www.ole.bris.ac.uk
- University of Bristol -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 25:04:0a:0d:20:29:00:ed:f6:b5:54:e7:ad:6a:04:b2 was issued on by GEANT Vereniging.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
University of Bristol
Organization:
University of Bristol
State / Province:
Bristol, City of
Country: GB
Country: GB
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate will expire on
Certificate Details
Serial Number (hex): 25:04:0a:0d:20:29:00:ed:f6:b5:54:e7:ad:6a:04:b2Serial Number (int): 49202408895491266472638407326932010162
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: 5a:ad:06:15:8c:0b:77:fe:1b:94:3d:2e:6e:7b:d1:5b:9b:bc:db:f9
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 6c:d8:82:60:ba:61:02:f0:fe:1c:02:b9:62:fb:ac:75:55:cb:05:1f
Fingerprint (sha256): 16:b2:a1:42:c2:e7:8f:51:36:eb:e3:e3:b1:b1:ef:25:cc:f3:71:9d:c2:01:da:6a:36:1b:0a:97:6c:eb:c1:18
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate www.ole.bris.ac.uk
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ole.bris.ac.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.ole.bris.ac.uk
ole.bris.ac.uk
ole.bristol.ac.uk
www.ole.bristol.ac.uk
ole.bris.ac.uk
ole.bristol.ac.uk
www.ole.bristol.ac.uk
Other certificates including the domain name bris.ac.uk
(limited to 100 certificates)
smtp-auth.bris.ac.uk
ilrt.static.rit.bris.ac.uk
myerp-archive-test.bris.ac.uk
wwwa-dev.fen.bris.ac.uk
wikisdev.bris.ac.uk
amis.bris.ac.uk
netmon.netcomms.bristol.ac.uk
estates.bris.ac.uk
DVAtraining.bristol.ac.uk
evision.apps.bristol.ac.uk
www.alumni.bris.ac.uk
naturelocator.ilrt.bris.ac.uk
crump.chm.bris.ac.uk
pwr.isys.bris.ac.uk
git.acrc.bris.ac.uk
evision.apps.bris.ac.uk
fitnetnhs.bristol.ac.uk
aerosol-cdt.ac.uk
galaxy-gio.acrc.bristol.ac.uk
socmed.ilrt.bris.ac.uk
www.medici.bris.ac.uk
www.alspac.bristol.ac.uk
ipadcrm.ilrt.bris.ac.uk
research-information.bris.ac.uk
IT038881.soms.bris.ac.uk
source.ggy.bris.ac.uk
status.resnet.bris.ac.uk
www.edes.bris.ac.uk
mailer.cs.bris.ac.uk
evision-b.apps.bristol.ac.uk
brainbanknetwork.cse.bris.ac.uk
proposals.epi.bris.ac.uk
datascience.bris.ac.uk
data.bristol.ac.uk
shop.bris.ac.uk
datacentertools.bris.ac.uk
www.survey.bris.ac.uk
xerte.bris.ac.uk
laharflow.bris.ac.uk
www.gradconnection.bristol.ac.uk
mwgit.bris.ac.uk
its-da-nls.cse.bris.ac.uk
dedefi.ilrt.bris.ac.uk
irisplus.bris.ac.uk
fluff.bris.ac.uk
www.apps.bris.ac.uk
moodle.bris.ac.uk
myerp-archive-test.bris.ac.uk
research-information.bris.ac.uk
interdelphi.rit.bristol.ac.uk
app-dc2-cirx-p0-vip.services.bris.ac.uk
wwwcoredev.bris.ac.uk
t4cms-dev.bris.ac.uk
wwwrep.ole.bris.ac.uk
ci.ilrt.bristol.ac.uk
online-payments.bris.ac.uk
