www.astro.cf.ac.uk

- Cardiff University -

Issued by QuoVadis EV SSL ICA G3

About this certificate

This digital certificate with serial number 30:78:64:2c:b4:06:92:27:a1:28:ec:b4:23:a2:d9:93:74:60:22:01 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cardiff University

Company registration number: Government Entity
Organization: Cardiff University
Organization unit: School of Physics and Astronomy
State / Province: Glamorganshire
Locality: CARDIFF
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 30:78:64:2c:b4:06:92:27:a1:28:ec:b4:23:a2:d9:93:74:60:22:01
Serial Number (int): 276716372863680449880145345809594251806116946433
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: b0:8b:b1:8f:4e:05:69:e1:35:70:8d:9b:70:99:c4:dc:f4:6e:f2:be
AuthorityKeyId: e5:84:54:d0:90:49:9f:38:ba:f2:c9:e1:2a:08:c5:4e:9f:a0:48:3f

Fingerprint (sha1): 66:36:af:52:8c:ad:c1:aa:19:aa:e2:93:4c:39:c1:cb:79:86:bf:0c
Fingerprint (sha256): 17:78:23:6b:cf:12:bb:8e:c4:a4:b6:46:b4:a6:c9:63:10:20:ac:3c:39:88:25:d6:fd:89:c0:5e:0b:b2:7d:95

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevsslg3.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevsslg3.crl

Check the revocation status for certificate www.astro.cf.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.astro.cf.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.astro.cf.ac.uk

Other certificates including the domain name cf.ac.uk

(limited to 100 certificates)
skrinkle.bios.cf.ac.uk
itsupport.bios.cf.ac.uk
netstorage-mwe.cf.ac.uk
library-mwe.cf.ac.uk
studies.cubric.cf.ac.uk
itdocswiki.cf.ac.uk
exampapers.cf.ac.uk
itsupport.bios.cf.ac.uk
probe.biosi.cf.ac.uk
staging.sites.cf.ac.uk
tardis.cs.cf.ac.uk
ebs.cf.ac.uk
socket.cf.ac.uk
climgen.bios.cf.ac.uk
websites.cs.cf.ac.uk
sentinel.cs.cf.ac.uk
wayfinder.bios.cf.ac.uk
siteadm.cs.cf.ac.uk
horizonqp.cf.ac.uk
*.cs.cf.ac.uk
ligo.arcca.cf.ac.uk
wiki.ics.cf.ac.uk
nascent7.bios.cf.ac.uk
cardiffmail15.cf.ac.uk
audit.bios.cf.ac.uk
anngriffiths.cardiff.ac.uk
orca.cf.ac.uk
sharelatex.cs.cf.ac.uk
*.cs.cf.ac.uk
static.cf.ac.uk
mappedsites.cardiff.ac.uk
mailman.cf.ac.uk
gitlab-grav.astro.cf.ac.uk
muscat.astro.cf.ac.uk
dataportal1-wiserd.cf.ac.uk
myprint.cf.ac.uk
sims-mwe.cf.ac.uk
alexandria.astro.cf.ac.uk
learningcentral.cardiff.ac.uk
skrinkle.bios.cf.ac.uk
research.astro.cf.ac.uk
blogs.cardiff.ac.uk
fusion.cf.ac.uk
netserv.insrv.cf.ac.uk
nascent6.bios.cf.ac.uk
horizonst.cf.ac.uk
service-monitor.cf.ac.uk
taiga.cs.cf.ac.uk
group.cs.cf.ac.uk
home.cf.ac.uk
esa-qdip-gsp.astro.cf.ac.uk
cardiffmail03.cf.ac.uk
www.cardiffnetwork.cf.ac.uk
sentinel.cs.cf.ac.uk
esa-uk-tes-ctp.astro.cf.ac.uk
itsupport.bios.cf.ac.uk
probe.biosi.cf.ac.uk
scolgp.insrv.cf.ac.uk
absences.chemy.cf.ac.uk
ilrb.cf.ac.uk
psych.shared.cf.ac.uk
librarysearch-pre.cf.ac.uk
www.law.cf.ac.uk
signal.biosi.cf.ac.uk
storc.cf.ac.uk
servicedesk.cf.ac.uk
lost-visions.cf.ac.uk
inside.psych.cf.ac.uk
probe.biosi.cf.ac.uk
itsupport.bios.cf.ac.uk
climgen.bios.cf.ac.uk
skrinkle.bios.cf.ac.uk
webdav.cf.ac.uk
qyber.black
cscloud.cf.ac.uk
projectsite.cs.cf.ac.uk
brian.cplan.cf.ac.uk
ebs.cf.ac.uk
inside.biosi.cf.ac.uk
servicedesk.cf.ac.uk
illustrationarchive.cf.ac.uk
svn.cs.cf.ac.uk
gravity.astro.cf.ac.uk
www.astro.cf.ac.uk
pf.cf.ac.uk
siteadm.cs.cf.ac.uk
gitlab.cs.cf.ac.uk
s-vm6.cs.cf.ac.uk
healthcarestudies.cf.ac.uk
simstestlearn.cf.ac.uk
librarysearch.cf.ac.uk
myprint-mwe.cf.ac.uk
inside.biosi.cf.ac.uk
sitescardiff.cf.ac.uk
mteluni01.cf.ac.uk
bigr.bios.cf.ac.uk
nascent6.bios.cf.ac.uk
webmo.arcca.cf.ac.uk
leopard.bios.cf.ac.uk
wikis.cf.ac.uk

