fluff.bris.ac.uk

- University of Bristol -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 77:58:41:53:e7:a3:ef:ee:34:21:5f:4e:5d:2a:54:de was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Bristol

Organization: University of Bristol
State / Province: Bristol, City of
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 77:58:41:53:e7:a3:ef:ee:34:21:5f:4e:5d:2a:54:de
Serial Number (int): 158636378626207004966380079859173577950
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: af:5a:b0:88:f0:6d:29:74:70:77:6d:06:51:14:fb:e1:cd:94:12:58
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 8c:a4:6d:e2:e6:9b:d1:cc:c0:01:43:c2:90:6a:4d:04:54:d7:f4:b2
Fingerprint (sha256): 1c:bd:57:de:ce:e3:8a:b0:78:8c:39:e4:d3:51:23:96:28:38:89:3b:90:40:2d:ba:06:39:7d:3a:3d:73:bc:81

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate fluff.bris.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fluff.bris.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fluff.bris.ac.uk
fluff.bristol.ac.uk

Other certificates including the domain name bris.ac.uk

(limited to 100 certificates)
smtp-auth.bris.ac.uk
ilrt.static.rit.bris.ac.uk
myerp-archive-test.bris.ac.uk
wwwa-dev.fen.bris.ac.uk
wikisdev.bris.ac.uk
amis.bris.ac.uk
netmon.netcomms.bristol.ac.uk
estates.bris.ac.uk
DVAtraining.bristol.ac.uk
evision.apps.bristol.ac.uk
www.alumni.bris.ac.uk
naturelocator.ilrt.bris.ac.uk
crump.chm.bris.ac.uk
pwr.isys.bris.ac.uk
git.acrc.bris.ac.uk
evision.apps.bris.ac.uk
fitnetnhs.bristol.ac.uk
aerosol-cdt.ac.uk
galaxy-gio.acrc.bristol.ac.uk
socmed.ilrt.bris.ac.uk
www.medici.bris.ac.uk
www.alspac.bristol.ac.uk
ipadcrm.ilrt.bris.ac.uk
research-information.bris.ac.uk
IT038881.soms.bris.ac.uk
source.ggy.bris.ac.uk
status.resnet.bris.ac.uk
www.edes.bris.ac.uk
mailer.cs.bris.ac.uk
evision-b.apps.bristol.ac.uk
brainbanknetwork.cse.bris.ac.uk
proposals.epi.bris.ac.uk
datascience.bris.ac.uk
data.bristol.ac.uk
shop.bris.ac.uk
datacentertools.bris.ac.uk
www.survey.bris.ac.uk
xerte.bris.ac.uk
laharflow.bris.ac.uk
www.gradconnection.bristol.ac.uk
mwgit.bris.ac.uk
its-da-nls.cse.bris.ac.uk
dedefi.ilrt.bris.ac.uk
irisplus.bris.ac.uk
fluff.bris.ac.uk
www.apps.bris.ac.uk
moodle.bris.ac.uk
myerp-archive-test.bris.ac.uk
research-information.bris.ac.uk
interdelphi.rit.bristol.ac.uk
app-dc2-cirx-p0-vip.services.bris.ac.uk
wwwcoredev.bris.ac.uk
t4cms-dev.bris.ac.uk
wwwrep.ole.bris.ac.uk
ci.ilrt.bristol.ac.uk
online-payments.bris.ac.uk
people.maths.bris.ac.uk
chocolate.wireless.bris.ac.uk
wwwtestdev-ole.bris.ac.uk
oas.apps.bristol.ac.uk
shop.bris.ac.uk
globalbeershop.spe.cs.bris.ac.uk
www.alumni.bris.ac.uk
chocolate.wireless.bris.ac.uk
estates-servicedesk.bris.ac.uk
irisplus.bris.ac.uk
its-dc2-lemma2-p0-vip.computing-service.bristol.ac.uk
blogs.bristol.ac.uk
xerte-beta.bris.ac.uk
bos2-demo.ilrt.bris.ac.uk
xerte.bris.ac.uk
mediasite-dev.bristol.ac.uk
*.sls.bris.ac.uk
app-dc1-slsu-d0.services.bris.ac.uk
ole.bris.ac.uk
tender.bris.ac.uk
webmail.bris.ac.uk
www.cs.bris.ac.uk
arcadia.epi.bris.ac.uk
idp.bris.ac.uk
mediasite.services.bris.ac.uk
sso.bris.ac.uk
www.iser.bristol.ac.uk
corestream.bristol.ac.uk
its-splusiis-prod.cse.bris.ac.uk
myerp-archive.bristol.ac.uk
www.digitalscreens.bris.ac.uk
www.farscope.bris.ac.uk
myerp-int.bristol.ac.uk
ipadcrm.ilrt.bris.ac.uk
go.resnet.bristol.ac.uk
idhours.ilrt.bris.ac.uk
redcap-brtc-p1.epi.bris.ac.uk
www.ole.bris.ac.uk
missctrl.cs.bris.ac.uk
osier.ac.uk
reportandsupport.bris.ac.uk
research-information.bris.ac.uk
brainbanknetwork.ac.uk
contact.voicemail.bristol.ac.uk

