accreditation.lumanity.com

Issued by R3

About this certificate

This digital certificate with serial number 04:6f:4d:0b:c3:d5:ad:e7:55:9a:3f:85:24:da:9c:63:d3:17 was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=accreditation.lumanity.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6f:4d:0b:c3:d5:ad:e7:55:9a:3f:85:24:da:9c:63:d3:17
Serial Number (int): 386322898098205330336671673403914485748503
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: df:f2:ee:02:12:af:81:1f:b3:c4:5b:f3:49:c3:aa:a9:c3:e8:ba:43
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 12:78:50:08:74:a4:cf:38:58:6c:2e:fa:de:52:dd:d1:b9:35:e6:a8
Fingerprint (sha256): 44:7b:58:2d:74:35:5d:94:1f:0a:5a:ae:24:f9:1d:9a:b3:12:91:3c:fa:b4:32:1c:84:e1:7e:36:e0:07:bc:c6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate accreditation.lumanity.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for accreditation.lumanity.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accreditation.lumanity.com
achievements.eicom.org
achievements.launchyou.com
alumnicredentials.kcl.ac.uk
award.online.nottingham.ac.uk
badges.dukeofed.com.au
badges.lvmh.com
badges.personio.com
badges.teamsystem.com
cert.icm.nl
certificate.hutchtrustasia.com
certificate.ndaeb.ca
certificate.vlerick.com
certificates.conted.ox.ac.uk
certificates.cybersecurityinstitute.co.za
certificates.dadb.com
certificates.eidasolutions.com
certificates.escac.com
certificates.gfk.com
certificates.iiep.unesco.org
certificates.iseb.co.uk
certificates.leadership.global
certificates.londontfe.com
certificates.markennovy.com
certificates.onlinevents.co.uk
certificates.pbs.up.pt
certificates.riojawineacademy.com
certificates.shiseidoplus.com
certificates.tiracademy2022.com
certificates.traumacare.org.uk
certificates.trinitycollege.com
certificates.wincacademy.com
certificati.24orebs.com
certification.ignit.tech
certifications.cyberranges.com
certifications.priacademy.org
certified.icemalta.com
certified.schiller.edu
certify.eslsca.edu.eg
certify.evolveadvice.co.uk
certify.gfps.com
certify.sbs.ox.ac.uk
certify.strongrootsgroup.com
credential.advanceonline.cam.ac.uk
credentials.acu.ac.uk
credentials.advance-he.ac.uk
credentials.britishcouncil.org
credentials.cbvinstitute.com
credentials.centralbanking.com
credentials.cips.org
credentials.circulareconomyalliance.com
credentials.corporate.britishcouncil.org
credentials.dbs.ie
credentials.english.britishcouncil.org
credentials.englishonline.britishcouncil.org
credentials.evacchair.co.uk
credentials.helloezra.com
credentials.ice.cam.ac.uk
credentials.lhh.com
credentials.liveramp.com
credentials.postonline.co.uk
credentials.risk.net
credentials.skema.edu
credentials.trustd.net
eu.credential.net
execed-certificates.imperial.ac.uk
kbscredentials.kcl.ac.uk
odcredentials.kcl.ac.uk
profile.icdl.ie
profile.icdlafrica.org
profile.icdlamericas.org
profile.icdlasia.org
profile.icdleurope.org
skillsoft.digitalbadges-eu.skillsoft.com
v2.eu.credential.net
verify.eslsca.edu.eg

