lbmail.leedsbeckett.ac.uk

- Leeds Beckett University -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number cb:64:99:11:53:76:c4:ec:1d:95:fc:d4:74:d7:6a:25 was issued on by GEANT Vereniging.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Leeds Beckett University

Organization: Leeds Beckett University
State / Province: West Yorkshire
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): cb:64:99:11:53:76:c4:ec:1d:95:fc:d4:74:d7:6a:25
Serial Number (int): 270355617411570365411674784670267435557
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 4f:fb:4e:e8:b8:5f:a0:72:68:1b:b3:20:b1:65:61:87:41:c2:7e:76
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 35:4e:67:71:05:53:dd:2e:d7:70:21:9b:7b:63:b4:e9:92:25:d5:ac
Fingerprint (sha256): 11:7c:4a:13:27:f0:de:e6:0a:eb:a0:d4:48:83:5a:a1:b2:f4:ab:14:ca:9f:88:28:76:73:ee:82:20:88:74:2d

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate lbmail.leedsbeckett.ac.uk

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lbmail.leedsbeckett.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lbmail.leedsbeckett.ac.uk
aql-exc-mb-01.leedsbeckett.ac.uk
autodiscover.leedsbeckett.ac.uk
autodiscover.student.leedsbeckett.ac.uk
cc-exc-mb-01.leedsbeckett.ac.uk
eas.leedsbeckett.ac.uk
ecp.leedsbeckett.ac.uk
ews.leedsbeckett.ac.uk
exc-smtp.leedsbeckett.ac.uk
leedsbeckett.ac.uk
oa.leedsbeckett.ac.uk
oab.leedsbeckett.ac.uk
ps.leedsbeckett.ac.uk
student.leedsbeckett.ac.uk

Other certificates including the domain name leedsbeckett.ac.uk

(limited to 100 certificates)
myhub.leedsbeckett.ac.uk
surveys.leedsbeckett.ac.uk
vpn-sta.leedsbeckett.ac.uk
www.studygroup.com
my.leedsbeckett.ac.uk
aet-ovirt.aet.leedsbeckett.ac.uk
www.studygroup.com
xap.leedsbeckett.ac.uk
fms.leedsbeckett.ac.uk
my-staging.leedsbeckett.ac.uk
libanswers.leedsbeckett.ac.uk
libanswers.leedsbeckett.ac.uk
vts.leedsbeckett.ac.uk
webdrive.aet.leedsbeckett.ac.uk
oala-dev.leedsbeckett.ac.uk
www.studygroup.com
onlinestore.leedsbeckett.ac.uk
eu-central-1-san1.blackboard.com
my-dev.leedsbeckett.ac.uk
*.leedsbeckett.ac.uk
www.studygroup.com
myhub.leedsbeckett.ac.uk
lbmail.leedsbeckett.ac.uk
libguides.leedsbeckett.ac.uk
www.studygroup.com
catalogue-dev.leedsbeckett.ac.uk
vhd.leedsmet.ac.uk
www.leedsbeckett.ac.uk
www.studygroup.com
eu-central-1-san1.blackboard.com
symplectic-web.leedsbeckett.ac.uk
i-print.leedsbeckett.ac.uk
libguides.leedsbeckett.ac.uk
sspr.leedsbeckett.ac.uk
www.studygroup.com
libanswers.leedsbeckett.ac.uk
libanswers.leedsbeckett.ac.uk
libcal.leedsbeckett.ac.uk
onlinestore.leedsbeckett.ac.uk
libcal.leedsbeckett.ac.uk
libguides.leedsbeckett.ac.uk
eu-central-1-san1.blackboard.com
vts.leedsbeckett.ac.uk
libguides.leedsbeckett.ac.uk
cc-lywebext.leedsbeckett.ac.uk
www.aet.leedsbeckett.ac.uk
workpro.leedsbeckett.ac.uk
archives.leedsbeckett.ac.uk
payments.leedsbeckett.ac.uk
exc-mailbox2.leedsbeckett.ac.uk
eprints.leedsbeckett.ac.uk
webfiles.leedsbeckett.ac.uk
my.leedsbeckett.ac.uk
webresources.leedsbeckett.ac.uk
exc-mailbox1.leedsbeckett.ac.uk
*.leedsbeckett.ac.uk
welcome.leedsbeckett.ac.uk
i-print.leedsbeckett.ac.uk
skyline.leedsbeckett.ac.uk
vacancies.leedsbeckett.ac.uk
eduroam.leedsbeckett.ac.uk
www.studygroup.com
libguides.leedsbeckett.ac.uk
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
peopledevelopment.leedsbeckett.ac.uk
www.studygroup.com
replay.leedsbeckett.ac.uk
library-rfid.leedsbeckett.ac.uk
zendto.leedsbeckett.ac.uk
libanswers.leedsbeckett.ac.uk
zendto.leedsbeckett.ac.uk
sspr.leedsbeckett.ac.uk
www.wellmetshortstay.com
exc-mailbox3.leedsbeckett.ac.uk
registration.leedsbeckett.ac.uk
onlinestore.leedsbeckett.ac.uk
www.studygroup.com
*.ezproxy.leedsbeckett.ac.uk
www.studygroup.com
applyonline.leedsbeckett.ac.uk
cc-lysbc02.leedsbeckett.ac.uk
replay.leedsbeckett.ac.uk
nfsbookings.aet.leedsbeckett.ac.uk
libguides.leedsbeckett.ac.uk
registration.leedsbeckett.ac.uk
libcal.leedsbeckett.ac.uk
myhub.leedsbeckett.ac.uk
libguides.leedsbeckett.ac.uk
campusm.dev.leedsbeckett.ac.uk
e-pay.leedsbeckett.ac.uk
*.leedsbeckett.ac.uk
www-dev.practicelearn.co.uk
eu-central-1-san1.blackboard.com
exc-mailbox4.leedsbeckett.ac.uk
libcal.leedsbeckett.ac.uk
skyline.leedsbeckett.ac.uk
www.studygroup.com
eu-central-1-san1.blackboard.com
www.studygroup.com