Certificate

The complete raw certificate details for fluff.bris.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHazCCBVOgAwIBAgIQd1hBU+ej7+40IV9OXSpU3jANBgkqhkiG9w0BAQwFADBE
MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE
AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjIwOTA2MDAwMDAwWhcNMjMwOTA2MjM1
OTU5WjBjMQswCQYDVQQGEwJHQjEZMBcGA1UECBMQQnJpc3RvbCwgQ2l0eSBvZjEe
MBwGA1UEChMVVW5pdmVyc2l0eSBvZiBCcmlzdG9sMRkwFwYDVQQDExBmbHVmZi5i
cmlzLmFjLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLyoOMVF
02U+waH29uoDGuq1MkxuWm2cd3LlmnBoePWEVM/rdp2i6eLYwGepdRWiTj8Wi8yq
UUVMKX9KDJNJJcGFpmPCk6cdUm6c2SMEtwNmkBtD3OJGYlEG5FTZtObiNV07igUy
f10SbR4JDlYaoxxDmIK2kXOw02zYs8+Sk8ygVtGAJ8c8FJs0bJNmhUed/Vvhl/Qs
vANmtQpj2FL5QQu6ELCecv7te016YSJIt/o1S3KeKj9Vrf1YyJC3x1DywIPzL9/k
IBNdc3VKSB9CKBPDPGYQXDRvQ341fuVVQhIIoeB53k8yvZuHtbXjWpzahrhtkrP4
i2CCkIa6Ly1+8QIDAQABo4IDODCCAzQwHwYDVR0jBBgwFoAUbx01SRBsMvpZoJ68
iugflb5xegwwHQYDVR0OBBYEFK9asIjwbSl0cHdtBlEU++HNlBJYMA4GA1UdDwEB
/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgJPMCUwIwYIKwYBBQUHAgEWF2h0
dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAw
hi5odHRwOi8vR0VBTlQuY3JsLnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3Js
MHUGCCsGAQUFBwEBBGkwZzA6BggrBgEFBQcwAoYuaHR0cDovL0dFQU5ULmNydC5z
ZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNydDApBggrBgEFBQcwAYYdaHR0cDov
L0dFQU5ULm9jc3Auc2VjdGlnby5jb20wggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoB
aAB2AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABgxKt5rUAAAQD
AEcwRQIgPRdWBKPM4USj/EAxmfhkHq1+77tYXhYCMSsxtbA04H8CIQCBUwU4Or2K
/J8JwMkxb0cvSNWDVD1FT8yivYY+Cpty/gB2AHoyjFTYty22IOo44FIe6YQWcDIT
hU070ivBOlejUutSAAABgxKt5oIAAAQDAEcwRQIhANB0zxNbRr+E5H7aOIOO5Cqr
aKC2jvbqMHFteda0+xskAiAeZTj2/DAfM3iCyASDUj+SW7q1SHe9KKyh1wWeO1oA
cQB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABgxKt5lMAAAQD
AEcwRQIhAII9t/rIusTB+FHhdo02gOoXzo96atux15PA8vGsM7HJAiBRXG0ztPG+
E5EX5FN6NOpPE5J3URIuCsLEtVU5J4kwPjAwBgNVHREEKTAnghBmbHVmZi5icmlz
LmFjLnVrghNmbHVmZi5icmlzdG9sLmFjLnVrMA0GCSqGSIb3DQEBDAUAA4ICAQBM
oGu4LaFvuqxRtiydf5VQyz0I8V2NiWNqX/azkyP7/oJcGLIb8Tyc4B0prADEfDjZ
Sv/M5uLyiYjUOo3zUh1FrzR3nYs7eHUfwfeflvjEy6YVYHHN2ja4x2W/d0Rr90Hf
hQRT/wxFS8S9V7ADQw7nDtyfwtQVriDnKQ5iBZO9w+TVVdglURh0aKKlgVHloi5Y
