esp.westminster.ac.uk

- University of Westminster -

Issued by TERENA SSL CA

About this certificate

This digital certificate with serial number 1e:1e:a9:6e:3f:b2:3c:a8:6f:c9:f0:e7:da:6e:ef:a2 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

University of Westminster

Organization: University of Westminster
Organization unit: ISLS
Locality: London
Country: GB

TERENA

Organization: TERENA
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:1e:a9:6e:3f:b2:3c:a8:6f:c9:f0:e7:da:6e:ef:a2
Serial Number (int): 40036045241337445581082263245386870690
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 1a:c3:16:71:c3:5b:a9:89:b7:1b:f0:bc:32:46:1c:f1:19:8a:e2:7b
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed

Fingerprint (sha1): c9:c4:ab:58:23:f5:61:3b:d1:dc:b5:90:89:08:3a:32:11:03:4f:ef
Fingerprint (sha256): 17:b4:fe:ab:2a:fe:11:4d:09:06:f1:6f:4a:c8:63:ac:73:a0:18:4c:d0:04:5d:0f:0e:36:42:58:a4:48:f1:42

Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt

Revocation information

OCSP Server: http://ocsp.tcs.terena.org
CRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl

Check the revocation status for certificate esp.westminster.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for esp.westminster.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

esp.westminster.ac.uk

Other certificates including the domain name westminster.ac.uk

(limited to 100 certificates)
learning.westminster.ac.uk
your.westminster.ac.uk
sgd.westminster.ac.uk
identity.westminster.ac.uk
sni.cloudflaressl.com
ssl758755.cloudflaressl.com
svn.ecs.westminster.ac.uk
bbreportingproxy.westminster.ac.uk
ssl758755.cloudflaressl.com
smtpout.westminster.ac.uk
prospect.westminster.ac.uk
support.ecs.westminster.ac.uk
bomgar.westminster.ac.uk
wificon.westminster.ac.uk
login.ecs.westminster.ac.uk
webmail.westminster.ac.uk
emea-san1.blackboard.com
upload.ecs.westminster.ac.uk
library-catalogue-test.westminster.ac.uk
timetabling.westminster.ac.uk
resolveitdev.westminster.ac.uk
financelive.westminster.ac.uk
eu-central-1-san1.blackboard.com
lists.westminster.ac.uk
mobile-app.westminster.ac.uk
emea-san1.blackboard.com
resolveitdev.westminster.ac.uk
epayments.westminster.ac.uk
uniprint.westminster.ac.uk
store.westminster.ac.uk
ssl758755.cloudflaressl.com
emea-san1.blackboard.com
accommodation.westminster.ac.uk
vacancies.westminster.ac.uk
eu-central-1-san1.blackboard.com
*.ezproxy.westminster.ac.uk
payonline.westminster.ac.uk
printportal.westminster.ac.uk
bi.westminster.ac.uk
*.users.ecs.westminster.ac.uk
shortcourses.westminster.ac.uk
sgd.westminster.ac.uk
library-collections-search.westminster.ac.uk
folio.westminster.ac.uk
intranet.ecs.westminster.ac.uk
prospect.westminster.ac.uk
eu-central-1-san1.blackboard.com
learning.westminster.ac.uk
teamwork-internal.westminster.ac.uk
emea-san1.blackboard.com
esp.westminster.ac.uk
library-collections-search.westminster.ac.uk
password.westminster.ac.uk
identity-test.westminster.ac.uk
timetabling.westminster.ac.uk
eu-central-1-san1.blackboard.com
webprint.westminster.ac.uk
jssadmin.westminster.ac.uk
engage.westminster.ac.uk
helpdesks.westminster.ac.uk
support.ecs.westminster.ac.uk
uniprint.westminster.ac.uk
vapplications.westminster.ac.uk
*.test.westminster.ac.uk
emea-san1.blackboard.com
upload.ecs.westminster.ac.uk
download.ecs.westminster.ac.uk
library-catalogue.westminster.ac.uk
housing.westminster.ac.uk
eu-central-1-san1.blackboard.com
financetest.westminster.ac.uk
summeraccommodation.westminster.ac.uk
hub.westminster.ac.uk
emea-san1.blackboard.com
accommodation.westminster.ac.uk
research.westminster.ac.uk
myintranet.westminster.ac.uk
emea-san1.blackboard.com
*.ezproxy.westminster.ac.uk
uowmail.westminster.ac.uk
upload.ecs.westminster.ac.uk
portal.ecs.westminster.ac.uk
yourvirtualopenday.westminster.ac.uk
penguin.ecs.westminster.ac.uk
intranet.ecs.westminster.ac.uk
eu-central-1-san1.blackboard.com
support.ecs.westminster.ac.uk
eu-central-1-san1.blackboard.com
mailinglist.westminster.ac.uk
payonline.westminster.ac.uk
library-catalogue.westminster.ac.uk
financelive.westminster.ac.uk
devtesthub.westminster.ac.uk
identity.westminster.ac.uk
citrixvip.westminster.ac.uk
vapplications.westminster.ac.uk
emea-san1.blackboard.com
task.westminster.ac.uk
yourvirtualopenday.westminster.ac.uk
guestwifi.westminster.ac.uk