Certificate

The complete raw certificate details for www.astro.cf.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH+TCCBeGgAwIBAgIUMHhkLLQGkiehKOy0I6LZk3RgIgEwDQYJKoZIhvcNAQEL
BQAwSTELMAkGA1UEBhMCQk0xGTAXBgNVBAoMEFF1b1ZhZGlzIExpbWl0ZWQxHzAd
BgNVBAMMFlF1b1ZhZGlzIEVWIFNTTCBJQ0EgRzMwHhcNMTgxMjA1MTUwNDE5WhcN
MjAxMjA1MTUxNDAwWjCB6TETMBEGCysGAQQBgjc8AgEDEwJHQjEaMBgGA1UEDwwR
R292ZXJubWVudCBFbnRpdHkxGjAYBgNVBAUTEUdvdmVybm1lbnQgRW50aXR5MQsw
CQYDVQQGEwJHQjEXMBUGA1UECAwOR2xhbW9yZ2Fuc2hpcmUxEDAOBgNVBAcMB0NB
UkRJRkYxGzAZBgNVBAoMEkNhcmRpZmYgVW5pdmVyc2l0eTEoMCYGA1UECwwfU2No
b29sIG9mIFBoeXNpY3MgYW5kIEFzdHJvbm9teTEbMBkGA1UEAwwSd3d3LmFzdHJv
LmNmLmFjLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5OwPTeB
eNVs0JTztddv45nnvCXGCv8D/h/rq6qRqh9yuTJHUJuJuYaL3G6r40gERCAQpAGR
mnhbCXFaxckg2W2MTa9objlDK0XS0JTnqcAHNKoj5HEpCWJoA0VAIg2t83xYRhA+
1mFVfToUCOWILSyTzyz02/NTLHXer4aOzC0CH/Nn0QY4hooM7i1qWKmjZ3t0SDY+
CZmLuxml2xgfymMhZfbufn2YEJpMWWr0bpaxmL79Qr010msep8DrUQ1LS4kaXuWN
gUeQRpG4gsy3w2DhW13Zm/kqkXe5rZNGjlq3dqu7u2GNr9z41ZDZuKfj2DR5WjgQ
4F9j3oVESFxdDQIDAQABo4IDNjCCAzIwDAYDVR0TAQH/BAIwADAfBgNVHSMEGDAW
gBTlhFTQkEmfOLryyeEqCMVOn6BIPzB4BggrBgEFBQcBAQRsMGowOQYIKwYBBQUH
MAKGLWh0dHA6Ly90cnVzdC5xdW92YWRpc2dsb2JhbC5jb20vcXZldnNzbGczLmNy
dDAtBggrBgEFBQcwAYYhaHR0cDovL2V2Lm9jc3AucXVvdmFkaXNnbG9iYWwuY29t
MB0GA1UdEQQWMBSCEnd3dy5hc3Ryby5jZi5hYy51azBaBgNVHSAEUzBRMEYGDCsG
AQQBvlgAAmQBAjA2MDQGCCsGAQUFBwIBFihodHRwOi8vd3d3LnF1b3ZhZGlzZ2xv
YmFsLmNvbS9yZXBvc2l0b3J5MAcGBWeBDAEBMB0GA1UdJQQWMBQGCCsGAQUFBwMC
BggrBgEFBQcDATA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3JsLnF1b3ZhZGlz
Z2xvYmFsLmNvbS9xdmV2c3NsZzMuY3JsMB0GA1UdDgQWBBSwi7GPTgVp4TVwjZtw
mcTc9G7yvjAOBgNVHQ8BAf8EBAMCBaAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoB
aAB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABZ37vIH4AAAQD
AEcwRQIhAJ43p8ncjAjS2IqcQcdqRL+uwjs7xvbsjM6+7VEsq+V2AiBmnmCLGy+O
3uPQAKwQTyOCum23vnf3/w/K1Jkmn+gybgB2AFYUBpov18Ls0/XhvUSyPsdGdrm8
mRFcwO+UmFXWidDdAAABZ37vIRsAAAQDAEcwRQIgZPB7Ziu/e8L4Pyu2Gwvk1HVX
KP48Yu73kIS61N5UPxgCIQDz+G+hf4ym9TbEKcjxlSXxQIb/08SAL7NlTE/DtkZd
8wB2AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABZ37vIQEAAAQD
AEcwRQIhAIh+kL5yz0v1bU96W1rJf9SNXea/qH9rxIsQ9HsMadNLAiAeszqT1GBh
krEM2Xl5bycbi4N4fpi52NUj2SfvVkersTANBgkqhkiG9w0BAQsFAAOCAgEADiLM
ZfG4miu/fFXoILU6UcJAwQ0QX4u7cCZCQbuw2x+N6ys69WnpecPP8Kn7OyMLrzzP
r2+nbshKRZOZb8keYe364UAq9CL5gpZHFNp8+Ce0HM3HTzqHShN2u7vgcunzfh8d
k6GHDRxhDN/Wy7nYp9GGuYRS/M4ZgCzjrN1Junof/8C+jJlBs/G1fn7n/1X3u+Fh
ob2skS0qEepGphKuQ5bEsGY3vZh88K2k8jzPywjIS2V1n8KbI2f3r9qdLdzv3eAD
