cran.ma.imperial.ac.uk
- Imperial College of Science, Technology and Medicine -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 9d:88:7e:7b:04:cc:ef:f8:a1:e4:55:e5:df:f3:ee:81 was issued on by GEANT Vereniging.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Imperial College of Science, Technology and Medicine
Organization:
Imperial College of Science, Technology and Medicine
State / Province:
London, City of
Country: GB
Country: GB
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 9d:88:7e:7b:04:cc:ef:f8:a1:e4:55:e5:df:f3:ee:81Serial Number (int): 209397513041152272106899041456659623553
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: aa:1a:09:90:e5:3d:fc:ae:25:f0:3e:dc:4c:15:5f:27:c6:88:d0:36
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 63:1c:0b:72:b4:b3:9c:bf:bb:89:23:2c:59:37:f6:6a:fc:59:e6:13
Fingerprint (sha256): 0a:87:30:29:9e:0c:42:7c:e9:d6:fd:0e:cb:0b:f1:e4:f7:5e:e3:21:e0:16:52:5c:4e:37:4a:4a:08:57:a0:24
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate cran.ma.imperial.ac.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cran.ma.imperial.ac.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cran.ma.imperial.ac.uk
www.cran.ma.imperial.ac.uk
www.cran.ma.imperial.ac.uk
Other certificates including the domain name imperial.ac.uk
(limited to 100 certificates)
admissions.emeritus.org
accreditation.lumanity.com
alumnicredentials.kcl.ac.uk
www3.imperial.ac.uk
achievements.launchyou.com
forms.imperial.ac.uk
plexus.imperial.ac.uk
achievements.launchyou.com
exchange.imperial.ac.uk
eu.prod.campusgroups.com
shibboleth.imperial.ac.uk
remotehelp.ic.ac.uk
events.imperial.ac.uk
ichtb.med.imperial.ac.uk
accreditation.lumanity.com
servicemgtdev.imperial.ac.uk
wwwf.imperial.ac.uk
eu.prod.campusgroups.com
data.hpc.imperial.ac.uk
dataman.bioinformatics.ic.ac.uk
library-search.imperial.ac.uk
plexus.imperial.ac.uk
achievements.launchyou.com
icva.hep.ph.ic.ac.uk
gallego.bg.ic.ac.uk
rpssicprj06.imperial.ac.uk
office.imperial.ac.uk
ukcosmos.imperial.ac.uk
secureaccess.imperial.ac.uk
achievements.launchyou.com
ictsmartprd.cc.ic.ac.uk
wwwd.imperial.ac.uk
saml.imperial.ac.uk
accreditation.lumanity.com
media.imperial.ac.uk
ictprintservice-colour.cc.ic.ac.uk
fseuc-2.freshservice.com
cran.ma.imperial.ac.uk
admissions.emeritus.org
zenoss.hpc.imperial.ac.uk
accreditation.lumanity.com
cran.ma.imperial.ac.uk
rpssicprj03.imperial.ac.uk
eu.prod.campusgroups.com
search.imperial.ac.uk
accreditation.lumanity.com
www.counselling-form.imperial.ac.uk
search.imperial.ac.uk
admissions.emeritus.org
support.klaxon.io
hml.imperial.ac.uk
www.medbio.imperial.ac.uk
halls.imperial.ac.uk
plexus.imperial.ac.uk
imperial.ac.uk
prdsoa.imperial.ac.uk
wlsprd.imperial.ac.uk
mobile.imperial.ac.uk
imperial.ac.uk
www1.imperial.ac.uk
ictu-trial.cc.ic.ac.uk
admissions.emeritus.org
