check-mk.brighton.ac.uk

- University of Brighton -

Issued by QuoVadis EV SSL ICA G3

About this certificate

This digital certificate with serial number 75:54:55:9c:0e:0d:a2:fd:0a:f6:bd:b2:52:9f:55:8c:45:ef:d4:ed was issued on by QuoVadis Limited.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Brighton

Company registration number: Government Entity
Organization: University of Brighton
State / Province: East Sussex
Locality: BRIGHTON
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 75:54:55:9c:0e:0d:a2:fd:0a:f6:bd:b2:52:9f:55:8c:45:ef:d4:ed
Serial Number (int): 669832640430099233565155921681050874984117818605
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: fd:4a:07:ad:53:e3:bf:31:d6:47:fc:17:e3:52:08:f0:8a:66:0b:92
AuthorityKeyId: e5:84:54:d0:90:49:9f:38:ba:f2:c9:e1:2a:08:c5:4e:9f:a0:48:3f

Fingerprint (sha1): 22:e8:a0:cc:5c:c2:fc:9e:af:19:b1:d8:c9:82:f3:15:83:fb:f9:b5
Fingerprint (sha256): 0c:11:86:91:6e:21:ff:68:74:a8:cc:42:9c:a6:9a:7f:d4:78:c5:4d:fc:1c:f1:80:2a:7f:13:51:6f:24:05:22

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevsslg3.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevsslg3.crl

Check the revocation status for certificate check-mk.brighton.ac.uk

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for check-mk.brighton.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

check-mk.brighton.ac.uk
checkmk.brighton.ac.uk
checkmk-dev.brighton.ac.uk
checkmk-test.brighton.ac.uk
check-mk-dev.brighton.ac.uk
check-mk-test.brighton.ac.uk
checkmk-pro01.brighton.ac.uk
checkmk-dev01.brighton.ac.uk
checkmk-test01.brighton.ac.uk

Other certificates including the domain name brighton.ac.uk

(limited to 100 certificates)
email.brighton.ac.uk
dataviewdev.brighton.ac.uk
idp.brighton.ac.uk
id.dev.brighton.ac.uk
evsidv.brighton.ac.uk
www.inam.brighton.ac.uk
researchers.brighton.ac.uk
shop.brighton.ac.uk
wadslive.brighton.ac.uk
staffmail.dev.brighton.ac.uk
evsipr.brighton.ac.uk
www.brighton.ac.uk
authenticate.brighton.ac.uk
wattsmedia.brighton.ac.uk
prism.brighton.ac.uk
shs.brighton.ac.uk
arch.brighton.ac.uk
pay.brighton.ac.uk
timetable.brighton.ac.uk
tel-ms-pro01.university.brighton.ac.uk
lists.brighton.ac.uk
mailer.brighton.ac.uk
data4impact.brighton.ac.uk
mysite.brighton.ac.uk
ahs.brighton.ac.uk
prism.brighton.ac.uk
alumni.brighton.ac.uk
emea-san1.blackboard.com
eu-central-1-san1.blackboard.com
mimosa.brighton.ac.uk
alumni.brighton.ac.uk
alumni.brighton.ac.uk
studentfolio.brighton.ac.uk
socialwork.brighton.ac.uk
peri.brighton.ac.uk
screenarchive.brighton.ac.uk
lyncwsext.brighton.ac.uk
unicard.brighton.ac.uk
dataview.brighton.ac.uk
voicemail.brighton.ac.uk
idp-test.brighton.ac.uk
remote.brighton.ac.uk
extranet.brighton.ac.uk
evsipr.brighton.ac.uk
blogs.brighton.ac.uk
studentcentral.brighton.ac.uk
uni.brighton.ac.uk
unicardcentral.brighton.ac.uk
evsite.brighton.ac.uk
studentcentralsupport.brighton.ac.uk
autodiscover.brighton.ac.uk
check-mk.brighton.ac.uk
peri.brighton.ac.uk
eu-central-1-san1.blackboard.com
mailer.brighton.ac.uk
efin5.brighton.ac.uk
shs.brighton.ac.uk
about.brighton.ac.uk
emea-san1.blackboard.com
smtp.brighton.ac.uk
dataview.brighton.ac.uk
staffmaildev.brighton.ac.uk
remote.brighton.ac.uk
email.brighton.ac.uk
autodiscoverdev.brighton.ac.uk
student.brighton.ac.uk
resource.brighton.ac.uk
emea-san1.blackboard.com
www.inam.brighton.ac.uk
eu-central-1-san1.blackboard.com
studentfoliotest.brighton.ac.uk
holiday.brighton.ac.uk
idp-test.brighton.ac.uk
stsdev.brighton.ac.uk
security.brighton.ac.uk
pay.brighton.ac.uk
blogs.brighton.ac.uk
sclink.brighton.ac.uk
eu-central-1-san1.blackboard.com
confirm.brighton.ac.uk
shs.brighton.ac.uk
issd.brighton.ac.uk
issd-dev.brighton.ac.uk
socialwork.brighton.ac.uk
peri.brighton.ac.uk
www.brighton.ac.uk
emea-san1.blackboard.com
transport.brighton.ac.uk
shop.brighton.ac.uk
studentcentraltestsupport.brighton.ac.uk
eu-central-1-san1.blackboard.com
authgen.brighton.ac.uk
pcbookings.brighton.ac.uk
tel-krnl-pro01.university.brighton.ac.uk
*.brighton.ac.uk
springboard.brighton.ac.uk
sportbookings.brighton.ac.uk
moviesandmemories.brighton.ac.uk
alumni.brighton.ac.uk
myinfo.brighton.ac.uk

