clf.uk

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number a1:4d:5d:a5:c1:38:80:57:11:42:c6:c7:00:92:6d:3f was issued on by Google Trust Services LLC.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=clf.uk

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a1:4d:5d:a5:c1:38:80:57:11:42:c6:c7:00:92:6d:3f
Serial Number (int): 214407413576017504534313249181709528383
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 04:c0:d6:9d:01:2d:84:1a:ff:97:fc:11:f6:f7:d7:53:d3:23:82:37
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): a8:9d:0a:f6:c6:eb:7f:5b:92:4d:bc:5c:fb:bc:21:5c:61:f9:51:14
Fingerprint (sha256): 16:0d:18:70:3a:2c:4a:04:ae:d9:38:e3:78:58:f8:ca:d1:18:ab:22:26:b7:b6:64:73:b5:86:a7:1c:5d:e4:82

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/EcmUU85oscs
CRL Distribution Point: http://crls.pki.goog/gts1p5/t_gxjQT0328.crl

Check the revocation status for certificate clf.uk

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clf.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clf.uk
kingsoakacademy.clf.uk
minervaprimaryacademy.clf.uk
summerhillacademy.clf.uk
www.kingsoakacademy.clf.uk
www.minervaprimaryacademy.clf.uk
www.post16.clf.uk
post16.clf.uk
www.snowdonvillage.clf.uk
snowdonvillage.clf.uk
www.summerhillacademy.clf.uk
www.uphillvillageacademy.clf.uk
uphillvillageacademy.clf.uk
www.wallscourtfarmacademy.clf.uk
wallscourtfarmacademy.clf.uk
www.winterstokehundred.clf.uk
winterstokehundred.clf.uk
www.winterstokehundredacademy.clf.uk
winterstokehundredacademy.clf.uk
*.clf.uk
www.begbrookprimaryacademy.clf.uk
begbrookprimaryacademy.clf.uk
www.bristolmetropolitanacademy.clf.uk
bristolmetropolitanacademy.clf.uk
www.broadoakacademy.clf.uk
broadoakacademy.clf.uk
www.careers.clf.uk
www.cityacademybristol.clf.uk
cityacademybristol.clf.uk
www.develop.clf.uk
develop.clf.uk
www.digitechstudioschool.clf.uk
digitechstudioschool.clf.uk
www.evergreenprimaryacademy.clf.uk
evergreenprimaryacademy.clf.uk
www.fromevaleacademy.clf.uk
fromevaleacademy.clf.uk
www.hanhamwoodsacademy.clf.uk
hanhamwoodsacademy.clf.uk
www.hanspriceacademy.clf.uk
hanspriceacademy.clf.uk
www.haywoodvillageacademy.clf.uk
haywoodvillageacademy.clf.uk
www.heronsmooracademy.clf.uk
heronsmooracademy.clf.uk
www.johncabotacademy.clf.uk
johncabotacademy.clf.uk

Other certificates including the domain name clf.uk

(limited to 100 certificates)
clf.uk
jca1.clf-vps-001.clf.uk
hwa1.clf-vps-001.clf.uk
hwa1.clf-vps-001.clf.uk
clf.uk
tls.automattic.com
hpa1.clf-vps-001.clf.uk
clf.uk
clf.clf.academy
tls.automattic.com
staging.p161.clf-vps-001.clf.uk
clf.uk
*.clf.uk
staging.template1.clf-vps-001.clf.uk
clfhelpdesk.clf.uk
*.clf.uk
clf.uk
sa1.clf-vps-001.clf.uk
*.clf.uk
sni.cloudflaressl.com
bfa1.clf-vps-001.clf.uk
jca1.clf-vps-001.clf.uk
*.clf.uk
clf.uk
clf.uk
tls.automattic.com
wfa1.clf-vps-001.clf.uk
ba1.clf-vps-001.clf.uk
koa1.clf-vps-001.clf.uk
epa3.clf-vps-001.clf.uk
staging.p161.clf-vps-001.clf.uk
broadoakacademy.clf.uk
ba1.clf-vps-001.clf.uk
clf.uk
sts.clf.uk
tls.automattic.com
clf.clf.academy
clf.uk
clf.clf.academy
sni.cloudflaressl.com
staging.p161.clf-vps-001.clf.uk
tls.automattic.com
bpa1.clf-vps-001.clf.uk
ba1.clf-vps-001.clf.uk
dssb1.clf-vps-001.clf.uk
clfhelpdesk.clf.uk
jca1.clf-vps-001.clf.uk
bfa2.clf-vps-001.clf.uk
hwa1.clf-vps-001.clf.uk
tls.automattic.com
demoslider.clf-vps-001.clf.uk
broadoakacademy.clf.uk
bpa1.clf-vps-001.clf.uk
clfhelpdesk.clf.uk
clfhelpdesk.clf.uk
wfa1.clf-vps-001.clf.uk
bfa1.clf-vps-001.clf.uk
clf.uk
hpa1.clf-vps-001.clf.uk
hva1.clf-vps-001.clf.uk
clf.uk
sa1.clf-vps-001.clf.uk
tls.automattic.com
portal.clf.uk
clf.uk
clf.uk