www3.imperial.ac.uk
wiki.imperial.ac.uk
admissions.emeritus.org
google.imperial.ac.uk
rpssicissan.imperial.ac.uk
forms.imperial.ac.uk
ictsgw.cc.ic.ac.uk
fseuc-2.freshservice.com
events.imperial.ac.uk
hml.imperial.ac.uk
exec-info.imperial.ac.uk
dcwadmin.imperial.ac.uk
asset-library.imperial.ac.uk
campaigns.imperial.ac.uk
webact.org
remotehelp.ic.ac.uk
www.inform.imperial.ac.uk
icis.imperial.ac.uk
webact.org
spam.ic.ac.uk
google.imperial.ac.uk
estore.imperial.ac.uk
ucu.imperial.ac.uk
fseuc-2.freshservice.com
www3.imperial.ac.uk
www1.imperial.ac.uk
jetpac.app
icseclzt.cc.ic.ac.uk
ictprintservice-mobile.imperial.ac.uk
wwwtest.imperial.ac.uk
www1.imperial.ac.uk
appstream.ic.ac.uk
ib-programmes.imperial.ac.uk
ictprintservice-www-dev.cc.imperial.ac.uk
fseuc-2.freshservice.com
fileexchange.imperial.ac.uk
ict-printservice-www.cc.imperial.ac.uk
google.imperial.ac.uk
accreditation.lumanity.com
alumnicredentials.kcl.ac.uk
www3.imperial.ac.uk
achievements.launchyou.com
forms.imperial.ac.uk
plexus.imperial.ac.uk
achievements.launchyou.com
exchange.imperial.ac.uk
eu.prod.campusgroups.com
shibboleth.imperial.ac.uk
remotehelp.ic.ac.uk
events.imperial.ac.uk
ichtb.med.imperial.ac.uk
accreditation.lumanity.com
servicemgtdev.imperial.ac.uk
wwwf.imperial.ac.uk
eu.prod.campusgroups.com
data.hpc.imperial.ac.uk
dataman.bioinformatics.ic.ac.uk
library-search.imperial.ac.uk
plexus.imperial.ac.uk
achievements.launchyou.com
icva.hep.ph.ic.ac.uk
gallego.bg.ic.ac.uk
rpssicprj06.imperial.ac.uk
office.imperial.ac.uk
ukcosmos.imperial.ac.uk
secureaccess.imperial.ac.uk
achievements.launchyou.com
ictsmartprd.cc.ic.ac.uk
wwwd.imperial.ac.uk
saml.imperial.ac.uk
accreditation.lumanity.com
media.imperial.ac.uk
ictprintservice-colour.cc.ic.ac.uk
fseuc-2.freshservice.com
cran.ma.imperial.ac.uk
admissions.emeritus.org
zenoss.hpc.imperial.ac.uk
accreditation.lumanity.com
cran.ma.imperial.ac.uk
rpssicprj03.imperial.ac.uk
eu.prod.campusgroups.com
search.imperial.ac.uk
accreditation.lumanity.com
www.counselling-form.imperial.ac.uk
search.imperial.ac.uk
admissions.emeritus.org
support.klaxon.io
hml.imperial.ac.uk
www.medbio.imperial.ac.uk
halls.imperial.ac.uk
plexus.imperial.ac.uk
imperial.ac.uk
prdsoa.imperial.ac.uk
wlsprd.imperial.ac.uk
mobile.imperial.ac.uk
imperial.ac.uk
www1.imperial.ac.uk
ictu-trial.cc.ic.ac.uk
admissions.emeritus.org
www3.imperial.ac.uk
wiki.imperial.ac.uk
admissions.emeritus.org
google.imperial.ac.uk
rpssicissan.imperial.ac.uk
forms.imperial.ac.uk
ictsgw.cc.ic.ac.uk
fseuc-2.freshservice.com
events.imperial.ac.uk
hml.imperial.ac.uk
exec-info.imperial.ac.uk
dcwadmin.imperial.ac.uk
asset-library.imperial.ac.uk
campaigns.imperial.ac.uk
webact.org
remotehelp.ic.ac.uk
www.inform.imperial.ac.uk
icis.imperial.ac.uk
webact.org
spam.ic.ac.uk
google.imperial.ac.uk
estore.imperial.ac.uk
