its-dc2-lemma2-p0-vip.computing-service.bristol.ac.uk

- University of Bristol -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number de:8d:08:d0:89:98:66:eb:76:3e:30:18:0e:12:21:53 was issued on by GEANT Vereniging.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Bristol

Organization: University of Bristol
State / Province: Bristol, City of
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): de:8d:08:d0:89:98:66:eb:76:3e:30:18:0e:12:21:53
Serial Number (int): 295820907702623055755605686900120232275
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 1f:11:e2:0d:4e:2c:ac:c0:ca:95:5a:97:ea:38:8e:f7:e3:f1:da:3f
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 84:d1:a0:7d:94:71:0e:b2:41:46:9d:d9:fd:79:a9:01:75:b7:32:1c
Fingerprint (sha256): 10:19:2c:11:70:4e:39:31:0e:b1:34:07:9c:d5:1f:ec:ee:aa:57:ca:d0:35:32:fe:1a:90:8a:ad:b6:3c:6c:56

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate its-dc2-lemma2-p0-vip.computing-service.bristol.ac.uk

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for its-dc2-lemma2-p0-vip.computing-service.bristol.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

its-dc2-lemma2-p0-vip.computing-service.bristol.ac.uk
beep.ac.uk
cheep.ac.uk
cmm.bris.ac.uk
cmm.bristol.ac.uk
its-dc2-lemma2-p0-vip.cse.bris.ac.uk
its-lemma2-p.computing-service.bristol.ac.uk
its-lemma2-p.cse.bris.ac.uk
lemma2-f5.geography.bristol.ac.uk
lemma2-f5.ggy.bris.ac.uk
lemma2.geography.bristol.ac.uk
lemma2.ggy.bris.ac.uk
peep.ac.uk
www.beep.ac.uk
www.cheep.ac.uk
www.cmm.bris.ac.uk
www.cmm.bristol.ac.uk
www.peep.ac.uk

Other certificates including the domain name bristol.ac.uk

(limited to 100 certificates)
myerp-archive-test.bris.ac.uk
wwwa-dev.fen.bris.ac.uk
amis.bris.ac.uk
netmon.netcomms.bristol.ac.uk
estates.bris.ac.uk
DVAtraining.bristol.ac.uk
blogs.bristol.ac.uk
evision.apps.bristol.ac.uk
naturelocator.ilrt.bris.ac.uk
www.brtcrandomisation.bristol.ac.uk
fitnetnhs.bristol.ac.uk
aerosol-cdt.ac.uk
galaxy-gio.acrc.bristol.ac.uk
www.alspac.bristol.ac.uk
research-information.bris.ac.uk
dialogue.bristol.ac.uk
status.resnet.bris.ac.uk
blogs-test.bristol.ac.uk
evision-b.apps.bristol.ac.uk
blogs.bristol.ac.uk
proposals.epi.bris.ac.uk
data.bristol.ac.uk
www.survey.bris.ac.uk
xerte.bris.ac.uk
www.by-band.bristol.ac.uk
laharflow.bris.ac.uk
www.gradconnection.bristol.ac.uk
cteu.bristol.ac.uk
mwgit.bris.ac.uk
blogs.bristol.ac.uk
myerp-archive-test.bris.ac.uk
research-information.bris.ac.uk
interdelphi.rit.bristol.ac.uk
cteu-trials.bristol.ac.uk
app-dc2-cirx-p0-vip.services.bris.ac.uk
ci.ilrt.bristol.ac.uk
wwwtestdev-ole.bris.ac.uk
oas.apps.bristol.ac.uk
its-dc2-lemma2-p0-vip.computing-service.bristol.ac.uk
blogs.bristol.ac.uk
xerte-beta.bris.ac.uk
xerte.bris.ac.uk
mediasite-dev.bristol.ac.uk
rds-web.bristol.ac.uk
intelligentsystems.bristol.ac.uk
www.cs.bris.ac.uk
mediasite.services.bris.ac.uk
purchasing-system.bristol.ac.uk
www.iser.bristol.ac.uk
corestream.bristol.ac.uk
its-splusiis-prod.cse.bris.ac.uk
myerp-archive.bristol.ac.uk
www.digitalscreens.bris.ac.uk
myerp-int.bristol.ac.uk
go.resnet.bristol.ac.uk
blogs.bristol.ac.uk
manage.resnet.bristol.ac.uk
www.ole.bris.ac.uk
reportandsupport.bris.ac.uk
research-information.bris.ac.uk
contact.voicemail.bristol.ac.uk
heart-institute.bristol.ac.uk
consult.bristol.ac.uk
evision-b.apps.bristol.ac.uk
train.sls.bristol.ac.uk
seis.bristol.ac.uk
blogs.bristol.ac.uk
child-cough.bristol.ac.uk
blogs.bristol.ac.uk
blogs.bristol.ac.uk
www.bristol.ac.uk
leder-test.rit.bristol.ac.uk
imagelibrary.bristol.ac.uk
dedefi.ilrt.bristol.ac.uk
reportandsupport.bris.ac.uk
imagelibrary.bristol.ac.uk
training-data-warehouse.epi.bris.ac.uk
www.wireless.bris.ac.uk
dedefi.ilrt.bristol.ac.uk
gpo-srv.bristol.ac.uk
careers.bristol.ac.uk
fluff.bris.ac.uk
child-cough.bristol.ac.uk
fluff.bris.ac.uk
team.resnet.bristol.ac.uk
btc-test.bristol.ac.uk
blogs.bristol.ac.uk
blogs.bristol.ac.uk
sphere1-connect.een.bristol.ac.uk
ITS-SOCSWEB.cse.bris.ac.uk
www.brtcrandomisation.bristol.ac.uk
develop.bristol.ac.uk
mlbook.cs.bris.ac.uk
galaxy-gio.acrc.bristol.ac.uk
www.acrc.bris.ac.uk
www.gradconnection.bristol.ac.uk
ole.bristol.ac.uk
child-cough.bristol.ac.uk
parking-permits.bristol.ac.uk
www.wireless.bris.ac.uk

