fluff.bris.ac.uk

- University of Bristol -

Issued by QuoVadis EV SSL ICA G3

About this certificate

This digital certificate with serial number 1b:d0:e4:68:28:e7:d3:68:ea:d8:44:3b:fa:8c:5f:41:50:4b:e5:47 was issued on by QuoVadis Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Bristol

Company registration number: RC000648
Organization: University of Bristol
State / Province: BRISTOL
Locality: BRISTOL
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 1b:d0:e4:68:28:e7:d3:68:ea:d8:44:3b:fa:8c:5f:41:50:4b:e5:47
Serial Number (int): 158801202858469466188124339128159625143716144455
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 0f:e9:0e:36:b7:e7:86:3b:b6:49:44:90:73:f4:c5:d3:60:df:bb:3b
AuthorityKeyId: e5:84:54:d0:90:49:9f:38:ba:f2:c9:e1:2a:08:c5:4e:9f:a0:48:3f

Fingerprint (sha1): 89:24:12:c0:29:69:0f:7b:7e:a3:14:99:03:d2:42:1a:8e:53:dc:5b
Fingerprint (sha256): 1d:2d:a5:a7:08:06:f0:45:8b:1d:22:cf:85:09:44:77:d4:4a:ba:4b:92:86:8a:7f:4d:01:3f:2d:d7:54:ad:c7

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevsslg3.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevsslg3.crl

Check the revocation status for certificate fluff.bris.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fluff.bris.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fluff.bris.ac.uk
fluff.bristol.ac.uk

Other certificates including the domain name bris.ac.uk

(limited to 100 certificates)
smtp-auth.bris.ac.uk
ilrt.static.rit.bris.ac.uk
myerp-archive-test.bris.ac.uk
wwwa-dev.fen.bris.ac.uk
wikisdev.bris.ac.uk
amis.bris.ac.uk
netmon.netcomms.bristol.ac.uk
estates.bris.ac.uk
DVAtraining.bristol.ac.uk
evision.apps.bristol.ac.uk
www.alumni.bris.ac.uk
naturelocator.ilrt.bris.ac.uk
crump.chm.bris.ac.uk
pwr.isys.bris.ac.uk
git.acrc.bris.ac.uk
evision.apps.bris.ac.uk
fitnetnhs.bristol.ac.uk
aerosol-cdt.ac.uk
galaxy-gio.acrc.bristol.ac.uk
socmed.ilrt.bris.ac.uk
www.medici.bris.ac.uk
www.alspac.bristol.ac.uk
ipadcrm.ilrt.bris.ac.uk
research-information.bris.ac.uk
IT038881.soms.bris.ac.uk
source.ggy.bris.ac.uk
status.resnet.bris.ac.uk
www.edes.bris.ac.uk
mailer.cs.bris.ac.uk
evision-b.apps.bristol.ac.uk
brainbanknetwork.cse.bris.ac.uk
proposals.epi.bris.ac.uk
datascience.bris.ac.uk
data.bristol.ac.uk
shop.bris.ac.uk
datacentertools.bris.ac.uk
www.survey.bris.ac.uk
xerte.bris.ac.uk
laharflow.bris.ac.uk
www.gradconnection.bristol.ac.uk
mwgit.bris.ac.uk
its-da-nls.cse.bris.ac.uk
dedefi.ilrt.bris.ac.uk
irisplus.bris.ac.uk
fluff.bris.ac.uk
www.apps.bris.ac.uk
moodle.bris.ac.uk
myerp-archive-test.bris.ac.uk
research-information.bris.ac.uk
interdelphi.rit.bristol.ac.uk
app-dc2-cirx-p0-vip.services.bris.ac.uk
wwwcoredev.bris.ac.uk
t4cms-dev.bris.ac.uk
wwwrep.ole.bris.ac.uk
ci.ilrt.bristol.ac.uk
online-payments.bris.ac.uk
people.maths.bris.ac.uk
chocolate.wireless.bris.ac.uk
wwwtestdev-ole.bris.ac.uk
oas.apps.bristol.ac.uk
shop.bris.ac.uk
globalbeershop.spe.cs.bris.ac.uk
www.alumni.bris.ac.uk
chocolate.wireless.bris.ac.uk
estates-servicedesk.bris.ac.uk
irisplus.bris.ac.uk
its-dc2-lemma2-p0-vip.computing-service.bristol.ac.uk
blogs.bristol.ac.uk
xerte-beta.bris.ac.uk
bos2-demo.ilrt.bris.ac.uk
xerte.bris.ac.uk
mediasite-dev.bristol.ac.uk
*.sls.bris.ac.uk
app-dc1-slsu-d0.services.bris.ac.uk
ole.bris.ac.uk
tender.bris.ac.uk
webmail.bris.ac.uk
www.cs.bris.ac.uk
arcadia.epi.bris.ac.uk
idp.bris.ac.uk
mediasite.services.bris.ac.uk
sso.bris.ac.uk
www.iser.bristol.ac.uk
corestream.bristol.ac.uk
its-splusiis-prod.cse.bris.ac.uk
myerp-archive.bristol.ac.uk
www.digitalscreens.bris.ac.uk
www.farscope.bris.ac.uk
myerp-int.bristol.ac.uk
ipadcrm.ilrt.bris.ac.uk
go.resnet.bristol.ac.uk
idhours.ilrt.bris.ac.uk
redcap-brtc-p1.epi.bris.ac.uk
www.ole.bris.ac.uk
missctrl.cs.bris.ac.uk
osier.ac.uk
reportandsupport.bris.ac.uk
research-information.bris.ac.uk
brainbanknetwork.ac.uk
contact.voicemail.bristol.ac.uk