ucu.imperial.ac.uk
fseuc-2.freshservice.com
www3.imperial.ac.uk
www1.imperial.ac.uk
jetpac.app
icseclzt.cc.ic.ac.uk
ictprintservice-mobile.imperial.ac.uk
wwwtest.imperial.ac.uk
www1.imperial.ac.uk
appstream.ic.ac.uk
ib-programmes.imperial.ac.uk
ictprintservice-www-dev.cc.imperial.ac.uk
fseuc-2.freshservice.com
fileexchange.imperial.ac.uk
ict-printservice-www.cc.imperial.ac.uk
google.imperial.ac.uk
Certificate
The complete raw certificate details for cran.ma.imperial.ac.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHnTCCBYWgAwIBAgIRAJ2IfnsEzO/4oeRV5d/z7oEwDQYJKoZIhvcNAQEMBQAw RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIyMDgwMzAwMDAwMFoXDTIzMDgwMzIz NTk1OVowgYcxCzAJBgNVBAYTAkdCMRgwFgYDVQQIEw9Mb25kb24sIENpdHkgb2Yx PTA7BgNVBAoTNEltcGVyaWFsIENvbGxlZ2Ugb2YgU2NpZW5jZSwgVGVjaG5vbG9n eSBhbmQgTWVkaWNpbmUxHzAdBgNVBAMTFmNyYW4ubWEuaW1wZXJpYWwuYWMudWsw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUTV/EVXjmvAJaoOOJqfPJ fiVnELHSFIXo7B9rL0j1VyPe6XaXbdi+xc6chm8rJJSHWwaJX3aCIqIdGsm7FVli Qvf8k7HcvyEM8vI2e93nuf9A2+srWCPiBn+6U4JddZ2Gw6cxvX7lADoMX9d+fvxs ruSpQM6bOjir2ALV8bkdQlkxKrWv61VEv9+n4EHAMzgRWRzRle/O0vq4SYnMeM1j 93oTTR9PXG8TXL/MzS8GjuhuCLGkYaPeMETmKUpYp9t1xis/0B/ept9VJ2srA0BR t3evFoy5Q+MtokTmuAsB6qIooxIIvXE3Nry1tvbSjVRrQB69hxcq97xvkZBQM1Qn AgMBAAGjggNEMIIDQDAfBgNVHSMEGDAWgBRvHTVJEGwy+lmgnryK6B+VvnF6DDAd BgNVHQ4EFgQUqhoJkOU9/K4l8D7cTBVfJ8aI0DYwDgYDVR0PAQH/BAQDAgWgMAwG A1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1Ud IARCMEAwNAYLKwYBBAGyMQECAk8wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0 aWdvLmNvbS9DUFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9H RUFOVC5jcmwuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcmwwdQYIKwYBBQUH AQEEaTBnMDoGCCsGAQUFBzAChi5odHRwOi8vR0VBTlQuY3J0LnNlY3RpZ28uY29t L0dFQU5UT1ZSU0FDQTQuY3J0MCkGCCsGAQUFBzABhh1odHRwOi8vR0VBTlQub2Nz cC5zZWN0aWdvLmNvbTA9BgNVHREENjA0ghZjcmFuLm1hLmltcGVyaWFsLmFjLnVr ghp3d3cuY3Jhbi5tYS5pbXBlcmlhbC5hYy51azCCAX0GCisGAQQB1nkCBAIEggFt BIIBaQFnAHUArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGCYqGv IAAABAMARjBEAiA2t0k+Gqezp/sYaPfAL0TOIe4q2kjghEkb093QNqW2lQIgffD7 7LHeTS5kTQXxZtBhEkGqiD6JA/XpASb+wm9Q7KkAdgB6MoxU2LcttiDqOOBSHumE FnAyE4VNO9IrwTpXo1LrUgAAAYJioa7tAAAEAwBHMEUCIQCm3EyN+nd7BBmXfTgl +blJC8Fg7SbQtRoNfXk3MPRXdQIgTSv6nlbiQeNdTqUvKqbrDEDAU6O1+Tv/oW5l QsC3sK0AdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYJioa7D AAAEAwBHMEUCIQDq7VtNxV/hccdfounifBlzzOc52xGsqYoCJbQsJCJkGQIgMCO6 w1aEdmSNFTYyZLbi3aAWW6sijiIO1cwON+77ZzIwDQYJKoZIhvcNAQEMBQADggIB AD7xGcG7EnpT5Ai0eig0O5I05PqsbXqyrIq3qCOEEhPwM2pORfAsZ6eOE7ODOE+s ynbYZ4MAimUVZ7nzqPwvfJ51mg8Qrg0RHHaMs51R6HrispXcywwvATQ3pejs/cdd DuZQZ5yZ5XK+B9LfsSiQfRYe8fCHJf9qinvKeQZevSlxl2VgHnlofno0AKr6zIFs P63LBtzKafkk+xmWC6s61Go30qY91Uf8NoTt6tDetKz1J7HB0USDDMJK59S2cWlo OArfgbtupZJCGxgJDfZPSylPmUoLeAOl0200VxIw3/N+vVdZ8FdwTrNhhzWY1SkT