0QjptypzB6QpyLmLUZctihjpwF1XrmWVOcvO8Pfasf7AAqE3c4SzIZm2S3T2KKA1
Jc/tzGFRSHT+nmIKqsGPnu62u9c2wWUCSiglrdxjQbXXLGAT1ZTn7er7qV4uoG1J
W1EVeGW0iSH/D0+GdHZBCM3aW5T0bng9QbdxCLTwG/4CT2zwXihZas+tjohhFHRh
2M2vlOaPDY1fSvzycxCnWwGXhRA1e2gltxnze73x3EG7Ri3x5fK7P0z5z358XZi5
9iFeX2C13LG6pshS81j6P25+MGVLA3e5SqvNoricVa/fTrwa3K9LbLu25yd5HKWD
m1CWHbRoUeWuy0knT4qckm+ev9WmNxZNQj1h0UXUYvZWPL2SpyFg6qYzw+Fy7m6n
M/hedsFSeXXXDzK3i0PoSCilNbJi2dKuvDGTBZw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5OwPTeBeNVs0JTztddv
45nnvCXGCv8D/h/rq6qRqh9yuTJHUJuJuYaL3G6r40gERCAQpAGRmnhbCXFaxckg
2W2MTa9objlDK0XS0JTnqcAHNKoj5HEpCWJoA0VAIg2t83xYRhA+1mFVfToUCOWI
LSyTzyz02/NTLHXer4aOzC0CH/Nn0QY4hooM7i1qWKmjZ3t0SDY+CZmLuxml2xgf
ymMhZfbufn2YEJpMWWr0bpaxmL79Qr010msep8DrUQ1LS4kaXuWNgUeQRpG4gsy3
w2DhW13Zm/kqkXe5rZNGjlq3dqu7u2GNr9z41ZDZuKfj2DR5WjgQ4F9j3oVESFxd
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276716372863680449880145345809594251806116946433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis EV SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-05 15:04:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-05 15:14:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Glamorganshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CARDIFF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cardiff University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'School of Physics and Astronomy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.astro.cf.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24689297349565749107514506672217420244164436968343154915926611144142526124586285177879567633292667899017115605567320531010026357623602468701498287845755918683624405926251678072245385876030064382389232348106812136687780720863772034315725636766681186864007628104810947197487271621315664299547159434009470951084227575914492604424883062920202121097820619341962497579213491032904251040464266327570481904980892249491692241501530351806540226507399374170902994794571632424085394150529475086524258416146687774678079694953454662633548586636281185506707317356043504046708649146034745658060504630211631189008847189715165271317773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e58454d090499f38baf2c9e12a08c54e9fa0483f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astro.cf.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b08bb18f4e0569e135708d9b7099c4dcf46ef2be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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