Certificate

The complete raw certificate details for esp.westminster.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEmzCCA4OgAwIBAgIQHh6pbj+yPKhvyfDn2m7vojANBgkqhkiG9w0BAQUFADA2
MQswCQYDVQQGEwJOTDEPMA0GA1UEChMGVEVSRU5BMRYwFAYDVQQDEw1URVJFTkEg
U1NMIENBMB4XDTExMDMwODAwMDAwMFoXDTE0MDMwNzIzNTk1OVowcTELMAkGA1UE
BhMCR0IxDzANBgNVBAcTBkxvbmRvbjEiMCAGA1UEChMZVW5pdmVyc2l0eSBvZiBX
ZXN0bWluc3RlcjENMAsGA1UECxMESVNMUzEeMBwGA1UEAxMVZXNwLndlc3RtaW5z
dGVyLmFjLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqueTJFwm
H1LSR5yOFk8uwE6rA9ynPbHsz+g9xJOeqKeHsfr7/JniyH252VQiAjJtfGkfIR58
1B0DaroFmVSZdXZMZsgColnTapDf5CH5yglHCvMg+uLVp4q8Zf7ORnacHChnmi3+
GMcG6OJWpKzJDXehha1gO5cL8Ol3MCDafabrkObYvbPGOyjhDAgtCXYkU6WpsyXW
s4dclOtpSPEIa8VtRu4zG6YrzuuFPDZfkD2EwNuIOLm+Al8KQyjijjxbJ0047TZ5
/8kIcyhTBXjGAwIJD2135vh+hmg9qkJlKzRl9ENkRnxR+jWzM331hQdVYMQNAt2L
KpdSVnBZooq/5wIDAQABo4IBaDCCAWQwHwYDVR0jBBgwFoAUDL2TaAzz3qujSWsr
N1dH6pDjue0wHQYDVR0OBBYEFBrDFnHDW6mJtxvwvDJGHPEZiuJ7MA4GA1UdDwEB
/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAYBgNVHSAEETAPMA0GCysGAQQBsjEBAgIdMDoGA1UdHwQzMDEwL6AtoCuG
KWh0dHA6Ly9jcmwudGNzLnRlcmVuYS5vcmcvVEVSRU5BU1NMQ0EuY3JsMG0GCCsG
AQUFBwEBBGEwXzA1BggrBgEFBQcwAoYpaHR0cDovL2NydC50Y3MudGVyZW5hLm9y
Zy9URVJFTkFTU0xDQS5jcnQwJgYIKwYBBQUHMAGGGmh0dHA6Ly9vY3NwLnRjcy50
ZXJlbmEub3JnMCAGA1UdEQQZMBeCFWVzcC53ZXN0bWluc3Rlci5hYy51azANBgkq
hkiG9w0BAQUFAAOCAQEAgE/RLFb/4/a+naNMqwwjCPbrlnTw6xLMnEZj6622eeku
mbMiX601LyzulEQpc04T6CHZg7XpmcLHCP8ar7Q/2WVSVQTGjqL+f3k8RPhutV/M
NN5VWCDtdUSTd8/d1xk8o3KKxVTKdixhXeZYHTvsQWiurz7dMMAeWH6WmWMskO7j
0iK+6D60OfY+o3bKJVCpi7lKr9ku0act877arD6cyGG2yxM/YkL6WiK3c0rB7z8h
Lfrt/Z02iVuaFOik5MFeJLRFW4tJ8aFZ22DMMyyFF3MjtrphiAkhdJCbHkWw2sa3
fp1mwdogB66tfN0FdxQm1lf0bWFj0m1oA6Rkdm96tA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqueTJFwmH1LSR5yOFk8u
wE6rA9ynPbHsz+g9xJOeqKeHsfr7/JniyH252VQiAjJtfGkfIR581B0DaroFmVSZ
dXZMZsgColnTapDf5CH5yglHCvMg+uLVp4q8Zf7ORnacHChnmi3+GMcG6OJWpKzJ
DXehha1gO5cL8Ol3MCDafabrkObYvbPGOyjhDAgtCXYkU6WpsyXWs4dclOtpSPEI
a8VtRu4zG6YrzuuFPDZfkD2EwNuIOLm+Al8KQyjijjxbJ0047TZ5/8kIcyhTBXjG
AwIJD2135vh+hmg9qkJlKzRl9ENkRnxR+jWzM331hQdVYMQNAt2LKpdSVnBZooq/
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 40036045241337445581082263245386870690
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-03-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Westminster'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ISLS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'esp.westminster.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21574705621132214229044533984483771324492697516490105765013753087898077201192732707543693820395376554522617294874162800179102219578273397217432395991254362087259448159173252381999463458780812326868665374417853372610028358360310886641272080414549424060051582727502429118628413632003283577768156054992696987208205666943636712328113364086694178206761045553975011442637898260126786439894555650449815518467647724022629602919437487516052650718310737088288580496677688959750157078839661999878611306209857151114913404889554407534788242486292780428804921795286370006346137911400608748039222706886612116070035582579232993886183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ac31671c35ba989b71bf0bc32461cf1198ae27b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esp.westminster.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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