olympuss.ntu.ac.uk

- Nottingham Trent University -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 81:04:a7:ad:a2:3a:d7:07:44:cf:47:27:2d:e4:fa:23 was issued on by GEANT Vereniging.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Nottingham Trent University

Organization: Nottingham Trent University
State / Province: Nottinghamshire
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 81:04:a7:ad:a2:3a:d7:07:44:cf:47:27:2d:e4:fa:23
Serial Number (int): 171494581562771916443271270699142281763
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d1:e3:09:56:3c:6b:a8:31:8a:34:ff:72:c0:d1:79:9c:74:f2:62:9f
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): d0:37:c2:db:1c:eb:84:05:04:e5:9b:d8:45:e1:5b:2f:da:7e:24:9f
Fingerprint (sha256): 27:18:8c:17:3b:5b:f0:99:86:fc:f2:e0:81:24:04:08:15:80:94:79:e5:57:4d:8d:ca:36:10:e9:58:46:1d:d8

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate olympuss.ntu.ac.uk

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for olympuss.ntu.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

olympuss.ntu.ac.uk
assets.olympuss.ntu.ac.uk
avatars.olympuss.ntu.ac.uk
codeload.olympuss.ntu.ac.uk
docker.olympuss.ntu.ac.uk
gist.olympuss.ntu.ac.uk
maven.olympuss.ntu.ac.uk
media.olympuss.ntu.ac.uk
npm.olympuss.ntu.ac.uk
nuget.olympuss.ntu.ac.uk
pages.olympuss.ntu.ac.uk
raw.olympuss.ntu.ac.uk
render.olympuss.ntu.ac.uk
rubygems.olympuss.ntu.ac.uk
uploads.olympuss.ntu.ac.uk

Other certificates including the domain name ntu.ac.uk

(limited to 100 certificates)
dev-in-place.ntu.ac.uk
support.ntu.ac.uk
www.nlscitrix.ntu.ac.uk
Easyprint.ntu.ac.uk
shibidp.ntu.ac.uk
owa.exrestore.ntu.ac.uk
possibilities.ntu.ac.uk
testidp1.ntu.ac.uk
ntuanywhere.ntu.ac.uk
sip.exrestore.ntu.ac.uk
vacancies.ntu.ac.uk
vacancies.ntu.ac.uk
www.ntu.ac.uk
online.ntu.ac.uk
support.ntu.ac.uk
opac.ntu.ac.uk
cty-fe-pool-ext.ntu.ac.uk
train-in-place.ntu.ac.uk
5754435435233280-fe4.pantheonsite.io
staffpassword.ntu.ac.uk
driscoll.ntu.ac.uk
opac.ntu.ac.uk
selfservice.ntu.ac.uk
ntuanywhere.ntu.ac.uk
brackenhurst.elearn.ntu.ac.uk
smartcard.ntu.ac.uk
city-fe-pool-ext.exrestore.ntu.ac.uk
www2.ntu.ac.uk
wireless.ntu.ac.uk
elearn.ntu.ac.uk
outlook.su.ntu.ac.uk
online.ntu.ac.uk
office365.ntu.ac.uk
www2.ntu.ac.uk
ntusecurity.ntu.ac.uk
opac.ntu.ac.uk
testidp1.ntu.ac.uk
wireless.ntu.ac.uk
online.ntu.ac.uk
vacancies.ntu.ac.uk
landing.online.ntu.ac.uk
www.onlinepayments.ntu.ac.uk
strenton.com
elearn.ntu.ac.uk
lawquiz.ntu.ac.uk
in-place.ntu.ac.uk
www4.ntu.ac.uk
shibsp.ntu.ac.uk
socscibookings.ntu.ac.uk
www.nlsportal.ntu.ac.uk
sportbooking.ntu.ac.uk
warren.ntu.ac.uk
selfservice.ntu.ac.uk
support.ntu.ac.uk
owa.exrestore.ntu.ac.uk
brackenhurst.elearn.ntu.ac.uk
journals.ntu.ac.uk
siso.ntu.ac.uk
mypeople.ntu.ac.uk
vacancies.ntu.ac.uk
cas.ntu.ac.uk
owa.exrestore.ntu.ac.uk
gandalf.ads.ntu.ac.uk
online.ntu.ac.uk
possibilities.ntu.ac.uk
warren.ntu.ac.uk
curriculumrefresh.ntu.ac.uk
wake.ntu.ac.uk
www.onlinepayments.ntu.ac.uk
landing.online.ntu.ac.uk
wireless.ntu.ac.uk
krebs.ntu.ac.uk
mimas.ntu.ac.uk
thomasmore.ads.ntu.ac.uk
shib2idp.ntu.ac.uk
onlinestore.ntu.ac.uk
estates.ntu.ac.uk
strenton.com
ntusecurity.ntu.ac.uk
sip.ntu.ac.uk
socscibookings.ntu.ac.uk
lawquiz.ntu.ac.uk
myidentity.ntu.ac.uk
olympuss.ntu.ac.uk
www.ntu.ac.uk
video.ntu.ac.uk
wake.ntu.ac.uk
landing.online.ntu.ac.uk
staffpass.ntu.ac.uk
onlinestore.ntu.ac.uk
sip.exrestore.ntu.ac.uk
benga.ntu.ac.uk
ntu-interactions.ads.ntu.ac.uk
smartcard.ntu.ac.uk
artstore.ntu.ac.uk
office365.ntu.ac.uk
benga.ntu.ac.uk
testidp1v3.ntu.ac.uk
Beorn.ads.ntu.ac.uk
sip1.exrestore.ntu.ac.uk

Certificate

The complete raw certificate details for olympuss.ntu.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGfLRNKk28nRwMHO6gFq
94TYzj+8uD+ObaEJcJ07Y/G/RwsZTOmWvv2AJpBh5bHB9dlCdmLEcyLvkmjLkxGI
UnEcIaylS9bit00yfG168N3m6rPQ1672hvnZrh6eOp00flABZHfLCFq4+S2zCc2h
ckFZtLbPbc4AJD06CJNWDXN32Kt/J+z0Z48zZMo1ietfwsdciVA0P2BV4y1HjScO
NyHNaVMjd5h+jkWk7IP6aKQ7dFtt6TJ0jJuBhnoFQb19t8h2dg3ieUP4T7W4YUzF
0zv0b95CN2Kmppid42KhWLEeo9m9qd3j97wm4BMlCbqX+7v2iHc/x7J1UHIbFKv+
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 171494581562771916443271270699142281763
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nottinghamshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nottingham Trent University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'olympuss.ntu.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25803796951403817375527611259556245355560237057287812878604036424226151316538048790744125456994018988483800211872280475825758910584713532279983712760887206217781050229401444906491921023891505319421468065667428217287374821197028190965585806958467332201423666656720132296383284275981442780178709792245703590870406919750320711281485907578558019243876087692977660532060112846769955065019223288673596162301121911281299067496335339516649081035064999631373312906097704050819418393031856052825930288168988067901870958183448017089691747498015685425473874227551464724206056586359581051163306944255450270232934106788757936799427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1e309563c6ba8318a34ff72c0d1799c74f2629f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (396 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympuss.ntu.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.olympuss.ntu.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatars.olympuss.ntu.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codeload.olympuss.ntu.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docker.olympuss.ntu.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gist.olympuss.ntu.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maven.olympuss.ntu.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.olympuss.ntu.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npm.olympuss.ntu.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuget.olympuss.ntu.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.olympuss.ntu.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raw.olympuss.ntu.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'render.olympuss.ntu.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubygems.olympuss.ntu.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uploads.olympuss.ntu.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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