kclpure.kcl.ac.uk

- King's College London -

Issued by GEANT EV RSA CA 4

About this certificate

This digital certificate with serial number f3:00:ff:c5:bb:d1:08:61:90:e0:c9:d5:c3:f0:cc was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

King's College London

Company registration number: RC000297
Organization: King's College London
State / Province: London, City of
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): f3:00:ff:c5:bb:d1:08:61:90:e0:c9:d5:c3:f0:cc
Serial Number (int): 1261748401001007443411149677490598092
Serial Number lenght: 120 bits, 15 octets

SubjectKeyId: 86:2a:e5:04:6e:d4:b1:28:49:65:d7:5d:e5:02:18:12:92:50:a8:1c
AuthorityKeyId: b6:20:0e:ae:a3:cb:e9:55:03:06:13:66:d4:ac:be:27:90:54:60:f3

Fingerprint (sha1): d0:a0:90:b8:ab:c7:00:83:e0:77:cf:09:09:a1:00:04:a7:32:0a:46
Fingerprint (sha256): 0b:51:08:b2:ce:c2:af:e2:6a:95:3f:0d:34:4a:25:2f:9f:5f:3c:91:a8:4f:98:72:a2:d6:6d:1e:a1:7b:23:e3

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTEVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTEVRSACA4.crl

Check the revocation status for certificate kclpure.kcl.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kclpure.kcl.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kclpure.kcl.ac.uk
www.kclpure.kcl.ac.uk

Other certificates including the domain name kcl.ac.uk

(limited to 100 certificates)
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
www.brightlinks.org
www.brightlinks.org
www.brightlinks.org
accreditation.lumanity.com
alumnicredentials.kcl.ac.uk
covid-testing.kcl.ac.uk
www.brightlinks.org
support.kcl.ac.uk
addneuromedsrs.kcl.ac.uk
achievements.launchyou.com
charm.kcl.ac.uk
training.kcl.ac.uk
achievements.launchyou.com
s2lab.kcl.ac.uk
www.brightlinks.org
charm.kcl.ac.uk
www.brightlinks.org
ems.nms.kcl.ac.uk
www.ctr.kcl.ac.uk
www.kcl.ac.uk
thestrandgroup.kcl.ac.uk
www.brightlinks.org
charm.kcl.ac.uk
mentoring.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
accreditation.lumanity.com
www.brightlinks.org
mentoring.kcl.ac.uk
www.brightlinks.org
mentoring.kcl.ac.uk
alumni.kcl.ac.uk
placement.kcl.ac.uk
www.brightlinks.org
athenaswan.kdl.kcl.ac.uk
triangle.mth.kcl.ac.uk
cturandomisationmvc.iop.kcl.ac.uk
*.libproxy.kcl.ac.uk
blogs.kcl.ac.uk
www.brightlinks.org
iospe.kcl.ac.uk
www.brightlinks.org
amdb.isd.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
mentoring.kcl.ac.uk
san01.hosted.exlibrisgroup.com
mentoring.kcl.ac.uk
automation.platform.kcl.ac.uk
achievements.launchyou.com
librarysearch.kcl.ac.uk
sharc.kcl.ac.uk
media.kcl.ac.uk
www.brightlinks.org
mentoring.kcl.ac.uk
nmmoodle.kcl.ac.uk
kclsfbpool01.kclad.ds.kcl.ac.uk
www.brightlinks.org
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
api.erg.kcl.ac.uk
ircyr.kcl.ac.uk
mentoring.kcl.ac.uk
khcn.kcl.ac.uk
mentoring.kcl.ac.uk
library.kcl.ac.uk
achievements.launchyou.com
mentoring.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
curium.nms.kcl.ac.uk
radiusacsd.kclad.ds.kcl.ac.uk
www.brightlinks.org
accessedge1.mykcl.info
www.brightlinks.org
accreditation.lumanity.com
keats.kcl.ac.uk
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
www.brightlinks.org
csgs.kcl.ac.uk
libcal.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
www.isd.kcl.ac.uk
www.brightlinks.org
kdl.kcl.ac.uk
mmee.kdl.kcl.ac.uk
www.brightlinks.org
mentoring.kcl.ac.uk
kclpure.kcl.ac.uk
testlibrary.cc.kcl.ac.uk
accreditation.lumanity.com
s400.kdl.kcl.ac.uk

Certificate

The complete raw certificate details for kclpure.kcl.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxQVWwkQLbFZn14VIZSos
qeWH7IBCRSf9XYkMCzsFDq0EZurjHXAzfYvHyHtgu6DUi2xXRkud7gm+nFhvRi9e
ePIthrA30B3oBHEzb0E/qC19Kd0EthfOV7z9gNLJtDkr3n/wDIQVmpt55AjCmFYk
UgZyfzGgLlkeR+5rLVfiFfJagrBXzk2NxIX+C90tAtFYO/FSHmV6fFmYlFa7xp5z
+PhhWWvqqPlosGJOrueUVYVoAquyqnKBKl8mtQTFkku46y1sleZpqQBzQlQ7Mnd1
+zD1vjCLE8Zk0xBAjmJdZNZsNHL9LbAL79CtPe+JaYcT1ZfW+IXzafrdrQrcG8ih
LxeoxgTIKDD72OzsjoUI2StaloPyzaNbzHdWiKLrkq86AOdNDTHXL3/E+qUkW4Bw
25OwkAu2BGuw3KDC5E5fMweY0V/oIE5GI4RMdGIqaPSUNxIIrio2y3sNHix5S+27
fxT+/xU4XTPAjmAC3Z2Oq9zUrLU3p1M8W0bM7foyM0yKfdMAdT+CtE++LRF4h8i2
9zRodwNRISY+94M3ukEx/tf1vDZdH8JUuqliKFgsDFI4EUe7PAeV75mb3vwlvHuS
K2jl3bDZ789wso1q+lH1URR1iVqcBLC8MNxDaoeQhByv0XqFRhJeEIPTYlI5wv7t
BJkVGCLNkaU1FhUH5mfe++8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1261748401001007443411149677490598092
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT EV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RC000297'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London, City of'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'King's College London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kclpure.kcl.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803774962723786924133029707568737881175889022315918987028515235446697912766623668401205301775819023005147006288814862825368091106404867411153645123228273080884438460375510286747330781730556663391048224766961383091036871938722729848502986556274508562844723324961967876945088674643300399868501955364602582811571139359441504597177212417219423271772639852580486148322663385964749246353167780121923224082306229669859468844658859305732756780335324686714943228147957732958910779670811510059552020491622322149731617174178206299474181444567209200269569941053943245296574351871886952672953608305764730515050663111888605544813974638231956670914142727382541524808578375884563650218354120734349944226110086902971903179744743094475297519043301001712425747581307565532101065997297020447950149242980597561771606300440930761810181391056422793618400986113940278561431610759675341526154291770000366151028689735847531436203466607759510564102603486188578380906730051249261659371749027865765127210413594486498847499351569775685555820888560509471906063683395431052620240431313987333481883584989286315398343527008869978092557065918075678813519712443301460200401912567638185704598084561597708672480372382526632028489922754934940696064149586043631647896566767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b6200eaea3cbe95503061366d4acbe27905460f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							862ae5046ed4b1284965d75de50218129250a81c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTEVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTEVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kclpure.kcl.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kclpure.kcl.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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