Certificate

The complete raw certificate details for check-mk.brighton.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIyDCCBrCgAwIBAgIUdVRVnA4Nov0K9r2yUp9VjEXv1O0wDQYJKoZIhvcNAQEL
BQAwSTELMAkGA1UEBhMCQk0xGTAXBgNVBAoMEFF1b1ZhZGlzIExpbWl0ZWQxHzAd
BgNVBAMMFlF1b1ZhZGlzIEVWIFNTTCBJQ0EgRzMwHhcNMTcwODIyMTczNDM3WhcN
MTkwODIyMTc0NDAwWjCBxjETMBEGCysGAQQBgjc8AgEDEwJHQjEaMBgGA1UEDwwR
R292ZXJubWVudCBFbnRpdHkxGjAYBgNVBAUTEUdvdmVybm1lbnQgRW50aXR5MQsw
CQYDVQQGEwJHQjEUMBIGA1UECAwLRWFzdCBTdXNzZXgxETAPBgNVBAcMCEJSSUdI
VE9OMR8wHQYDVQQKDBZVbml2ZXJzaXR5IG9mIEJyaWdodG9uMSAwHgYDVQQDDBdj
aGVjay1tay5icmlnaHRvbi5hYy51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAMUkwAKuMARIBlGE1U1cAi8giz9SRh59UjrYGTHbZNeX1y2AdTyuMi27
abFzd97z0M9RTYPYtNy4Mtuut6lrFSqZnaZoCw9xHhrnrtAzhY6frvEuIiuUaBVQ
v6IEhvb4/uNmvcQ/qM/cBpr3oKA1AGgf4dY19w1AUoashw1Pn/AwChe/yAJUPqJD
5RjueGFvm/nlyoC/A6Yy+oAsPfSKLMfcYp3zkJ04zbDgsXuvoUgQXW8VxobwmfXM
oN9jnp15cz2Mq1SpEwHQ0jjb1LfoGx6HEVFttUGoB+DrMUcFTIYG50tdJwX00GH3
+ewIg9Dc9cZFYhvsPJAPuliUANu6WTMCAwEAAaOCBCgwggQkMHgGCCsGAQUFBwEB
BGwwajA5BggrBgEFBQcwAoYtaHR0cDovL3RydXN0LnF1b3ZhZGlzZ2xvYmFsLmNv
bS9xdmV2c3NsZzMuY3J0MC0GCCsGAQUFBzABhiFodHRwOi8vZXYub2NzcC5xdW92
YWRpc2dsb2JhbC5jb20wHQYDVR0OBBYEFP1KB61T478x1kf8F+NSCPCKZguSMAwG
A1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAU5YRU0JBJnzi68snhKgjFTp+gSD8wWgYD
VR0gBFMwUTBGBgwrBgEEAb5YAAJkAQIwNjA0BggrBgEFBQcCARYoaHR0cDovL3d3
dy5xdW92YWRpc2dsb2JhbC5jb20vcmVwb3NpdG9yeTAHBgVngQwBATA8BgNVHR8E
NTAzMDGgL6AthitodHRwOi8vY3JsLnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdmV2c3Ns
ZzMuY3JsMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYB
BQUHAwEwggENBgNVHREEggEEMIIBAIIXY2hlY2stbWsuYnJpZ2h0b24uYWMudWuC
FmNoZWNrbWsuYnJpZ2h0b24uYWMudWuCGmNoZWNrbWstZGV2LmJyaWdodG9uLmFj
LnVrghtjaGVja21rLXRlc3QuYnJpZ2h0b24uYWMudWuCG2NoZWNrLW1rLWRldi5i
cmlnaHRvbi5hYy51a4IcY2hlY2stbWstdGVzdC5icmlnaHRvbi5hYy51a4IcY2hl
Y2ttay1wcm8wMS5icmlnaHRvbi5hYy51a4IcY2hlY2ttay1kZXYwMS5icmlnaHRv
bi5hYy51a4IdY2hlY2ttay10ZXN0MDEuYnJpZ2h0b24uYWMudWswggF+BgorBgEE
AdZ5AgQCBIIBbgSCAWoBaAB2AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXW
idDdAAABXgsL0wMAAAQDAEcwRQIgRRNOrTcSCjbxGnEVT5oVb2/NLyduSTGaEz9o
C0QXPs4CIQD3GljiWpOmTy9V7VjNnBLuJNbFXsog6QS3RPWq28OZ7QB2ALvZ37wf
inG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABXgsL0wAAAAQDAEcwRQIgEcoW
KQisVKckgzyDo+UtPT4eyGjX9CZry82RYrH2uycCIQCMFV8QSsrebtz76sOEHgsD
l0VHbS2Cfl+qbMDfMUwY+wB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7I
DdwQAAABXgsL0wEAAAQDAEcwRQIgbX67AloIv/uCU5jrhq5w0BryJFI8Jt08J8Km
1E9U2M4CIQCX2yAjrPsqbkWi3IpzepPv6mmEs6jIMfbfNJwc7pcqVjANBgkqhkiG
9w0BAQsFAAOCAgEAVUN6wZR1GryjepckIeqH0qVfyxjdM0fMcZmn5k92seHRCu3P
NJNLY5P3PofHFBYVgAQ4eoX+qyn3V0a4jMY9d2b9hj9owZis4lZmKdKnqQOx5E5A
eVNMPm/e1PW/dIHAJHb4ZAP0wb3h0EKKjpdlJ5HoIdUpArc1z6Kj60/JRCDyVUIi
gvG086ST6pAZ1GbyOZew4v5+8Mtxu7ivsDhvZ4AXXr7DEaJB/IQvOjihMwizsvGE
TNQLYmeA/JAkgdr6ck81BkihsKLy7ntgFQ+FBxrPm3GsWiHnZeRgakgs3YZrrlo2
LqmU4co5f1ORBBCzGxuKI53PgXYbCTxFSPw3ij64OFJWFTLL6VCg3I1yxnl/NpGT
