fluff.bris.ac.uk
- University of Bristol -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 77:58:41:53:e7:a3:ef:ee:34:21:5f:4e:5d:2a:54:de was issued on by GEANT Vereniging.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
University of Bristol
Organization:
University of Bristol
State / Province:
Bristol, City of
Country: GB
Country: GB
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 77:58:41:53:e7:a3:ef:ee:34:21:5f:4e:5d:2a:54:deSerial Number (int): 158636378626207004966380079859173577950
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: af:5a:b0:88:f0:6d:29:74:70:77:6d:06:51:14:fb:e1:cd:94:12:58
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 8c:a4:6d:e2:e6:9b:d1:cc:c0:01:43:c2:90:6a:4d:04:54:d7:f4:b2
Fingerprint (sha256): 1c:bd:57:de:ce:e3:8a:b0:78:8c:39:e4:d3:51:23:96:28:38:89:3b:90:40:2d:ba:06:39:7d:3a:3d:73:bc:81
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate fluff.bris.ac.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fluff.bris.ac.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fluff.bris.ac.uk
fluff.bristol.ac.uk
fluff.bristol.ac.uk
Other certificates including the domain name bris.ac.uk
(limited to 100 certificates)
smtp-auth.bris.ac.uk
ilrt.static.rit.bris.ac.uk
myerp-archive-test.bris.ac.uk
wwwa-dev.fen.bris.ac.uk
wikisdev.bris.ac.uk
amis.bris.ac.uk
netmon.netcomms.bristol.ac.uk
estates.bris.ac.uk
DVAtraining.bristol.ac.uk
evision.apps.bristol.ac.uk
www.alumni.bris.ac.uk
naturelocator.ilrt.bris.ac.uk
crump.chm.bris.ac.uk
pwr.isys.bris.ac.uk
git.acrc.bris.ac.uk
evision.apps.bris.ac.uk
fitnetnhs.bristol.ac.uk
aerosol-cdt.ac.uk
galaxy-gio.acrc.bristol.ac.uk
socmed.ilrt.bris.ac.uk
www.medici.bris.ac.uk
www.alspac.bristol.ac.uk
ipadcrm.ilrt.bris.ac.uk
research-information.bris.ac.uk
IT038881.soms.bris.ac.uk
source.ggy.bris.ac.uk
status.resnet.bris.ac.uk
www.edes.bris.ac.uk
mailer.cs.bris.ac.uk
evision-b.apps.bristol.ac.uk
brainbanknetwork.cse.bris.ac.uk
proposals.epi.bris.ac.uk
datascience.bris.ac.uk
data.bristol.ac.uk
shop.bris.ac.uk
datacentertools.bris.ac.uk
www.survey.bris.ac.uk
xerte.bris.ac.uk
laharflow.bris.ac.uk
www.gradconnection.bristol.ac.uk
mwgit.bris.ac.uk
its-da-nls.cse.bris.ac.uk
dedefi.ilrt.bris.ac.uk
irisplus.bris.ac.uk
fluff.bris.ac.uk
www.apps.bris.ac.uk
moodle.bris.ac.uk
myerp-archive-test.bris.ac.uk
research-information.bris.ac.uk
interdelphi.rit.bristol.ac.uk
app-dc2-cirx-p0-vip.services.bris.ac.uk
wwwcoredev.bris.ac.uk
t4cms-dev.bris.ac.uk
wwwrep.ole.bris.ac.uk
ci.ilrt.bristol.ac.uk
online-payments.bris.ac.uk
people.maths.bris.ac.uk
chocolate.wireless.bris.ac.uk
