corestream.bristol.ac.uk

- University of Bristol -

Issued by QuoVadis EV SSL ICA G3

About this certificate

This digital certificate with serial number 67:39:bb:4c:97:29:f0:32:b5:c7:02:a5:44:93:7f:0f:2d:5b:02:e1 was issued on by QuoVadis Limited.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Bristol

Company registration number: May-17-09
Organization: University of Bristol
Organization unit: IT Services
State / Province: City of Bristol
Locality: BRISTOL
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 67:39:bb:4c:97:29:f0:32:b5:c7:02:a5:44:93:7f:0f:2d:5b:02:e1
Serial Number (int): 589313507931032025003220099604927274152707687137
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 4d:c2:a8:6b:be:12:fa:5d:2f:1b:7d:18:84:d8:2d:03:66:8e:a3:32
AuthorityKeyId: e5:84:54:d0:90:49:9f:38:ba:f2:c9:e1:2a:08:c5:4e:9f:a0:48:3f

Fingerprint (sha1): 95:cf:20:47:bd:57:89:dc:82:eb:09:d3:9e:8a:a0:cd:c9:a5:e6:6b
Fingerprint (sha256): 13:ca:62:1b:b1:12:2a:de:84:be:cf:70:a9:27:10:0c:98:01:f9:0c:41:6b:a8:f0:c2:8a:06:06:97:cd:ad:9b

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevsslg3.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevsslg3.crl

Check the revocation status for certificate corestream.bristol.ac.uk

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for corestream.bristol.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

corestream.bristol.ac.uk
corestream.bris.ac.uk
infoassetregister.bristol.ac.uk
infoassetregister.bris.ac.uk

Other certificates including the domain name bristol.ac.uk

(limited to 100 certificates)
myerp-archive-test.bris.ac.uk
wwwa-dev.fen.bris.ac.uk
amis.bris.ac.uk
netmon.netcomms.bristol.ac.uk
estates.bris.ac.uk
DVAtraining.bristol.ac.uk
blogs.bristol.ac.uk
evision.apps.bristol.ac.uk
naturelocator.ilrt.bris.ac.uk
www.brtcrandomisation.bristol.ac.uk
fitnetnhs.bristol.ac.uk
aerosol-cdt.ac.uk
galaxy-gio.acrc.bristol.ac.uk
www.alspac.bristol.ac.uk
research-information.bris.ac.uk
dialogue.bristol.ac.uk
status.resnet.bris.ac.uk
blogs-test.bristol.ac.uk
evision-b.apps.bristol.ac.uk
blogs.bristol.ac.uk
proposals.epi.bris.ac.uk
data.bristol.ac.uk
www.survey.bris.ac.uk
xerte.bris.ac.uk
www.by-band.bristol.ac.uk
laharflow.bris.ac.uk
www.gradconnection.bristol.ac.uk
cteu.bristol.ac.uk
mwgit.bris.ac.uk
blogs.bristol.ac.uk
myerp-archive-test.bris.ac.uk
research-information.bris.ac.uk
interdelphi.rit.bristol.ac.uk
cteu-trials.bristol.ac.uk
app-dc2-cirx-p0-vip.services.bris.ac.uk
ci.ilrt.bristol.ac.uk
wwwtestdev-ole.bris.ac.uk
oas.apps.bristol.ac.uk
its-dc2-lemma2-p0-vip.computing-service.bristol.ac.uk
blogs.bristol.ac.uk
xerte-beta.bris.ac.uk
xerte.bris.ac.uk
mediasite-dev.bristol.ac.uk
rds-web.bristol.ac.uk
intelligentsystems.bristol.ac.uk
www.cs.bris.ac.uk
mediasite.services.bris.ac.uk
purchasing-system.bristol.ac.uk
www.iser.bristol.ac.uk
corestream.bristol.ac.uk
its-splusiis-prod.cse.bris.ac.uk
myerp-archive.bristol.ac.uk
www.digitalscreens.bris.ac.uk
myerp-int.bristol.ac.uk
go.resnet.bristol.ac.uk
blogs.bristol.ac.uk
manage.resnet.bristol.ac.uk
www.ole.bris.ac.uk
reportandsupport.bris.ac.uk
research-information.bris.ac.uk
contact.voicemail.bristol.ac.uk
heart-institute.bristol.ac.uk
consult.bristol.ac.uk
evision-b.apps.bristol.ac.uk
train.sls.bristol.ac.uk
seis.bristol.ac.uk
blogs.bristol.ac.uk
child-cough.bristol.ac.uk
blogs.bristol.ac.uk
blogs.bristol.ac.uk
www.bristol.ac.uk
leder-test.rit.bristol.ac.uk
imagelibrary.bristol.ac.uk
dedefi.ilrt.bristol.ac.uk
reportandsupport.bris.ac.uk
imagelibrary.bristol.ac.uk
training-data-warehouse.epi.bris.ac.uk
www.wireless.bris.ac.uk
dedefi.ilrt.bristol.ac.uk
gpo-srv.bristol.ac.uk
careers.bristol.ac.uk
fluff.bris.ac.uk
child-cough.bristol.ac.uk
fluff.bris.ac.uk
team.resnet.bristol.ac.uk
btc-test.bristol.ac.uk
blogs.bristol.ac.uk
blogs.bristol.ac.uk
sphere1-connect.een.bristol.ac.uk
ITS-SOCSWEB.cse.bris.ac.uk
www.brtcrandomisation.bristol.ac.uk
develop.bristol.ac.uk
mlbook.cs.bris.ac.uk
galaxy-gio.acrc.bristol.ac.uk
www.acrc.bris.ac.uk
www.gradconnection.bristol.ac.uk
ole.bristol.ac.uk
child-cough.bristol.ac.uk
parking-permits.bristol.ac.uk
www.wireless.bris.ac.uk

Certificate

The complete raw certificate details for corestream.bristol.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOiuJauHux+IPY/Vhzua
4+AoYcnOEb5D3YtRfOkjwliW7cQNwFagEJ2LlS3DTIrvapaKz6++nbuiwMNXvrv0
IqFdHS6OC8wtQrvPPWnQclNcKY5MHPLOS/jUlYGxVxKtN+z8X3vUb3Xx/d+rcbXS
vXAXVTNbZcJBP6pspI3kjTDYUyEmQPdxbRssbnixgIU2JztBEgGBosLL6dTJbo9/
1ZCaZ1NJhmvfPO0DdlXlluDM7VudK0V62ejLQ4M+CD+dK+LZC8cWypVj6cUsYcPT
77UwN0I+RmZWxwZ0zy59CWqDnWDsLmJiYpnXtIhA6Z9gJIRi2x5jzkA+auHyLnaT
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 589313507931032025003220099604927274152707687137
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis EV SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-02 09:52:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-02 10:02:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'May-17-09'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'City of Bristol'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BRISTOL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Bristol'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'corestream.bristol.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22332680587743926499062635181883827508214386569608112742384906873089040417563588101133938116951219276439629699691819428739779615343691164481725893643702129606785878550328121253387669753434571603695024388841958858740124201380523941129787193693385017478694279889580079421568352326153229732484197332291699846883222955745832886498368847762261534271273223589220978808838330348438174871633812248634513084088182023605127345943201566545397478976325309848260557233811003075016358504182652554060688678298037955722038309677147388954246873863573063933593395779018857902133378558278785217450449809363133842774414540546440070337513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4dc2a86bbe12fa5d2f1b7d1884d82d03668ea332
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e58454d090499f38baf2c9e12a08c54e9fa0483f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corestream.bristol.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corestream.bris.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infoassetregister.bristol.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infoassetregister.bris.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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