sTkhL0NCy4YUNMnkAIisc3GpU6tvpZnPS/6DnOC2sOcjwVSxGSY5mxL96ZVb6arP NUrk/yy3laA9JbD2/ogWe7At0HFTLCe81AsQ8t5+N6ifsq0aqsFMFIyfnFvOSGZo iOF7Ud7u/1GjlYvfc3xTXTLlV014R37VwjxbfZA62tylbKOFjpDoeO5KfKAPKSOr aKGJ8LFoN+nvX6CVX31b4TfXjLHIEN53uHKkjwPv8sfVopVQ2P49oqrVzW+d1a// sF49FoEaMY49jYiaQPyPgCY7jEK//QPZGoSVSFg2V5tzdeZ/oZsCeZcRyaeyN5JV Q+28i836gso06HnXDUFN2RbMCroZUxTSDmNIRj9fH6jm -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E1fxFV45rwCWqDjianz yX4lZxCx0hSF6Owfay9I9Vcj3ul2l23YvsXOnIZvKySUh1sGiV92giKiHRrJuxVZ YkL3/JOx3L8hDPLyNnvd57n/QNvrK1gj4gZ/ulOCXXWdhsOnMb1+5QA6DF/Xfn78 bK7kqUDOmzo4q9gC1fG5HUJZMSq1r+tVRL/fp+BBwDM4EVkc0ZXvztL6uEmJzHjN Y/d6E00fT1xvE1y/zM0vBo7obgixpGGj3jBE5ilKWKfbdcYrP9Af3qbfVSdrKwNA Ubd3rxaMuUPjLaJE5rgLAeqiKKMSCL1xNza8tbb20o1Ua0AevYcXKve8b5GQUDNU JwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 209397513041152272106899041456659623553 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London, City of' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Imperial College of Science, Technology and Medicine' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cran.ma.imperial.ac.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26800675238410894335859489109675023511768705974244588252425656403278852748736154301114810451989161405501950007741256995047687686046140166093155385696727484917002597786507096000582650237340049474712851174350843509761782886702242495939763711217790792598658150473771774368429497971819568198477211281030606741981896614789781631933229866874272218090915558833889289628824802639901111412631107321877632603293105770444223645582093295226525756320579772459708854069077772243914862986383607877254284114650242091190147978774099470154846723162284795074676697696706793040454149717237615875055200950243780365999163843302521163699239 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) aa1a0990e53dfcae25f03edc4c155f27c688d036 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cran.ma.imperial.ac.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cran.ma.imperial.ac.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018262a1af200000040300463044022036b7493e1aa7b3a7fb1868f7c02f44ce21ee2ada48e084491bd3ddd036a5b69502207df0fbecb1de4d2e644d05f166d0611241aa883e8903f5e90126fec26f50eca90076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018262a1aeed0000040300473045022100a6dc4c8dfa777b0419977d3825f9b9490bc160ed26d0b51a0d7d793730f4577502204d2bfa9e56e241e35d4ea52f2aa6eb0c40c053a3b5f93bffa16e6542c0b7b0ad007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018262a1aec30000040300473045022100eaed5b4dc55fe171c75fa2e9e27c1973cce739db11aca98a0225b42c2422641902203023bac3568476648d15363264b6e2dda0165bab228e220ed5cc0e37eefb6732 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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