connected.cardiff.ac.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1d:1c:6e:f6:f6:09:a3:62:e9:86:e1:12:a7:22:fd:55:7c was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=connected.cardiff.ac.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1d:1c:6e:f6:f6:09:a3:62:e9:86:e1:12:a7:22:fd:55:7c
Serial Number (int): 358355126913250491866330572967525073376636
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5d:35:fc:83:dc:56:24:d6:db:87:db:1c:86:45:13:e6:9c:6c:c7:94
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2e:de:21:1c:9f:32:9c:28:75:f0:b8:fd:e9:3c:87:a2:60:ee:c6:6c
Fingerprint (sha256): 0e:cc:18:72:d6:f8:27:32:1f:1c:7a:37:00:b1:88:6b:05:c8:aa:7c:50:07:e4:0f:39:82:bc:ce:99:4d:e3:19

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate connected.cardiff.ac.uk

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connected.cardiff.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campionalumni.org
casscommunity.co.uk
caterhamschoolsociety.co.uk
cettconnect.es
challonersconnected.com
charterhouseconnect.org.uk
cheveningconnect.com
choba.org
chsnetwork.co.uk
cisvalumni-connect.org
citizensconnect.co.uk
cityshefalumni.org
clarehallconnect.uk
clubdanetwork.com
colfesnet.com
columbansconnect.org
community.alumniportal-deutschland.org
community.birthrightexcel.com
community.bpp.com
connect.staffordglobal.org
connected.cardiff.ac.uk
corpusalumni.com
csfcalumni.com
cualumni.org
cumbrianetwork.global
www.campionalumni.org
www.casscommunity.co.uk
www.caterhamschoolsociety.co.uk
www.cettconnect.es
www.challonersconnected.com
www.charterhouseconnect.org.uk
www.cheveningconnect.com
www.choba.org
www.chsnetwork.co.uk
www.cisvalumni-connect.org
www.citizensconnect.co.uk
www.cityshefalumni.org
www.clarehallconnect.uk
www.clubdanetwork.com
www.colfesnet.com
www.columbansconnect.org
www.community.alumniportal-deutschland.org
www.community.birthrightexcel.com
www.community.bpp.com
www.connect.staffordglobal.org
www.connected.cardiff.ac.uk
www.corpusalumni.com
www.csfcalumni.com
www.cualumni.org
www.cumbrianetwork.global

Other certificates including the domain name cardiff.ac.uk

(limited to 100 certificates)
medicinesdiscoverydata.cardiff.ac.uk
private.zacharyhill.dev
data.cardiff.ac.uk
ask.cardiff.ac.uk
bidr.cardiff.ac.uk
beta-status.astronomer.io
www.studygroup.com
api.vonagestatus.com
beta-status.astronomer.io
private.zacharyhill.dev
exampapers.cf.ac.uk
api.vonagestatus.com
private.zacharyhill.dev
cwaf.status.radwarecloud.com
beta-status.astronomer.io
roombooking.cardiff.ac.uk
private.zacharyhill.dev
status-pre.cardiff.ac.uk
www.studygroup.com
private.zacharyhill.dev
private.zacharyhill.dev
campionalumni.org
private.zacharyhill.dev
sharelatex.cs.cf.ac.uk
bidev.cardiff.ac.uk
api.vonagestatus.com
mappedsites.cardiff.ac.uk
muscat.astro.cf.ac.uk
campionalumni.org
remotesupport.cardiff.ac.uk
*.data.cardiff.ac.uk
learningcentral.cardiff.ac.uk
status.cardiff.ac.uk
campionalumni.org
www.studygroup.com
polls.cardiff.ac.uk
api.vonagestatus.com
fusion-dev.cardiff.ac.uk
community.mancosa.co.za
campionalumni.org
home.cf.ac.uk
private.zacharyhill.dev
lawpl.cardiff.ac.uk
private.zacharyhill.dev
campaigns.cardiff.ac.uk
connected.cardiff.ac.uk
status-pre.cardiff.ac.uk
api.vonagestatus.com
password-sso.cardiff.ac.uk
www.studygroup.com
www.cardiff.ac.uk
private.zacharyhill.dev
beta-status.astronomer.io
gems.cardiff.ac.uk
git.cardiff.ac.uk
*.data.cardiff.ac.uk
beta-status.astronomer.io
private.zacharyhill.dev
mssgweb02.id.add.cardiff.ac.uk
private.zacharyhill.dev
private.zacharyhill.dev
e2sapi.cardiff.ac.uk
campionalumni.org
private.zacharyhill.dev
mydispense.cardiff.ac.uk
module-evaluation.cardiff.ac.uk
www.studygroup.com
cwaf.status.radwarecloud.com
undergraduate-enews.cardiff.ac.uk
private.zacharyhill.dev
wwwstaging.cardiff.ac.uk
password.cardiff.ac.uk
extranet.cardiff.ac.uk
www.studygroup.com
api.vonagestatus.com
research.cardiff.ac.uk
vault.cardiff.ac.uk
intranet.cardiff.ac.uk
beta-status.astronomer.io
crmapi.cardiff.ac.uk
campaigns.cardiff.ac.uk
www.residences.cardiff.ac.uk
private.zacharyhill.dev
community.mancosa.co.za
gitlab.cs.cf.ac.uk
mmp.cardiff.ac.uk
xerte.cardiff.ac.uk
private.zacharyhill.dev
simstestlearn.cf.ac.uk
rssdp.cardiff.ac.uk
inside.biosi.cf.ac.uk
sitescardiff.cf.ac.uk
adfs.cardiff.ac.uk
www.studygroup.com
private.zacharyhill.dev
hmlupload.cardiff.ac.uk
helix-prod.cardiff.ac.uk
wikis.cf.ac.uk
challonershighnetwork.com
campionalumni.org