Certificate

The complete raw certificate details for its-dc2-lemma2-p0-vip.computing-service.bristol.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL/NxkE5rG2D99XtLW9E
o8+CJsvlnqp+m1LBaMDCvMUdE4GIkcuVaK+2KGe5AavcgQBWnbfaAhLupCkrZ3Bc
IuNx+OmOzKfkWsJdE72oQWwwJGd0vGiyJbCgtsZUK2wjP9zIHLEC7aDXveDTBxw/
V8980fhNrjI/cAVdB5MSmp5WoUN9xIlL9xg1N0OPz/E6733oYkN0m9UnAhn8fyNX
ELv9FCGxi4YuqDLwdjBUGK2aK5yG2X5805/sKp2PNHj+1CGU318aLHlFoHCmyhxu
iV4X5ok3fI0UMq0qVEtdyWVoUcEdnKB/MERrOxQMSmtF3OckmqdeE27E5KfcOOXn
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295820907702623055755605686900120232275
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bristol, City of'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Bristol'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'its-dc2-lemma2-p0-vip.computing-service.bristol.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21302617216341568605987570366039548318679620375668021182429547118961213899368597432829785745385705969048385466189625388572274116881700253626462242833750393438889309447927974573661071685617406809222061761232281997940109506809778865470779095394100435392880358729465666829083288299324665203308058800100729550824636073694121179548667338543883283134940084659990883623516505198481665451828663465384575507783523597084495933243675589234702198136042843326674432706750598123261862436369620560555089890612883184803277150093146951894660559952423545490422429091237877037650570916746217270915821378505378832711894142004152783726451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f11e20d4e2cacc0ca955a97ea388ef7e3f1da3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (452 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'its-dc2-lemma2-p0-vip.computing-service.bristol.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beep.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheep.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmm.bris.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmm.bristol.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'its-dc2-lemma2-p0-vip.cse.bris.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'its-lemma2-p.computing-service.bristol.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'its-lemma2-p.cse.bris.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemma2-f5.geography.bristol.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemma2-f5.ggy.bris.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemma2.geography.bristol.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemma2.ggy.bris.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peep.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beep.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheep.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmm.bris.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmm.bristol.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peep.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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