lists.westminster.ac.uk

- University of Westminster -

Issued by QuoVadis EV SSL ICA G3

About this certificate

This digital certificate with serial number 29:df:cf:c3:b0:f9:e9:01:35:64:4c:5f:3f:85:e0:25:f4:f2:e4:94 was issued on by QuoVadis Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Westminster

Company registration number: 977818
Organization: University of Westminster
Organization unit: ISS
State / Province: Greater London
Locality: LONDON
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 29:df:cf:c3:b0:f9:e9:01:35:64:4c:5f:3f:85:e0:25:f4:f2:e4:94
Serial Number (int): 239059786616540908481287728493173961642124436628
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 98:3c:8e:ad:d1:e4:c6:60:6e:27:d7:47:12:15:26:58:71:75:49:90
AuthorityKeyId: e5:84:54:d0:90:49:9f:38:ba:f2:c9:e1:2a:08:c5:4e:9f:a0:48:3f

Fingerprint (sha1): 33:ae:c9:1d:8c:f5:b7:d7:77:f0:ef:bc:96:1d:93:71:7f:c3:cd:36
Fingerprint (sha256): 0d:0a:00:9c:5a:65:bc:1a:06:aa:f7:74:a0:62:68:92:88:ba:19:82:6a:25:81:5e:68:4c:c5:74:b8:02:da:40

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevsslg3.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevsslg3.crl

Check the revocation status for certificate lists.westminster.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lists.westminster.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lists.westminster.ac.uk
www.lists.westminster.ac.uk

Other certificates including the domain name westminster.ac.uk

(limited to 100 certificates)
learning.westminster.ac.uk
your.westminster.ac.uk
sgd.westminster.ac.uk
identity.westminster.ac.uk
sni.cloudflaressl.com
ssl758755.cloudflaressl.com
svn.ecs.westminster.ac.uk
bbreportingproxy.westminster.ac.uk
ssl758755.cloudflaressl.com
smtpout.westminster.ac.uk
prospect.westminster.ac.uk
support.ecs.westminster.ac.uk
bomgar.westminster.ac.uk
wificon.westminster.ac.uk
login.ecs.westminster.ac.uk
webmail.westminster.ac.uk
emea-san1.blackboard.com
upload.ecs.westminster.ac.uk
library-catalogue-test.westminster.ac.uk
timetabling.westminster.ac.uk
resolveitdev.westminster.ac.uk
financelive.westminster.ac.uk
eu-central-1-san1.blackboard.com
lists.westminster.ac.uk
mobile-app.westminster.ac.uk
emea-san1.blackboard.com
resolveitdev.westminster.ac.uk
epayments.westminster.ac.uk
uniprint.westminster.ac.uk
store.westminster.ac.uk
ssl758755.cloudflaressl.com
emea-san1.blackboard.com
accommodation.westminster.ac.uk
vacancies.westminster.ac.uk
eu-central-1-san1.blackboard.com
*.ezproxy.westminster.ac.uk
payonline.westminster.ac.uk
printportal.westminster.ac.uk
bi.westminster.ac.uk
*.users.ecs.westminster.ac.uk
shortcourses.westminster.ac.uk
sgd.westminster.ac.uk
library-collections-search.westminster.ac.uk
folio.westminster.ac.uk
intranet.ecs.westminster.ac.uk
prospect.westminster.ac.uk
eu-central-1-san1.blackboard.com
learning.westminster.ac.uk
teamwork-internal.westminster.ac.uk
emea-san1.blackboard.com
esp.westminster.ac.uk
library-collections-search.westminster.ac.uk
password.westminster.ac.uk
identity-test.westminster.ac.uk
timetabling.westminster.ac.uk
eu-central-1-san1.blackboard.com
webprint.westminster.ac.uk
jssadmin.westminster.ac.uk
engage.westminster.ac.uk
helpdesks.westminster.ac.uk
support.ecs.westminster.ac.uk
uniprint.westminster.ac.uk
vapplications.westminster.ac.uk
*.test.westminster.ac.uk
emea-san1.blackboard.com
upload.ecs.westminster.ac.uk
download.ecs.westminster.ac.uk
library-catalogue.westminster.ac.uk
housing.westminster.ac.uk
eu-central-1-san1.blackboard.com
financetest.westminster.ac.uk
summeraccommodation.westminster.ac.uk
hub.westminster.ac.uk
emea-san1.blackboard.com
accommodation.westminster.ac.uk
research.westminster.ac.uk
myintranet.westminster.ac.uk
emea-san1.blackboard.com
*.ezproxy.westminster.ac.uk
uowmail.westminster.ac.uk
upload.ecs.westminster.ac.uk
portal.ecs.westminster.ac.uk
yourvirtualopenday.westminster.ac.uk
penguin.ecs.westminster.ac.uk
intranet.ecs.westminster.ac.uk
eu-central-1-san1.blackboard.com
support.ecs.westminster.ac.uk
eu-central-1-san1.blackboard.com
mailinglist.westminster.ac.uk
payonline.westminster.ac.uk
library-catalogue.westminster.ac.uk
financelive.westminster.ac.uk
devtesthub.westminster.ac.uk
identity.westminster.ac.uk
citrixvip.westminster.ac.uk
vapplications.westminster.ac.uk
emea-san1.blackboard.com
task.westminster.ac.uk
yourvirtualopenday.westminster.ac.uk
guestwifi.westminster.ac.uk

Certificate

The complete raw certificate details for lists.westminster.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PX8kEnQOkA17fzWKUsh
Fx3KduWSRLkceEO5KWNaGYcaWtnIoH+boODQykEJZrvX/Q9CSTOP2xbVnkwO/++u
tLtOAk+xwWkodVzP9N7687YKowisEtIuShCpZbb9s98Kq0NxyAgbq1BJFIMLeO+0
6p8LNce5AtMiXhx5m5Yadjj06b7YwOrVPnevXP1Xn7XXq8XNL1me0+SMQMLuMsq6
RgmLsaZcLNHK6a63SZo6URwKjHtmJP4lZF5CmCF5iCgVfHaVSFEkpuvFBKm1crvT
OSmlSt7BqhbyP2ULaGG9Q+mCKJKxCEVqoKc/aXQsXZIT12ZG8hCxcmXm3Cx9jlcU
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 239059786616540908481287728493173961642124436628
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis EV SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-17 15:57:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-17 16:07:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '977818'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Greater London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LONDON'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Westminster'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ISS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lists.westminster.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26378867934825443672352474768186010249548681920817131373239776215972439889863963747613379425229492875874512308859420335393136615171215202654237854734888494786826428690480319690922270327611305351307319389585670220434200588533584129493677052817240863814509475196392971621858749846966130612835134432859629202660340599556511189762672269879095171289587814047400670136404515816493971266680456428494411308279017487267260456285342160908005096582693128433594413737600959284345088172678760958041971689162168827727195729186484687682741493700689085342382434042372902851981087771712635115143917108891290354064233916187401302512749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							983c8eadd1e4c6606e27d7471215265871754990
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e58454d090499f38baf2c9e12a08c54e9fa0483f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.westminster.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lists.westminster.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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