uinet.essex.ac.uk

Issued by TERENA SSL CA 2

About this certificate

This digital certificate with serial number 9a:ad:13:21:c7:59:06:e7:18:e9:13:d6:5c:1e:cc:89 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=uinet.essex.ac.uk,OU=Domain Control Validated

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 9a:ad:13:21:c7:59:06:e7:18:e9:13:d6:5c:1e:cc:89
Serial Number (int): 205599766749410545908968395388284226697
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f8:5a:d8:b3:33:e7:74:a5:a8:0a:96:e6:93:e1:ec:1a:db:dd:53:f6
AuthorityKeyId: 5b:d0:8a:1c:9a:32:5b:e0:b5:dd:96:54:1b:e1:86:28:b0:fd:b6:bd

Fingerprint (sha1): 8c:c2:9f:c2:7a:c0:ae:1c:bb:5e:51:3b:8b:05:0b:95:1b:89:92:a7
Fingerprint (sha256): 13:28:fc:ba:25:5f:36:b6:d1:1b:06:5e:3e:07:9c:43:00:7d:08:fc:6f:50:e7:62:e4:e7:44:be:19:85:bb:a5

Issuing Certificate URL: http://crt.usertrust.com/TERENASSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TERENASSLCA2.crl

Check the revocation status for certificate uinet.essex.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uinet.essex.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uinet.essex.ac.uk

Other certificates including the domain name essex.ac.uk

(limited to 100 certificates)
poptargs.essex.ac.uk
3ds-status.outseer.com
esbs.essex.ac.uk
perception.essex.ac.uk
svistunenko.essex.ac.uk
trail.essex.ac.uk
dern.essex.ac.uk
findyourway.essex.ac.uk
ihr.essex.ac.uk
dasa4.essex.ac.uk
findyourway.essex.ac.uk
findyourway.essex.ac.uk
library.essex.ac.uk
*.online.essex.ac.uk
reportandsupport.essex.ac.uk
genomics.essex.ac.uk
www2.essex.ac.uk
libcal.essex.ac.uk
autonomy.essex.ac.uk
anawiki.essex.ac.uk
email.essex.ac.uk
miscweb.essex.ac.uk
3ds-status.outseer.com
autonomy.essex.ac.uk
findyourway.essex.ac.uk
email.essex.ac.uk
epigenetics.essex.ac.uk
3ds-status.outseer.com
email.essex.ac.uk
csee.essex.ac.uk
3ds-status.outseer.com
uoecrmfs.essex.ac.uk
moodle.essex.ac.uk
svistunenko.essex.ac.uk
3ds-status.outseer.com
onbase.essex.ac.uk
erams.essex.ac.uk
powerlessness.essex.ac.uk
www.essex.ac.uk
hrorganiser.essex.ac.uk
csee.essex.ac.uk
orb.essex.ac.uk
autonomy.essex.ac.uk
lib.essex.ac.uk
reportandsupport.essex.ac.uk
findyourway.essex.ac.uk
iservpn0.essex.ac.uk
platform.recflow.co
www.essex.ac.uk
email.essex.ac.uk
3ds-status.outseer.com
ris.essex.ac.uk
*.prospectus.essex.ac.uk
cci.essex.ac.uk
seedvicious.essex.ac.uk
findyourway.essex.ac.uk
libcal.essex.ac.uk
repository.essex.ac.uk
daint.essex.ac.uk
tracegasbiology.essex.ac.uk
encore.essex.ac.uk
nosey.essex.ac.uk
www2.essex.ac.uk
zendto.essex.ac.uk
csee.essex.ac.uk
jedi2019.essex.ac.uk
cseegit.essex.ac.uk
autonomy.essex.ac.uk
*.web.ucu.org.uk
uinet.essex.ac.uk
genomics.essex.ac.uk
gate.essex.ac.uk
3ds-status.outseer.com
moodle.essex.ac.uk
www.essex.ac.uk
3ds-status.outseer.com
www2022.essex.ac.uk
vcblog.essex.ac.uk
3ds-status.outseer.com
software.essex.ac.uk
tracing.essex.ac.uk
repository.essex.ac.uk
tableau.essex.ac.uk
excel-like-issue-editor-for-jira.status.ricksoft-inc.com
csee.essex.ac.uk
bob2.essex.ac.uk
filestore.iser.essex.ac.uk
3ds-status.outseer.com
3ds-status.outseer.com
climatelearningresources.org.uk
catalogue-sso.essex.ac.uk
childparticipants.essex.ac.uk
itstatus.essex.ac.uk
3ds-status.outseer.com
cci.essex.ac.uk
researchdata.essex.ac.uk
3ds-status.outseer.com
genomics.essex.ac.uk
itsm.essex.ac.uk
repository.essex.ac.uk