Certificate

The complete raw certificate details for connected.cardiff.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21g7RTGUYNiGIRYVKfAO
ZIg+9B5WJWkLntKGTcieG/bgKtQ02RhZMONqO9jRIHXI/RR51ewKvhn/J//UB4my
bxTnggasOtVZTEL0xEQ77M05xEQYd+Ag82xadNSeDz1Tos3a3ZElroiLV5GRKRc7
LqEGaHvckTfidHewMbwrLqwEfSuuMBNCOHAfVG0eyeGPJMA9dnEHyADvLaHz+PyF
T+Ud4Vezmw0PDfutmo2G8giOTmCbSjHrHuX7KfjnGHhPY4O2H4Q77d4WTdeWssc9
vZb+99kFhAKh42OCcyJjIQI/W20s3n8DFXPlZFtR+gqJ/I2TVSqTsBGV+t1BhACS
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358355126913250491866330572967525073376636
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 07:57:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-23 07:57:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connected.cardiff.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27689697373915393228216540321782867334613982666254171685616093788961329803353750620696038283268821630240778940534879516828854525357948646811595487769917504382689790742100503158132317115387803825065164011316860482380126771586784186217272131954269033552626028180208884404312080972895157265248423180638481833277920010751195278778226284392503796049213514286675201166982218603102732289372663456554519201660744440186039222991011041891209755359773335641532830961664420975490598732971336673889750347157150462332732508979468427927087427478821429079632231983562788454098631014054732987451285336071665317915503055285824654447337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d35fc83dc5624d6db87db1c864513e69c6cc794
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1198 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campionalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casscommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterhamschoolsociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cettconnect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challonersconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charterhouseconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheveningconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisvalumni-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizensconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityshefalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarehallconnect.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubdanetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colfesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbansconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.alumniportal-deutschland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.birthrightexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.bpp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.staffordglobal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connected.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpusalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csfcalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cualumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumbrianetwork.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campionalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casscommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caterhamschoolsociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cettconnect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.challonersconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charterhouseconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheveningconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cisvalumni-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citizensconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityshefalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarehallconnect.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubdanetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colfesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbansconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.alumniportal-deutschland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.birthrightexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.bpp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.staffordglobal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connected.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpusalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csfcalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cualumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumbrianetwork.global'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001724b0cf9570000040300473045022100d935a772159eee3afcc901a8b597442bd634ded652a132458cec10c51686eb4402204f79dcd449688281e8f1f3cbf9ac792147e6c824a0425d7bb4173142fb5f32cd00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001724b0cf9680000040300473045022100aebd54277ceaf2cd58b5df64ff2f8318ff40b754f62ebe58b7c26b01ac4ec26d0220016be801edcf449ca0973e12b659d97b6f6c542d8253373438dc1eebb646fce5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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