Other certificates including the domain name lumanity.com

(limited to 100 certificates)
accreditation.lumanity.com
lumanity.com
sdp.hja.net
accreditation.lumanity.com
www.lumanity.com
servicedesk.monaghancoco.ie
support.bong.com.pl
helpdesk.porvairfiltration.com
helpdesk.llyc.global
accreditation.lumanity.com
accreditation.lumanity.com
accreditation.lumanity.com
helpdesk.alivetravel.com
itassist.harrowschool.org.uk
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
accreditation.lumanity.com
accreditation.lumanity.com
servicedesk.monaghancoco.ie
pomoc.lekam.pl
servicedesk.endrich.com
servicedesk.moredun.ac.uk
servicedesk.ambient.org.uk
accreditation.lumanity.com
accreditation.lumanity.com
servicedesk.monaghancoco.ie
accreditation.lumanity.com
accreditation.lumanity.com
accreditation.lumanity.com
servicedesk.monaghancoco.ie
accreditation.lumanity.com
accreditation.lumanity.com
servicedesk.endrich.com
hrdemo.servicedeskplus.nl
servicedesk.ambient.org.uk
accreditation.lumanity.com
accreditation.lumanity.com
servicedesk.durbinglobal.com
accreditation.lumanity.com
lumanity.com
accreditation.lumanity.com
servicedesk.labbuit.it
servicedesk.monaghancoco.ie
accreditation.lumanity.com
accreditation.lumanity.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
pomoc.lekam.pl
servicedesk.monaghancoco.ie
accreditation.lumanity.com
helpdesk.cartrawler.com
accreditation.lumanity.com
sd.kormotech.com
www.lumanity.com
servicedesk.monaghancoco.ie
accreditation.lumanity.com
ithelpdesk.ocugroup.com
helpdesk.nauit.lt
accreditation.lumanity.com
ithelpdesk.ocugroup.com
accreditation.lumanity.com
www.lumanity.com
help.sch1584.ru
itassist.harrowschool.org.uk
itservice.roxcel.com
servicedesk.endrich.com
servicedesk.ambient.org.uk
helpdesk.cysec.gov.cy
servicedesk.lumanity.com
accreditation.lumanity.com
accreditation.lumanity.com
itsupport.actibel.be
accreditation.lumanity.com
servicedesk.durbinglobal.com
servicedesk.monaghancoco.ie
itdesk.solargis.com
accreditation.lumanity.com
accreditation.lumanity.com
www.lumanity.com
helpdesk.vandenbraembussche.be
accreditation.lumanity.com
accreditation.lumanity.com
helpdesk.nauit.lt
accreditation.lumanity.com
accreditation.lumanity.com
helpdesk.adc.ro
accreditation.lumanity.com
accreditation.lumanity.com
help.idowa.de
servicedesk.cplaromas.com
servicedesk.cplaromas.com
servicedesk.monaghancoco.ie
accreditation.lumanity.com
lumanity.com
accreditation.lumanity.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
accreditation.lumanity.com
helpdesk.aldaholding.com

Certificate

The complete raw certificate details for accreditation.lumanity.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE1SAId+b+BKBoYQY+3T7UfU3O3I57
RxTpNTHQBWjpFrMfkuRWFN0k21qPFsz9/e2z9ngfH2pjUG7fWZ6fHvRZPw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386322898098205330336671673403914485748503
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 09:45:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 09:45:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'accreditation.lumanity.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004d5200877e6fe04a06861063edd3ed47d4dcedc8e7b4714e93531d00568e916b31f92e45614dd24db5a8f16ccfdfdedb3f6781f1f6a63506edf599e9f1ef4593f
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dff2ee0212af811fb3c45bf349c3aaa9c3e8ba43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accreditation.lumanity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achievements.eicom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achievements.launchyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnicredentials.kcl.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'award.online.nottingham.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badges.dukeofed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badges.lvmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badges.personio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badges.teamsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert.icm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificate.hutchtrustasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificate.ndaeb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificate.vlerick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificates.conted.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificates.cybersecurityinstitute.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificates.dadb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificates.eidasolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificates.escac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificates.gfk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificates.iiep.unesco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificates.iseb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificates.leadership.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificates.londontfe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificates.markennovy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificates.onlinevents.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificates.pbs.up.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificates.riojawineacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificates.shiseidoplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificates.tiracademy2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificates.traumacare.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificates.trinitycollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificates.wincacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificati.24orebs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certification.ignit.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certifications.cyberranges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certifications.priacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certified.icemalta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certified.schiller.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certify.eslsca.edu.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certify.evolveadvice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certify.gfps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certify.sbs.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certify.strongrootsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credential.advanceonline.cam.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.acu.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.advance-he.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.britishcouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.cbvinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.centralbanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.cips.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.circulareconomyalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.corporate.britishcouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.dbs.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.english.britishcouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.englishonline.britishcouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.evacchair.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.helloezra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.ice.cam.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.lhh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.liveramp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.postonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.risk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.skema.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credentials.trustd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.credential.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'execed-certificates.imperial.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbscredentials.kcl.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odcredentials.kcl.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile.icdl.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile.icdlafrica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile.icdlamericas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile.icdlasia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile.icdleurope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skillsoft.digitalbadges-eu.skillsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.eu.credential.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.eslsca.edu.eg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d21530fe70000040300473045022100d42a0aa7c06c1b658ec5d8dd9d506d217111feb46995f62e7593266e89d3ed23022025a3b816784615e6e50cbc73d0d900ac5b6d905ea5fb963a8df6ff1abe3c13f70076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d215311d0000004030047304502201834b983ae3d0833b725cff94adb270217eb7c113256ea84049926ba11226638022100b04bd35a063a6e1007a751add3bef5dc98b390f886920267ddbf9c482074e005
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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