wwwtestdev-ole.bris.ac.uk
oas.apps.bristol.ac.uk
shop.bris.ac.uk
globalbeershop.spe.cs.bris.ac.uk
www.alumni.bris.ac.uk
chocolate.wireless.bris.ac.uk
estates-servicedesk.bris.ac.uk
irisplus.bris.ac.uk
its-dc2-lemma2-p0-vip.computing-service.bristol.ac.uk
blogs.bristol.ac.uk
xerte-beta.bris.ac.uk
bos2-demo.ilrt.bris.ac.uk
xerte.bris.ac.uk
mediasite-dev.bristol.ac.uk
*.sls.bris.ac.uk
app-dc1-slsu-d0.services.bris.ac.uk
ole.bris.ac.uk
tender.bris.ac.uk
webmail.bris.ac.uk
www.cs.bris.ac.uk
arcadia.epi.bris.ac.uk
idp.bris.ac.uk
mediasite.services.bris.ac.uk
sso.bris.ac.uk
www.iser.bristol.ac.uk
corestream.bristol.ac.uk
its-splusiis-prod.cse.bris.ac.uk
myerp-archive.bristol.ac.uk
www.digitalscreens.bris.ac.uk
www.farscope.bris.ac.uk
myerp-int.bristol.ac.uk
ipadcrm.ilrt.bris.ac.uk
go.resnet.bristol.ac.uk
idhours.ilrt.bris.ac.uk
redcap-brtc-p1.epi.bris.ac.uk
www.ole.bris.ac.uk
missctrl.cs.bris.ac.uk
osier.ac.uk
reportandsupport.bris.ac.uk
research-information.bris.ac.uk
brainbanknetwork.ac.uk
contact.voicemail.bristol.ac.uk
ilrt.static.rit.bris.ac.uk
myerp-archive-test.bris.ac.uk
wwwa-dev.fen.bris.ac.uk
wikisdev.bris.ac.uk
amis.bris.ac.uk
netmon.netcomms.bristol.ac.uk
estates.bris.ac.uk
DVAtraining.bristol.ac.uk
evision.apps.bristol.ac.uk
www.alumni.bris.ac.uk
naturelocator.ilrt.bris.ac.uk
crump.chm.bris.ac.uk
pwr.isys.bris.ac.uk
git.acrc.bris.ac.uk
evision.apps.bris.ac.uk
fitnetnhs.bristol.ac.uk
aerosol-cdt.ac.uk
galaxy-gio.acrc.bristol.ac.uk
socmed.ilrt.bris.ac.uk
www.medici.bris.ac.uk
www.alspac.bristol.ac.uk
ipadcrm.ilrt.bris.ac.uk
research-information.bris.ac.uk
IT038881.soms.bris.ac.uk
source.ggy.bris.ac.uk
status.resnet.bris.ac.uk
www.edes.bris.ac.uk
mailer.cs.bris.ac.uk
evision-b.apps.bristol.ac.uk
brainbanknetwork.cse.bris.ac.uk
proposals.epi.bris.ac.uk
datascience.bris.ac.uk
data.bristol.ac.uk
shop.bris.ac.uk
datacentertools.bris.ac.uk
www.survey.bris.ac.uk
xerte.bris.ac.uk
laharflow.bris.ac.uk
www.gradconnection.bristol.ac.uk
mwgit.bris.ac.uk
its-da-nls.cse.bris.ac.uk
dedefi.ilrt.bris.ac.uk
irisplus.bris.ac.uk
fluff.bris.ac.uk
www.apps.bris.ac.uk
moodle.bris.ac.uk
myerp-archive-test.bris.ac.uk
research-information.bris.ac.uk
interdelphi.rit.bristol.ac.uk
app-dc2-cirx-p0-vip.services.bris.ac.uk
wwwcoredev.bris.ac.uk
t4cms-dev.bris.ac.uk
wwwrep.ole.bris.ac.uk
ci.ilrt.bristol.ac.uk
online-payments.bris.ac.uk
people.maths.bris.ac.uk
chocolate.wireless.bris.ac.uk
wwwtestdev-ole.bris.ac.uk
oas.apps.bristol.ac.uk
shop.bris.ac.uk
globalbeershop.spe.cs.bris.ac.uk
www.alumni.bris.ac.uk
chocolate.wireless.bris.ac.uk
estates-servicedesk.bris.ac.uk
irisplus.bris.ac.uk