people.maths.bris.ac.uk
chocolate.wireless.bris.ac.uk
wwwtestdev-ole.bris.ac.uk
oas.apps.bristol.ac.uk
shop.bris.ac.uk
globalbeershop.spe.cs.bris.ac.uk
www.alumni.bris.ac.uk
chocolate.wireless.bris.ac.uk
estates-servicedesk.bris.ac.uk
irisplus.bris.ac.uk
its-dc2-lemma2-p0-vip.computing-service.bristol.ac.uk
blogs.bristol.ac.uk
xerte-beta.bris.ac.uk
bos2-demo.ilrt.bris.ac.uk
xerte.bris.ac.uk
mediasite-dev.bristol.ac.uk
*.sls.bris.ac.uk
app-dc1-slsu-d0.services.bris.ac.uk
ole.bris.ac.uk
tender.bris.ac.uk
webmail.bris.ac.uk
www.cs.bris.ac.uk
arcadia.epi.bris.ac.uk
idp.bris.ac.uk
mediasite.services.bris.ac.uk
sso.bris.ac.uk
www.iser.bristol.ac.uk
corestream.bristol.ac.uk
its-splusiis-prod.cse.bris.ac.uk
myerp-archive.bristol.ac.uk
www.digitalscreens.bris.ac.uk
www.farscope.bris.ac.uk
myerp-int.bristol.ac.uk
ipadcrm.ilrt.bris.ac.uk
go.resnet.bristol.ac.uk
idhours.ilrt.bris.ac.uk
redcap-brtc-p1.epi.bris.ac.uk
www.ole.bris.ac.uk
missctrl.cs.bris.ac.uk
osier.ac.uk
reportandsupport.bris.ac.uk
research-information.bris.ac.uk
brainbanknetwork.ac.uk
contact.voicemail.bristol.ac.uk
ilrt.static.rit.bris.ac.uk
myerp-archive-test.bris.ac.uk
wwwa-dev.fen.bris.ac.uk
wikisdev.bris.ac.uk
amis.bris.ac.uk
netmon.netcomms.bristol.ac.uk
estates.bris.ac.uk
DVAtraining.bristol.ac.uk
evision.apps.bristol.ac.uk
www.alumni.bris.ac.uk
naturelocator.ilrt.bris.ac.uk
crump.chm.bris.ac.uk
pwr.isys.bris.ac.uk
git.acrc.bris.ac.uk
evision.apps.bris.ac.uk
fitnetnhs.bristol.ac.uk
aerosol-cdt.ac.uk
galaxy-gio.acrc.bristol.ac.uk
socmed.ilrt.bris.ac.uk
www.medici.bris.ac.uk
www.alspac.bristol.ac.uk
ipadcrm.ilrt.bris.ac.uk
research-information.bris.ac.uk
IT038881.soms.bris.ac.uk
source.ggy.bris.ac.uk
status.resnet.bris.ac.uk
www.edes.bris.ac.uk
mailer.cs.bris.ac.uk
evision-b.apps.bristol.ac.uk
brainbanknetwork.cse.bris.ac.uk
proposals.epi.bris.ac.uk
datascience.bris.ac.uk
data.bristol.ac.uk
shop.bris.ac.uk
datacentertools.bris.ac.uk
www.survey.bris.ac.uk
xerte.bris.ac.uk
laharflow.bris.ac.uk
www.gradconnection.bristol.ac.uk
mwgit.bris.ac.uk
its-da-nls.cse.bris.ac.uk
dedefi.ilrt.bris.ac.uk
irisplus.bris.ac.uk
fluff.bris.ac.uk
www.apps.bris.ac.uk
moodle.bris.ac.uk
myerp-archive-test.bris.ac.uk
research-information.bris.ac.uk
interdelphi.rit.bristol.ac.uk
app-dc2-cirx-p0-vip.services.bris.ac.uk
wwwcoredev.bris.ac.uk
t4cms-dev.bris.ac.uk
wwwrep.ole.bris.ac.uk
ci.ilrt.bristol.ac.uk
online-payments.bris.ac.uk
people.maths.bris.ac.uk
chocolate.wireless.bris.ac.uk
wwwtestdev-ole.bris.ac.uk
oas.apps.bristol.ac.uk
shop.bris.ac.uk
globalbeershop.spe.cs.bris.ac.uk
www.alumni.bris.ac.uk
chocolate.wireless.bris.ac.uk
estates-servicedesk.bris.ac.uk
irisplus.bris.ac.uk