Certificate

The complete raw certificate details for uinet.essex.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIRAJqtEyHHWQbnGOkT1lwezIkwDQYJKoZIhvcNAQELBQAw
ZDELMAkGA1UEBhMCTkwxFjAUBgNVBAgTDU5vb3JkLUhvbGxhbmQxEjAQBgNVBAcT
CUFtc3RlcmRhbTEPMA0GA1UEChMGVEVSRU5BMRgwFgYDVQQDEw9URVJFTkEgU1NM
IENBIDIwHhcNMTQxMDI5MDAwMDAwWhcNMTcxMDI4MjM1OTU5WjA/MSEwHwYDVQQL
ExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxGjAYBgNVBAMTEXVpbmV0LmVzc2V4
LmFjLnVrMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAze5qgOqMFYxi
m35QVa1AaxrLAkN87aF4vols9XoXq35RbbI9z/EC+pK/dqZ+TjuiMtzOK1jLCKV3
7542btYxf/eoVMqu8OKlKyCSgThOWl/chv4VhkgwKoBI+hbXul4Bn6NpOKgFyYL9
12ubYAgXYBl/m52oJCWh51UP48iqbsQp0Y0ZylcfM5Svo3s51DMREGJPyaXYD4Ik
gSwSK0rC9pI8IVSC5M2ubuOnV4f12mhm/cxCc+Ek04AmN+EfpSThqAe1j4OdcjAX
Kcyhc5vQ2Mn8bd3cwPZVcUuAewOprCejDVSiHcGGSBkdtvWzgaLK8JOP/yoEPvZP
LpUoZfjDkaBOPq0eBDaX2eqoW+jdmyA69x6icdPWEeuFUSFQhTiVBKQEgx1Ntrzy
LeEPjXaTklL6QNw7hd0EVqHqBbhGKKQcCeSEpIOneNaaRKtkaSF5xjKtdPGtne0R
yiqvy2/dMkz02jwFnzczFoaWXErVExLo8jIF3emqqVTeSo4TK4vHHIkuxgn1Sg/H
yHLlvtC0YAUwWxeDBA4X2TnFXKPolIPbgjK2kCG83OL19zXuzWM/I3tOuI30cQnW
bEnzbpa9fFG6hOqH6NHhUR8v93e6/bW6SZ6QE5Azc3PCY4FyfP6Z7TQxAE/O0vGe
jSCjfa6mUlAz1FxKHe2bguDJcwon2uECAwEAAaOCAW0wggFpMB8GA1UdIwQYMBaA
FFvQihyaMlvgtd2WVBvhhiiw/ba9MB0GA1UdDgQWBBT4WtizM+d0pagKluaT4ewa
291T9jAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwIgYDVR0gBBswGTANBgsrBgEEAbIxAQICHTAIBgZn
gQwBAgEwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybC51c2VydHJ1c3QuY29t
L1RFUkVOQVNTTENBMi5jcmwwbAYIKwYBBQUHAQEEYDBeMDUGCCsGAQUFBzAChilo
dHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vVEVSRU5BU1NMQ0EyLmNydDAlBggrBgEF
BQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTAcBgNVHREEFTATghF1aW5l
dC5lc3NleC5hYy51azANBgkqhkiG9w0BAQsFAAOCAQEAi9LGniMRP+pcHtmcK1Gu
37PCPqSBoRxBt5SeZtZgZ0Qj0/lFxb3/9+w/VQJuZ0vV9fSONxLXpCJDL99CHWpl
99DMeo7GCVPISM3X05NPw3o+AxANzDy1/5Ernaf4sw4oZgFrcGtXDbLcl4jZuTuu
MiBvdEVyXMAttarwqCoDlW2skmkzIFPhGNNZg+0MyEvk+gEg9rhuvxLUQhEwbh7m
3pnPEN7jjRl6QmWlfZE9XLFkvQrVt4BuCz4IECXEUiLCDl6jTQRca7YixGHYlb5u
2JzB8BpykJejo2DLQfML6jLzPiSXixrnF/Hv0AKhgCNG4klULLNB8B51C2ZtZpPV
QQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 205599766749410545908968395388284226697
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uinet.essex.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840126457932014188854966201913549658414428962890618294283438613778529664116679974522018656218136518048051630151923801624287975732643187682748484346894836071894792406016790325867257099953528274872722986231622196936246212102159756409958089900171368589862902971149943856688158786913235740617017633160511367404183156726173485780628864945388063311776117412917842813442672039394813706307549055175585684188909642343470438977086959767085753620499487509795243826577730561759269784671973718135331679333751993009036511842432659995633689655897752310297900569472660769078745668815681968664335177608832888296996688523231250862853004183649214640964863332062536107984071462186626832321922117466385358152093186536120826484464932961901457228891412501588905908923061308153908745968145723076299748446135466916231644073841918004176055572569920996132137827033147814438575830106022722598457815240716478287467297907010792588111150640728535876552139982104046139674618779664576432140295536877803467743118658099804449434310095892868086530987152634520980716935292887420774597603375707685843293140513884137371259764797232251920542607578542597042421608299710934650964853622956003269847826803102812445020031337994368402646390951052313341514061696409754720696523489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5bd08a1c9a325be0b5dd96541be18628b0fdb6bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f85ad8b333e774a5a80a96e693e1ec1adbdd53f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TERENASSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TERENASSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uinet.essex.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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