Certificate

The complete raw certificate details for fluff.bris.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH2DCCBcCgAwIBAgIUG9DkaCjn02jq2EQ7+oxfQVBL5UcwDQYJKoZIhvcNAQEL
BQAwSTELMAkGA1UEBhMCQk0xGTAXBgNVBAoMEFF1b1ZhZGlzIExpbWl0ZWQxHzAd
BgNVBAMMFlF1b1ZhZGlzIEVWIFNTTCBJQ0EgRzMwHhcNMjAwMjI3MTU1NzA3WhcN
MjIwMjI3MTYwNzAwWjCBszETMBEGCysGAQQBgjc8AgEDEwJHQjEdMBsGA1UEDwwU
UHJpdmF0ZSBPcmdhbml6YXRpb24xETAPBgNVBAUTCFJDMDAwNjQ4MQswCQYDVQQG
EwJHQjEQMA4GA1UECAwHQlJJU1RPTDEQMA4GA1UEBwwHQlJJU1RPTDEeMBwGA1UE
CgwVVW5pdmVyc2l0eSBvZiBCcmlzdG9sMRkwFwYDVQQDDBBmbHVmZi5icmlzLmFj
LnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsejZ681pmL+TRNju
fjeZSqQTjl0Nes0LFn8Zxoli/SIRAo5uUPSVtQkv84uwVsdKODXTXTqwi2nBfzAA
w/BPPYNjQFzewQ7tqIsBLx5EFGXfUBiPPGTJjD6rvqNlnqBSfYl06Hgui5DcSWE7
rJr9RzRKWs0/E3ZZd5c7YZ+4NwDFxK6PqjEJbLRcOax0B+jEMuTBPJchX1rrdFVT
RlLGefzo8rR8dB6/aWnbr3q6YqhQHXobZTbOsYiTxWBq4uiNskIm9iqt1yzj/JIQ
JMlZiNOE7QIo7iT6Drj7bNRiDJ6Lvxl/vxvb5vmH6wSMU7/cDZfe+qLsHn+gkbRb
MEconQIDAQABo4IDSzCCA0cwDAYDVR0TAQH/BAIwADAfBgNVHSMEGDAWgBTlhFTQ
kEmfOLryyeEqCMVOn6BIPzB4BggrBgEFBQcBAQRsMGowOQYIKwYBBQUHMAKGLWh0
dHA6Ly90cnVzdC5xdW92YWRpc2dsb2JhbC5jb20vcXZldnNzbGczLmNydDAtBggr
BgEFBQcwAYYhaHR0cDovL2V2Lm9jc3AucXVvdmFkaXNnbG9iYWwuY29tMDAGA1Ud
EQQpMCeCEGZsdWZmLmJyaXMuYWMudWuCE2ZsdWZmLmJyaXN0b2wuYWMudWswWgYD
VR0gBFMwUTBGBgwrBgEEAb5YAAJkAQIwNjA0BggrBgEFBQcCARYoaHR0cDovL3d3
dy5xdW92YWRpc2dsb2JhbC5jb20vcmVwb3NpdG9yeTAHBgVngQwBATAdBgNVHSUE
FjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDov
L2NybC5xdW92YWRpc2dsb2JhbC5jb20vcXZldnNzbGczLmNybDAdBgNVHQ4EFgQU
D+kONrfnhju2SUSQc/TF02DfuzswDgYDVR0PAQH/BAQDAgWgMIIBgAYKKwYBBAHW
eQIEAgSCAXAEggFsAWoAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3c
EAAAAXCHZtITAAAEAwBHMEUCIHSGZrMY4mX89cifpdLZNH2PEaZJaXbNm9VT4Ftt
hubKAiEA4eAVsO8Y7pLcVJrrhoQluM0wpnU81j1hpj1r4LhUvOYAdwBWFAaaL9fC
7NP14b1Esj7HRna5vJkRXMDvlJhV1onQ3QAAAXCHZtJxAAAEAwBIMEYCIQDoasl9
Ej7OdxNKVCeMWs1c0yBad/0DFofQZ7S5C/12rQIhAP/E+7Y75TzychevkHLQTxBu
1uZhD2ghb83abadCPHLrAHcAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16g
gw8AAAFwh2bSQQAABAMASDBGAiEAwgW3cgKPRGQDxWK50+Jhsl8VS2lqJFvlCXO7
EHQzOMcCIQC9PiFwKZi10PcnQigST+PNuthwoOQKQr7j7c/8tlHhQTANBgkqhkiG
9w0BAQsFAAOCAgEAZ9ZjmnoUuEgXxNZf/l4leJcBCT1xOaiDo5oxHlS28rEDGLMI
wC3IsG4xU8oCDdu2UfEkJGWcJp7rpRFzoGFotHehp+F0LlrpXN2LuIdJE0OcdUuU
mfUWh0Mj3L/o/WruOrZ3eEctoC7gCGlA/80Snhvy1Kuk91aTCAd7WVb3ATGhEKRq
m73Yd7GQbFBGF1wrrEjFJx4fYSX7VYggQm7xPTve3nDd4UMLTZzejqKxVxZ6NWXG
HW1EnoYo+y10Z2a/EbQF8p1Pr8biemStRBODDqy81sKHOVznbPZCqIuVUMH7N9JQ