its-dc2-lemma2-p0-vip.computing-service.bristol.ac.uk
blogs.bristol.ac.uk
xerte-beta.bris.ac.uk
bos2-demo.ilrt.bris.ac.uk
xerte.bris.ac.uk
mediasite-dev.bristol.ac.uk
*.sls.bris.ac.uk
app-dc1-slsu-d0.services.bris.ac.uk
ole.bris.ac.uk
tender.bris.ac.uk
webmail.bris.ac.uk
www.cs.bris.ac.uk
arcadia.epi.bris.ac.uk
idp.bris.ac.uk
mediasite.services.bris.ac.uk
sso.bris.ac.uk
www.iser.bristol.ac.uk
corestream.bristol.ac.uk
its-splusiis-prod.cse.bris.ac.uk
myerp-archive.bristol.ac.uk
www.digitalscreens.bris.ac.uk
www.farscope.bris.ac.uk
myerp-int.bristol.ac.uk
ipadcrm.ilrt.bris.ac.uk
go.resnet.bristol.ac.uk
idhours.ilrt.bris.ac.uk
redcap-brtc-p1.epi.bris.ac.uk
www.ole.bris.ac.uk
missctrl.cs.bris.ac.uk
osier.ac.uk
reportandsupport.bris.ac.uk
research-information.bris.ac.uk
brainbanknetwork.ac.uk
contact.voicemail.bristol.ac.uk
Certificate
The complete raw certificate details for www.ole.bris.ac.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHlTCCBX2gAwIBAgIQJQQKDSApAO32tVTnrWoEsjANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjMxMDAyMDAwMDAwWhcNMjQxMDA2MjM1 OTU5WjBlMQswCQYDVQQGEwJHQjEZMBcGA1UECBMQQnJpc3RvbCwgQ2l0eSBvZjEe MBwGA1UEChMVVW5pdmVyc2l0eSBvZiBCcmlzdG9sMRswGQYDVQQDExJ3d3cub2xl LmJyaXMuYWMudWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw47eS pqtHrqaux8CciPs71YWHQPaaobZ88FX2hrNu3jQzDalHClNNeCceEtSc+7PMP07i M227Ng4M5L/5MXXHkuVebYad6fekfHMqP+77GuofvVMC3/ztahWH5LuwIIUBdcr0 4PCkYSgNSzQ4GqTe9ShZ0BBBDS5ZHa/djIPdKRU3gHjxn1yVXXdGUm6Mvc2AYRL3 IGG9sa5hdJys89sJAb2Br78WKu0gPtKe5j1PweIe6Bbs4sW98CHiirZawrNvtF+s DCxQm8KNJFjB6cec2ZDk3uvBqA7/ufy3GDDNB8uOPU3nnJFM3UXCwKMnWodI0aXD mrnqlz2QOVQfG955AgMBAAGjggNgMIIDXDAfBgNVHSMEGDAWgBRvHTVJEGwy+lmg nryK6B+VvnF6DDAdBgNVHQ4EFgQUWq0GFYwLd/4blD0ubnvRW5u82/kwDgYDVR0P AQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMEkGA1UdIARCMEAwNAYLKwYBBAGyMQECAk8wJTAjBggrBgEFBQcCARYX aHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAy oDCGLmh0dHA6Ly9HRUFOVC5jcmwuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5j cmwwdQYIKwYBBQUHAQEEaTBnMDoGCCsGAQUFBzAChi5odHRwOi8vR0VBTlQuY3J0 LnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3J0MCkGCCsGAQUFBzABhh1odHRw Oi8vR0VBTlQub2NzcC5zZWN0aWdvLmNvbTCCAX8GCisGAQQB1nkCBAIEggFvBIIB awFpAHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGK8RHNawAA BAMASDBGAiEAjP+hVz2nV0/8gGtzxstxfr5fVJycVpISzEtvasigzPYCIQDR4fAt na8IO+TWlWGC4u1UEGhygaujdo9y8/F8endfNAB3ANq2v2s/tbYin5vCu1xr6HCR cWy7UYSFNL2kPTBI1/urAAABivERzf4AAAQDAEgwRgIhAKxQBtohlOsNc0EiLzhi wN6ol5fhQ9Qs2gWFKb+y9FIKAiEArQ0BZRi1cY5CTIyyrXcwmApDxSvN8P4yuQkS cFZJxKwAdQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYrxEc2V AAAEAwBGMEQCIAWtS9n+y2WnvfeKVvnLyxU4Rnb1LWWSgrJpgl/5lCxfAiA8elm0 