its-dc2-lemma2-p0-vip.computing-service.bristol.ac.uk
blogs.bristol.ac.uk
xerte-beta.bris.ac.uk
bos2-demo.ilrt.bris.ac.uk
xerte.bris.ac.uk
mediasite-dev.bristol.ac.uk
*.sls.bris.ac.uk
app-dc1-slsu-d0.services.bris.ac.uk
ole.bris.ac.uk
tender.bris.ac.uk
webmail.bris.ac.uk
www.cs.bris.ac.uk
arcadia.epi.bris.ac.uk
idp.bris.ac.uk
mediasite.services.bris.ac.uk
sso.bris.ac.uk
www.iser.bristol.ac.uk
corestream.bristol.ac.uk
its-splusiis-prod.cse.bris.ac.uk
myerp-archive.bristol.ac.uk
www.digitalscreens.bris.ac.uk
www.farscope.bris.ac.uk
myerp-int.bristol.ac.uk
ipadcrm.ilrt.bris.ac.uk
go.resnet.bristol.ac.uk
idhours.ilrt.bris.ac.uk
redcap-brtc-p1.epi.bris.ac.uk
www.ole.bris.ac.uk
missctrl.cs.bris.ac.uk
osier.ac.uk
reportandsupport.bris.ac.uk
research-information.bris.ac.uk
brainbanknetwork.ac.uk
contact.voicemail.bristol.ac.uk
Certificate
The complete raw certificate details for fluff.bris.ac.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHazCCBVOgAwIBAgIQd1hBU+ej7+40IV9OXSpU3jANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjIwOTA2MDAwMDAwWhcNMjMwOTA2MjM1 OTU5WjBjMQswCQYDVQQGEwJHQjEZMBcGA1UECBMQQnJpc3RvbCwgQ2l0eSBvZjEe MBwGA1UEChMVVW5pdmVyc2l0eSBvZiBCcmlzdG9sMRkwFwYDVQQDExBmbHVmZi5i cmlzLmFjLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLyoOMVF 02U+waH29uoDGuq1MkxuWm2cd3LlmnBoePWEVM/rdp2i6eLYwGepdRWiTj8Wi8yq UUVMKX9KDJNJJcGFpmPCk6cdUm6c2SMEtwNmkBtD3OJGYlEG5FTZtObiNV07igUy f10SbR4JDlYaoxxDmIK2kXOw02zYs8+Sk8ygVtGAJ8c8FJs0bJNmhUed/Vvhl/Qs vANmtQpj2FL5QQu6ELCecv7te016YSJIt/o1S3KeKj9Vrf1YyJC3x1DywIPzL9/k IBNdc3VKSB9CKBPDPGYQXDRvQ341fuVVQhIIoeB53k8yvZuHtbXjWpzahrhtkrP4 i2CCkIa6Ly1+8QIDAQABo4IDODCCAzQwHwYDVR0jBBgwFoAUbx01SRBsMvpZoJ68 iugflb5xegwwHQYDVR0OBBYEFK9asIjwbSl0cHdtBlEU++HNlBJYMA4GA1UdDwEB /wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgJPMCUwIwYIKwYBBQUHAgEWF2h0 dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAw hi5odHRwOi8vR0VBTlQuY3JsLnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3Js MHUGCCsGAQUFBwEBBGkwZzA6BggrBgEFBQcwAoYuaHR0cDovL0dFQU5ULmNydC5z ZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNydDApBggrBgEFBQcwAYYdaHR0cDov L0dFQU5ULm9jc3Auc2VjdGlnby5jb20wggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoB aAB2AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABgxKt5rUAAAQD AEcwRQIgPRdWBKPM4USj/EAxmfhkHq1+77tYXhYCMSsxtbA04H8CIQCBUwU4Or2K /J8JwMkxb0cvSNWDVD1FT8yivYY+Cpty/gB2AHoyjFTYty22IOo44FIe6YQWcDIT hU070ivBOlejUutSAAABgxKt5oIAAAQDAEcwRQIhANB0zxNbRr+E5H7aOIOO5Cqr aKC2jvbqMHFteda0+xskAiAeZTj2/DAfM3iCyASDUj+SW7q1SHe9KKyh1wWeO1oA cQB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABgxKt5lMAAAQD