skuUctrdT5edjnYXS/UXQCof88+GSJFleb2vG234EG7W3pj3IAo6+/hnXnZY3GgY
9bbaTnelyGQ4PUcvrIjKf0lIuZzMViH4uWGvBHV6+EB1pkYmKF7fHkiTqFYAVMgb
xyxCJRxRnQQDlZbQhqniw2XI0OoTogT1+PkLW/1S0PDgcebLhGn/V5cOZAPFvpMJ
IT1CkZNfcHbN5rRMt6FZoe8F4s0Wv4auMeCpP68SGwCiAScB/axeDOw+taEEuc4B
XMQ/VeXz94cB/HTmDAAAQqf6uh4HS9VJ/VZM/KcDlfzQ0w/LJ/cOP4d18paCkncE
s/EoISDCL8k5p0ytmgXWYKVI8ZUFNs+5UbKPbf3+wrN12AjcMtek0/SZFggenNk2
+8SFQDzyVlvMcpcJST0PlDWqFNj2Q5g8ZaT9kGni2ix/oUg2B1jvYz3qUZ1vtLrT
2G0xXjQxH/GdNk5sIai0gKma0hdZLhW15p8IecJ+Gg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLyoOMVF02U+waH29uoD
Guq1MkxuWm2cd3LlmnBoePWEVM/rdp2i6eLYwGepdRWiTj8Wi8yqUUVMKX9KDJNJ
JcGFpmPCk6cdUm6c2SMEtwNmkBtD3OJGYlEG5FTZtObiNV07igUyf10SbR4JDlYa
oxxDmIK2kXOw02zYs8+Sk8ygVtGAJ8c8FJs0bJNmhUed/Vvhl/QsvANmtQpj2FL5
QQu6ELCecv7te016YSJIt/o1S3KeKj9Vrf1YyJC3x1DywIPzL9/kIBNdc3VKSB9C
KBPDPGYQXDRvQ341fuVVQhIIoeB53k8yvZuHtbXjWpzahrhtkrP4i2CCkIa6Ly1+
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158636378626207004966380079859173577950
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bristol, City of'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Bristol'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fluff.bris.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24835738064657081291399610086865586620289104728562534775972439561259388109346031847965840469583735792934422464367453604963606508560333187955070632683067592557894369505892099808357929400680505110658871679558521701558660399405777888734710163558528512006813081168562175290209816968236767826596644305819558465131706396894916466683286091422191871121041821556527534042800255989101947692669656448695593338533786905555470650766454679387537871398394358459793514398925802830598401004593418418282760337677451599796034462491787012246497505263815060923417393222637934302942125610320065210583852043988596582314548688014932819410673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af5ab088f06d297470776d065114fbe1cd941258
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluff.bris.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluff.bristol.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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