9OUXyzBLKPGMoLrLgWOswhNZ/7vqSFZUMPqxF9HfM2ORsbEiAXd8XVfm6OL/OdIy
GPQnX/Gb+PDY2JVrcSjREpdt3h5jn8ZxDFL9TMbbXFw/+ajC/VNwEXuhoYSFWN+o
/LmZiHmY8WTLGhqvrKdFaWZ4pDUncjwhT9MwzqtJivtv50k1xAWmOVhor0rR1Fsg
bUWD+GvAC+bN41UO/r/LylLH6N1PGNBCXR002qZYshFZy7vGoPsseA7e/eEPCjbm
RS7mdw86dphsK2PUpMiU0Galh8Bm/KV4J28VpJpmXPfSwcROtz/udLqD2Cc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSTAAq4wBEgGUYTVTVwC
LyCLP1JGHn1SOtgZMdtk15fXLYB1PK4yLbtpsXN33vPQz1FNg9i03Lgy2663qWsV
KpmdpmgLD3EeGueu0DOFjp+u8S4iK5RoFVC/ogSG9vj+42a9xD+oz9wGmvegoDUA
aB/h1jX3DUBShqyHDU+f8DAKF7/IAlQ+okPlGO54YW+b+eXKgL8DpjL6gCw99Ios
x9xinfOQnTjNsOCxe6+hSBBdbxXGhvCZ9cyg32OenXlzPYyrVKkTAdDSONvUt+gb
HocRUW21QagH4OsxRwVMhgbnS10nBfTQYff57AiD0Nz1xkViG+w8kA+6WJQA27pZ
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 669832640430099233565155921681050874984117818605
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis EV SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-22 17:34:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-22 17:44:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'East Sussex'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BRIGHTON'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Brighton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'check-mk.brighton.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24887068198902005796105189208596142746358911946930057168314745136051459557733325765644862631459879111417164552852954304366651735984995692771299498585017732074235059267869059376457395018650604586728410234768406664047737656788783853171113308006115517166721592961145885719246899300525500978811115199835090565774244781943227764192816345577528761605589537643328993260272712715784999690940979874240944905460734637218390947746372237724469123653757391116031288574872798630088138127845628490344400762818641369975413490914302283389275879963789810106974509171123746708449835928561558697907061092575830902169442972386534335600947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd4a07ad53e3bf31d647fc17e35208f08a660b92
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e58454d090499f38baf2c9e12a08c54e9fa0483f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (260 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'check-mk.brighton.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkmk.brighton.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkmk-dev.brighton.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkmk-test.brighton.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'check-mk-dev.brighton.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'check-mk-test.brighton.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkmk-pro01.brighton.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkmk-dev01.brighton.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkmk-test01.brighton.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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