Certificate

The complete raw certificate details for clf.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UDb/UJbIVnE8UlbbmPO
tP9UTIqsot5v6BL1eYR0P43S0Yu3m/TnhZ18QKdIo2M8SqSsIAPFtdvJ3yFYWoYR
/80hNJ0cYUvMPPyR7F/75uTaEr5b1tw/1buSvsJCfFJdWkV/WCDZpIVX7vetPw4O
SZHKA1Qm1LZwmq30kDIQLz9YZafn59e9045LmHWNaIfYHSAY7f0C9d5vhtG4bdcW
vreDsF0wxeP6tv+Mjs6AN1pq22cWfWRmNHcaOthqfX1L/TlROgmG6rCiCxbJZqQB
vebjEViFIzL+58+3JFL6DXj5Nz4ggD+NCh53hEFZjwubcpPuPPDv2JIFtr6zXmVc
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 214407413576017504534313249181709528383
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-10 02:11:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 03:08:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clf.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29950461606181343348628833475815528428567298321681132903281694228784914670473836890974956303496301026747331205600612447421435343278700590032065036921120794101967686386664081288507626181552898225524615434062667311370035348499270343971894896350265322503799050663175798600985139407014313907836439031179596893520352372393037867404709432415444203273615876393616807632343931660011152079887094598488967952575536582302622463004748167644185533332089806688109012767255317179829723223644023222583360271321108204996053012187252514316511126039492817963524389364490574247183564010028280442540539545296062432760153010659024494222361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04c0d69d012d841aff97fc11f6f7d753d3238237
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/EcmUU85oscs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1310 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingsoakacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minervaprimaryacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summerhillacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingsoakacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minervaprimaryacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.post16.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'post16.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snowdonvillage.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowdonvillage.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summerhillacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uphillvillageacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uphillvillageacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wallscourtfarmacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallscourtfarmacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winterstokehundred.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winterstokehundred.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winterstokehundredacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winterstokehundredacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.begbrookprimaryacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'begbrookprimaryacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bristolmetropolitanacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bristolmetropolitanacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broadoakacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadoakacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careers.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityacademybristol.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityacademybristol.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.develop.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitechstudioschool.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitechstudioschool.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evergreenprimaryacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evergreenprimaryacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fromevaleacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fromevaleacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hanhamwoodsacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanhamwoodsacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hanspriceacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanspriceacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haywoodvillageacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haywoodvillageacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heronsmooracademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heronsmooracademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johncabotacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johncabotacademy.clf.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/t_gxjQT0328.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e265864d7000004030047304502206c6a6b0eb3223d9a4432d6e374fe56d2965bfb9e78c7be819adcff3152ad1ed80221008e84e2de1f3fd30eda5516cc5c167e4c7cceae0e5b503ee6c7f580d5010eea3b007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e265864f50000040300463044022012e36f559728789a12f3dd0d766c0dade194f5d1e01c0ab12b59f5c7db1ed43d022076bf659416ced874bf1ab2152de9156ea01a63b778a2d15d6bb31ff955ba1b9b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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