Ej2WBQpq9K5o2COlQpMPZuZLACZi9prordI3sjBXBgNVHREEUDBOghJ3d3cub2xl LmJyaXMuYWMudWuCDm9sZS5icmlzLmFjLnVrghFvbGUuYnJpc3RvbC5hYy51a4IV d3d3Lm9sZS5icmlzdG9sLmFjLnVrMA0GCSqGSIb3DQEBDAUAA4ICAQCetbgxD7bx wCc/86jDA87TZt8mdY2fJ0EXfF7bToPC1Euf35hipiZijIOutcuFX6xpoAvNyNho Y+uiHRv+z33JjZctz+5roMyIafHkPSwf8IaCwSlI5FkQoaVkMzwJtDjYDMWz3rE/ Q7wTvMEnjdiHJPPff4e4wuWqVwbYGxad7r3Bc+9sv58dpIKhCsilyTMdxWGxoYRd cLJ6krzy7+eH/456SpV15XAgAIki5q9EL+noQu8bxAyVxnnZPHq80iPr4GWmaBOK 8VxNi7JEc/Et86NLQn94O4DVFStQNDCPybOsvAL9ac01wjnM42HkFeutTS6rFxXY GQcVPl2bA/dn5zTQeehLRzFK/AnBBksK4dOzsaLM8tNa0uwyIeiQnyG4pmuGZk8V AFD/fv1DS4QrfMCViEmKeZOWNhuOfdjuJJVhzq2pLwfxUXgcwt+dwC5D2eV3I4GO 9NlgPXMSYjoU1kRxvAsyXGHj6jEiv/TJLAGWygH96t5+UusbW8y7ThxFA4XwFA5l /fBbDFpueUjZHlJ/+6QEgZiRvpQFWvzjI8ouZ1Y++WOy7LGu9U0cg9v2F6yKtHRV 0Yp14jYBxL+M4r3Wd4kDBq8tcVv7VPwTljXlqk4X3q0VIUNGN/s6UNGgEt15occj XCVBuUYMgA0j+2yyJ9+KW2QvvRh+Og54eA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOO3kqarR66mrsfAnIj7 O9WFh0D2mqG2fPBV9oazbt40Mw2pRwpTTXgnHhLUnPuzzD9O4jNtuzYODOS/+TF1 x5LlXm2Gnen3pHxzKj/u+xrqH71TAt/87WoVh+S7sCCFAXXK9ODwpGEoDUs0OBqk 3vUoWdAQQQ0uWR2v3YyD3SkVN4B48Z9clV13RlJujL3NgGES9yBhvbGuYXScrPPb CQG9ga+/FirtID7SnuY9T8HiHugW7OLFvfAh4oq2WsKzb7RfrAwsUJvCjSRYwenH nNmQ5N7rwagO/7n8txgwzQfLjj1N55yRTN1FwsCjJ1qHSNGlw5q56pc9kDlUHxve eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 49202408895491266472638407326932010162 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bristol, City of' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Bristol' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ole.bris.ac.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22330233152058619071755727040781265475363281293806545037722858599563618699434244555761414489619957906771012537357306974323409785546445141993523752290592881691054745693163287122315105271950132045895510229068586289084694503953632546078090748276817699786863680420137626956245428499265495706581019750520793903314275308893949129960714520294573882479889837273393956458010589362474101659328432919261664692540997657117130474693000550671052456130849813862932916820222506136092355589228712340365529419795007048342698388246310309233751387061436374898525980330248108066363891904914012428396166224995053048677906401413549099048569 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5aad06158c0b77fe1b943d2e6e7bd15b9bbcdbf9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ole.bris.ac.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ole.bris.ac.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ole.bristol.ac.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ole.bristol.ac.uk' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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