Certificate

The complete raw certificate details for lbmail.leedsbeckett.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohEI8Xr5Sr/UEyRbnunJ
e6AQPY0J12H/Li2NvNmDOaLgD9HCQ0l0SD41og1LtmWYhjCuyNQFJ0zeKEBfNn6i
lA7mLxKYUa/VSKlPDWBK8yrvfdgRU3aOC1RUnlA3meg65HAw6ps5M50m6iaMoT9u
pvtPe94gFAJyzL0Ybka4xIqdws1d18u9AWLZlS12NlwqvVVvwi9Ohq7b8hQXxTP3
RgbOsygv6X/H6UH/Gz4eUas3K+VL9intoo031vL34FveSWWTKAP22jRWZc/b+ZRm
E99+2S6YA03YShXNWo5lk9bTrAqTJFn8j1a4hvloiwF9RRgtMboU+ULpt49FF8GR
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270355617411570365411674784670267435557
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Yorkshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leeds Beckett University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lbmail.leedsbeckett.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20459005643882276797352589098417661850503225855908408526790782024706322051526063927205553496366161042592322575221658685040067774411511399211206765853887866414325872489902367986765959106054329019585373473792523449938642132875485683248262295347338339770546018607030116617694992109937842569588422880305540161296673520839633811430972428910228177412426422704986242835189358674948226187554656755490759952556941459268388202319729837521391592401402797729504640257777474746432071825518971784508378124529986793408088144173376644491838577499296195682966712581562045103802834097557566879140655656598741265989759915156693755990463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ffb4ee8b85fa072681bb320b165618741c27e76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (391 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbmail.leedsbeckett.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aql-exc-mb-01.leedsbeckett.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.leedsbeckett.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.student.leedsbeckett.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc-exc-mb-01.leedsbeckett.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eas.leedsbeckett.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecp.leedsbeckett.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ews.leedsbeckett.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exc-smtp.leedsbeckett.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leedsbeckett.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oa.leedsbeckett.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oab.leedsbeckett.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.leedsbeckett.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.leedsbeckett.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00559684759952def0bb4e718b7a36e3448006017111deadb7969945888668a9beb85779297ada3194700e331420b650590dfd4022907a998365968a936c0e4e8d587a8495549b11daddc9bfae5daa038304d7dea692693436be4079e538d8cc70a405d1ee816086f783d84027f370caadd4c2a954884c9fbf976a41a37cc8da482059dd6541f34330e33f85b62911700d92c817f76538f12663433fa9dcc1c4c8b12f463eea344bed166b2d76fb71873b7625e6f1e9e6d46dae971483f5b86ba06cbf82ff6f835a2bdfccf98ec4bbb3fab364f2515110d760fce1d77430e7168c77e41851e8c58bd469be9503e2231f12ac359d4fdbc89992678b1bf262f46d76c75527adb4d5f37bdedda66b3339dda32b8e4f06d11084d46844496c8d02c44b545ed41124a01be9c940a7829d5ac7a0427511b1246b9bc9b8e4345cf2c543c2d12ac105e94c48105cf622fd0359397fba513c88b27fb0d400c9fbcdaf0aff82ab47503212a0dd59f890983183ffddf0954e694dc4ceced3b26b72789b0ecd8ae35a6e6e09a78f3212d3afa1a9f731d19580dbc4f595bd66957a53bab1ddb55c050c1d9e326d3ea397af0773f06fa8467ff86a4fd73f769ca8115ba6ee209de996b16594b66d3494ed16f8a55a64eb7d36ce5da883600df50755ec64e9002c0b0648da0e1d3fe1c589e61a7e3747670d5b2e0c93958f35d6b42f85987071bb38