sni-candi.porteighty.hosting

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number ee:3e:e1:a0:aa:7d:78:1f:08:f2:3a:b2:cf:cf:18:a1 was issued on by COMODO CA Limited.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sni-candi.porteighty.hosting,OU=Domain Control Validated+OU=PositiveSSL Multi-Domain

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): ee:3e:e1:a0:aa:7d:78:1f:08:f2:3a:b2:cf:cf:18:a1
Serial Number (int): 316682761673470095625766517426510305441
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 2a:98:54:37:1f:80:3a:80:fa:11:22:15:41:3b:64:e3:6a:23:4d:74
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): 2b:5c:da:43:b6:92:e3:35:3a:9f:18:f4:e1:66:ee:34:25:b0:ba:b6
Fingerprint (sha256): 21:43:5b:e3:d1:10:d7:a4:62:e8:13:db:d4:32:0e:30:32:70:97:44:65:c1:49:7a:2b:50:83:4a:68:f3:2e:9e

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate sni-candi.porteighty.hosting

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sni-candi.porteighty.hosting

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sni-candi.porteighty.hosting
candi.nhs.uk
icope.nhs.uk
intranet.candi.nhs.uk
kingston.icope.nhs.uk
pict.candi.nhs.uk
www.candi.nhs.uk
www.icope.nhs.uk

Other certificates including the domain name porteighty.hosting

(limited to 100 certificates)
sni004.porteighty.hosting
sni81517.cloudflaressl.com
sni-abta.porteighty.hosting
uptime.porteighty.hosting
mi.portal.sagrado.edu
status.labs.caes.ucdavis.edu
mylanstatus.globalvisioninc.com
le002.porteighty.hosting
le002.porteighty.hosting
sni81517.cloudflaressl.com
domainforwards.porteighty.hosting
mi.portal.sagrado.edu
*.porteighty.hosting
status.virtuas.com
sni81517.cloudflaressl.com
status.amanah.com
sni003.porteighty.hosting
sni003.porteighty.hosting
sni81517.cloudflaressl.com
sni004.porteighty.hosting
status.amanah.com
mylanstatus.globalvisioninc.com
sni003.porteighty.hosting
ak4.porteighty.hosting
sni81517.cloudflaressl.com
ak4.porteighty.hosting
academy.healthierfuture.org.uk
sni81517.cloudflaressl.com
status.channelengine.com
sni81517.cloudflaressl.com
sni004.porteighty.hosting
sni81517.cloudflaressl.com
sni81517.cloudflaressl.com
sni001.porteighty.hosting
sni004.porteighty.hosting
sni81517.cloudflaressl.com
sni81517.cloudflaressl.com
sni-webkick.porteighty.hosting
sni81517.cloudflaressl.com
ak1.porteighty.hosting
ak4.porteighty.hosting
sni001.porteighty.hosting
mi.portal.sagrado.edu
sni001.porteighty.hosting
sni81517.cloudflaressl.com
mylanstatus.globalvisioninc.com
le002.porteighty.hosting
status.investisdigital.cloud
sni003.porteighty.hosting
*.porteighty.hosting
sni81517.cloudflaressl.com
sni-nominettrust.porteighty.hosting
status.wavity.info
apex001.porteighty.hosting
domainforwards.porteighty.hosting
mi.portal.sagrado.edu
sni003.porteighty.hosting
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
sni001.porteighty.hosting
sni001.porteighty.hosting
le002.porteighty.hosting
le002.porteighty.hosting
sni004.porteighty.hosting
sni-aagbi.porteighty.hosting
sni003.porteighty.hosting
status.medpt.com
sni003.porteighty.hosting
mi.portal.sagrado.edu
sni003.porteighty.hosting
sni-webkick.porteighty.hosting
sni81517.cloudflaressl.com
sni-nominettrust.porteighty.hosting
sni-aagbi.porteighty.hosting
sni001.porteighty.hosting
sni001.porteighty.hosting
sni81517.cloudflaressl.com
sni002.porteighty.hosting
openvpn-1.porteighty.hosting
apex001.porteighty.hosting
ss-1.porteighty.hosting
sni81517.cloudflaressl.com
sni81517.cloudflaressl.com
le002.porteighty.hosting
ak3.porteighty.hosting
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
sni81517.cloudflaressl.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
sni-porteighty.porteighty.hosting
sni81517.cloudflaressl.com
sni81517.cloudflaressl.com
sni-candi.porteighty.hosting
status.amanah.com
sni001.porteighty.hosting
status.aunsight.com
sni81517.cloudflaressl.com
le002.porteighty.hosting

