPNNKgx0KNffh+gYH2dwL+
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 162782051120428789144040273759130045596552732797
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-21 14:19:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-21 14:29:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Glamorganshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CARDIFF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cardiff University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mappedsites.cardiff.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26397250499978297870223940803573110934910691459542427302651267177841158160766219628957760239056422542610329099376700417539658772219117702439366343783954013845558832356148044128309949747096995993341073127948015996724763132916631510539288523618035987324780342710409119469123787259557242017568967699414982931785378613158125670126144684857637117309519562756991259118257064360410539677980431316127120015768224455381303200151892990314742934190373850103228482065659732299748184097343578820028333047421814043133117247952377063299934774427480283965306874667524317386328563922131824927893719462539614741100577974687538765561493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1071 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mappedsites.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gw4water.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw4water.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meguk.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meguk.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digidol.cf.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digidol.cf.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innodc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innodc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catalysis-cdt.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalysis-cdt.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gw4bridgingthegap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw4bridgingthegap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asera.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asera.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gw4cancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw4cancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw4-cat.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gw4fresh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw4fresh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hftc.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walesmep.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walesmep.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cures.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gw4biomed.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpel.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcssproject.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcssproject.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.severnestuarypartnership.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'severnestuarypartnership.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.severnestuarycoastalgroup.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lsrnw.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmerg.engineering.cf.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concerts.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'routesintolanguagescymru.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hepcw.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compoundsemiconductorhub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardiffhomeworkclubs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardiffhomeworkclubs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cukc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cukc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lessonsfrompiracy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.severnestuary.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'severnestuary.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hewit.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.romtext.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonifazi-group.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonifazi-group.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaughanassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaughanassociation.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e455ecdc29159fb5ac1c7b6cfd39d674a3d0076b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0039eb5c897c621b1d3c828d73fc1334df73117022fe7ad2895ccb2eeb06c025db381a2f7b01365bdfbf26462bfbe95011c9f25abd1ff9d4f658675b3f2d244c905ee7e9aa31901e7531efbf821f05d480d84bf036e46e5153bb0e9eb8991610be181651eb4de85c18e37cfa599eb38ab071673e1938fc8b3b4b1262588f848c186175eb311decc6096f61ac81b852871a233fe6546c0beeb82a2490e82232b293a30b91a93f97ff5055fbcaaf4d67049adecff7926edf6161d2158f6334f6f12eafb0aaa1d739fdeafa90e75b1fb6b3eed37ac46c9351e72dc3743c6d8a7d1888d55faafb2350db850442245203a57e3ecf2ea1579f6aa2bcecc9118aa14c0748fb86b7d8901f1c4ef1fffdc463230a258d36bf52ab30b164a1a45040c9f1d2d28763f0c71cecaaf63c4bac2291248007f30d1a260e97da84e6d9b6630569b3934c2a5c7d96afc859f63e39b88d9a76281dbe46371cd8c95059f6d3b234bd10293ead60df286a89d53eaacf9bda72c9f2a19a5aabb3b237f4814a59b7c7881af43b3edc9cf2042fa107324a7c03f6657301e53f16d63459bc6726a9eee6bef4c6c8b95ed1b8b43face1994381641f577247b585c40d6a22895ec3dcfac3beb4f476500f624997d0b13b4c992846c37538996dab8e5406362a09e79c318e2ee400264ba5b395163b7525f388945e8257b2ad0a1d0b1938cf64152b3932b5318555