PZnsVluhuFL7TldGR2l7SiskQJb8cAMaRSeH4I7K1Xj2wBaMki1Q2j7A/+cNSjgS
l4QeWCsYQwFsBXoAYM7ZlAnTCz5wV++nmV2Ie1ZEUsXir6Jd/+j/1eEflpiiTUC5
Tn+sHVz4xoTOrvfieq6TICEjSqXtru8FuMljr3WQTcNdJBYUM2ypOyh2ewn5zjUa
9jPFVXXvNhQgJ4cXPiBK4Kifd8BrALzBgNVeFAZYAVJD5EVFspGkoqUvN/A8UeCa
r3pASmXUzKjy4j6FDNiLuH3Ltu9fJeo7UAG5t8lDDRzPrSw4SFMQvRJwQ/WSO6pY
Zy6be5M/WbAh28S/X0zKJfQo8Ep7F0ZIa11g/Y1qIIW9KhnmBGlL0x0qGrY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsejZ681pmL+TRNjufjeZ
SqQTjl0Nes0LFn8Zxoli/SIRAo5uUPSVtQkv84uwVsdKODXTXTqwi2nBfzAAw/BP
PYNjQFzewQ7tqIsBLx5EFGXfUBiPPGTJjD6rvqNlnqBSfYl06Hgui5DcSWE7rJr9
RzRKWs0/E3ZZd5c7YZ+4NwDFxK6PqjEJbLRcOax0B+jEMuTBPJchX1rrdFVTRlLG
efzo8rR8dB6/aWnbr3q6YqhQHXobZTbOsYiTxWBq4uiNskIm9iqt1yzj/JIQJMlZ
iNOE7QIo7iT6Drj7bNRiDJ6Lvxl/vxvb5vmH6wSMU7/cDZfe+qLsHn+gkbRbMEco
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158801202858469466188124339128159625143716144455
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis EV SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 15:57:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-27 16:07:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RC000648'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BRISTOL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BRISTOL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Bristol'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'fluff.bris.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22459003212012629169759376025754877125063299507331482315287286162123269185735647635461764719744399353535872262431474357925896325661231977502545286847722561403776686930716417180186296978667652000633230928892479178923977520505790954945774308413714972185842902947389569628065986874104431647910876326392609518610816125756794589571761968340644806986024211853331087186276230785444559160427333209896319856124903019443789637949169566520604419567969392166055015336835924783099816376900038010615870304690347946204315559152636703648702140229533470535543395877499785694709872376399344515274195020476841238255257962783364916652189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e58454d090499f38baf2c9e12a08c54e9fa0483f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluff.bris.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluff.bristol.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0fe90e36b7e7863bb649449073f4c5d360dfbb3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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