Certificate

The complete raw certificate details for sni-candi.porteighty.hosting in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIRAO4+4aCqfXgfCPI6ss/PGKEwDQYJKoZIhvcNAQELBQAw
gZAxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTYwNAYD
VQQDEy1DT01PRE8gUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIg
Q0EwHhcNMTgwMjI3MDAwMDAwWhcNMTkwMjEyMjM1OTU5WjBtMSEwHwYDVQQLExhE
b21haW4gQ29udHJvbCBWYWxpZGF0ZWQxITAfBgNVBAsTGFBvc2l0aXZlU1NMIE11
bHRpLURvbWFpbjElMCMGA1UEAxMcc25pLWNhbmRpLnBvcnRlaWdodHkuaG9zdGlu
ZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANDG+zZdCdk3iMK2o732
YpIYD8CBvUwtGNL1W5OLjsG0kWlWXT3AuuKvmPneM3BMjfG454djuJv6LjiO5YRo
v8xqPdA4qcoiVWWsdmXpaHf0fjdCrYm4lIWKLLcVpPtoqljHFoPpoK+Mcjy8nHkc
F7T6wUQmONfjDUkYSzAE0RQq+h8wxscP105umMPSmRx4i9EZYQVyOkuU6HsS4Bvd
Ukd8oeODId0Sqrbf2IHR9TsFqSy5kdo0TM8d5ffBO+UZp+3XIO4Q4vUXer/idqna
b8FNXLNtWeIGbDol9CEFRA+blMOehAGd5XljI/pFy4pD0/gsPgIsdwMXpR7QJe2u
SM7HZg71EJvr/px3Xau03sXSAsvG2F8Hkvr2KRwSQ21LUG/n5xPEuWSfzN4P0jjH
0naFtOiCtDFAlrZcUq+v3FSaJX5t0Ru5vTJrrx2zst9pVr3Mbpdsvkda+mkhviOR
4f7d6oZQa0reI3Jg/sr5sOJk8n4Z783ML8TnEUHkvmaffGZiL7H7THRS6l8yxCJV
cBnT2mC9zwklmrqjKrJq1EhYEvJNo2810k2Tm42bCPrGgo08lJhp7p7+cN4ZUt7z
7Ct/rf4lofqGpTITFAKgwTDRvBRSO5gVhdU8jo8nbz1Fhj6d7pRIKbIilOxw9nDM
QPDirvH3d6HvW9GsRDg2N6BbAgMBAAGjggJdMIICWTAfBgNVHSMEGDAWgBSQr2o6
lFoL2JDqElZz30O0Oija5zAdBgNVHQ4EFgQUKphUNx+AOoD6ESIVQTtk42ojTXQw
DgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCME8GA1UdIARIMEYwOgYLKwYBBAGyMQECAgcwKzApBggrBgEF
BQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2RvLmNvbS9DUFMwCAYGZ4EMAQIBMFQG
A1UdHwRNMEswSaBHoEWGQ2h0dHA6Ly9jcmwuY29tb2RvY2EuY29tL0NPTU9ET1JT
QURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcmwwgYUGCCsGAQUFBwEB
BHkwdzBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5jb21vZG9jYS5jb20vQ09NT0RP
UlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAkBggrBgEFBQcw
AYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMIGqBgNVHREEgaIwgZ+CHHNuaS1j
YW5kaS5wb3J0ZWlnaHR5Lmhvc3RpbmeCDGNhbmRpLm5ocy51a4IMaWNvcGUubmhz
LnVrghVpbnRyYW5ldC5jYW5kaS5uaHMudWuCFWtpbmdzdG9uLmljb3BlLm5ocy51
a4IRcGljdC5jYW5kaS5uaHMudWuCEHd3dy5jYW5kaS5uaHMudWuCEHd3dy5pY29w
ZS5uaHMudWswDQYJKoZIhvcNAQELBQADggEBAAGASW8Jseln032zdfmjBW+cUw0x
D4IwcRCaVGuJYaDciqNodMM3g5MOXySjJqiubHqClPy4oIJ2H+RXLH3s7pbFUS0k
/G9BnFnSX/vo7f3sXJZvfz4l5M0JZnGD+xugxxyDKAMLqDnuX5aPN9+/u9WDC2Cj
+aS3HczziYzXQ9srUM/vyEldaZMlD1NONmrAX8ulWEutrZuA6Q9Sz4213TsmtyJl
HKkCN0RKyNLzHkAb0Llq8TEc9WzzK2ocnYTDS9NllRmT2QMVSvvqYcfjelVW+gLL
wF5M/vyywiQQ4UKtS5jMGw4drI8m3x4xxEkGJo/5wDE9yZHS6ZhJZ66DGjA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316682761673470095625766517426510305441
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL Multi-Domain'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sni-candi.porteighty.hosting'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 851736953933868822808172983654216300566783775534031135733377058394605260388284086850613991410928076416059948381801483352824899051383720982469101751734519987510639003663369873349499782078121775929506004962957259371297797040128404791209702365068258893435367956744222328475167682709092800996643184244817057092077169086837210569658087157438037976574808078157852821162358051397148608135641121721750811324599011325249044655862725528731868204909976496046755868611657746287656765571783650808768175857160986466358739585633410236865968493818673557126140712706749936380176504927841366288553143318373250623300193890287822803183035047653745820244301424816476590216728732749220729177989281290555534162704346562175867135574930624564757267035825550348859849695290800757268710747635283149515690658025315493490369550104657187660437510863702798668798058450836543480702846728272420587346012842785298941432298396639206271411531174641926792267434419204018183423078986517159748471420259633060258820080242926357921895285785993520021387641264815427171811609462802089358876021337125695753687135099136693921573063903760986052051767025844236531472768133509413237735618727756459633967512047819660109145632208012004743332055728849176915863345598444912901434613851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a9854371f803a80fa112215413b64e36a234d74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sni-candi.porteighty.hosting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candi.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icope.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.candi.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingston.icope.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pict.candi.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.candi.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icope.nhs.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000180496f09b1e967d37db375f9a3056f9c530d310f823071109a546b8961a0dc8aa36874c33783930e5f24a326a8ae6c7a8294fcb8a082761fe4572c7decee96c5512d24fc6f419c59d25ffbe8edfdec5c966f7f3e25e4cd09667183fb1ba0c71c8328030ba839ee5f968f37dfbfbbd5830b60a3f9a4b71dccf3898cd743db2b50cfefc8495d6993250f534e366ac05fcba5584badad9b80e90f52cf8db5dd3b26b722651ca90237444ac8d2f31e401bd0b96af1311cf56cf32b6a1c9d84c34bd365951993d903154afbea61c7e37a5556fa02cbc05e4cfefcb2c22410e142ad4b98cc1b0e1dac8f26df1e31c44906268ff9c0313dc991d2e9984967ae831a30