AEcwRQIhAII9t/rIusTB+FHhdo02gOoXzo96atux15PA8vGsM7HJAiBRXG0ztPG+ E5EX5FN6NOpPE5J3URIuCsLEtVU5J4kwPjAwBgNVHREEKTAnghBmbHVmZi5icmlz LmFjLnVrghNmbHVmZi5icmlzdG9sLmFjLnVrMA0GCSqGSIb3DQEBDAUAA4ICAQBM oGu4LaFvuqxRtiydf5VQyz0I8V2NiWNqX/azkyP7/oJcGLIb8Tyc4B0prADEfDjZ Sv/M5uLyiYjUOo3zUh1FrzR3nYs7eHUfwfeflvjEy6YVYHHN2ja4x2W/d0Rr90Hf hQRT/wxFS8S9V7ADQw7nDtyfwtQVriDnKQ5iBZO9w+TVVdglURh0aKKlgVHloi5Y skuUctrdT5edjnYXS/UXQCof88+GSJFleb2vG234EG7W3pj3IAo6+/hnXnZY3GgY 9bbaTnelyGQ4PUcvrIjKf0lIuZzMViH4uWGvBHV6+EB1pkYmKF7fHkiTqFYAVMgb xyxCJRxRnQQDlZbQhqniw2XI0OoTogT1+PkLW/1S0PDgcebLhGn/V5cOZAPFvpMJ IT1CkZNfcHbN5rRMt6FZoe8F4s0Wv4auMeCpP68SGwCiAScB/axeDOw+taEEuc4B XMQ/VeXz94cB/HTmDAAAQqf6uh4HS9VJ/VZM/KcDlfzQ0w/LJ/cOP4d18paCkncE s/EoISDCL8k5p0ytmgXWYKVI8ZUFNs+5UbKPbf3+wrN12AjcMtek0/SZFggenNk2 +8SFQDzyVlvMcpcJST0PlDWqFNj2Q5g8ZaT9kGni2ix/oUg2B1jvYz3qUZ1vtLrT 2G0xXjQxH/GdNk5sIai0gKma0hdZLhW15p8IecJ+Gg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLyoOMVF02U+waH29uoD Guq1MkxuWm2cd3LlmnBoePWEVM/rdp2i6eLYwGepdRWiTj8Wi8yqUUVMKX9KDJNJ JcGFpmPCk6cdUm6c2SMEtwNmkBtD3OJGYlEG5FTZtObiNV07igUyf10SbR4JDlYa oxxDmIK2kXOw02zYs8+Sk8ygVtGAJ8c8FJs0bJNmhUed/Vvhl/QsvANmtQpj2FL5 QQu6ELCecv7te016YSJIt/o1S3KeKj9Vrf1YyJC3x1DywIPzL9/kIBNdc3VKSB9C KBPDPGYQXDRvQ341fuVVQhIIoeB53k8yvZuHtbXjWpzahrhtkrP4i2CCkIa6Ly1+ 8QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 158636378626207004966380079859173577950 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bristol, City of' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Bristol' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fluff.bris.ac.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24835738064657081291399610086865586620289104728562534775972439561259388109346031847965840469583735792934422464367453604963606508560333187955070632683067592557894369505892099808357929400680505110658871679558521701558660399405777888734710163558528512006813081168562175290209816968236767826596644305819558465131706396894916466683286091422191871121041821556527534042800255989101947692669656448695593338533786905555470650766454679387537871398394358459793514398925802830598401004593418418282760337677451599796034462491787012246497505263815060923417393222637934302942125610320065210583852043988596582314548688014932819410673 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) af5ab088f06d297470776d065114fbe1cd941258 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluff.bris.ac.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluff.bristol.ac.uk' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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