clf.uk

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 28:c8:a1:83:9e:1e:2a:8e:0e:ec:70:6f:e2:91:12:50 was issued on by Google Trust Services LLC.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=clf.uk

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 28:c8:a1:83:9e:1e:2a:8e:0e:ec:70:6f:e2:91:12:50
Serial Number (int): 54210855098874178015691118701263786576
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 04:09:5d:2c:bb:44:23:cd:19:7d:fc:2f:2e:fd:d3:15:4c:01:06:97
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): f1:b7:5b:22:e0:25:e2:92:42:5b:99:47:ee:9e:8f:31:47:45:40:66
Fingerprint (sha256): 45:69:16:94:28:e3:f8:bf:a7:6a:e7:1f:9a:ee:2b:a7:3a:20:07:86:b5:24:61:ae:ee:b2:a5:14:76:a2:19:38

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/hZIQd3XzmGs
CRL Distribution Point: http://crls.pki.goog/gts1p5/iT4M4gA1Yb4.crl

Check the revocation status for certificate clf.uk

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clf.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clf.uk
kingsoakacademy.clf.uk
www.kingsoakacademy.clf.uk
www.post16.clf.uk
uphillvillageacademy.clf.uk
www.wallscourtfarmacademy.clf.uk
wallscourtfarmacademy.clf.uk
www.winterstokehundredacademy.clf.uk
minervaprimaryacademy.clf.uk
summerhillacademy.clf.uk
www.minervaprimaryacademy.clf.uk
post16.clf.uk
www.snowdonvillage.clf.uk
snowdonvillage.clf.uk
www.summerhillacademy.clf.uk
www.uphillvillageacademy.clf.uk
www.winterstokehundred.clf.uk
winterstokehundred.clf.uk
winterstokehundredacademy.clf.uk
*.clf.uk
www.begbrookprimaryacademy.clf.uk
begbrookprimaryacademy.clf.uk
www.bristolmetropolitanacademy.clf.uk
bristolmetropolitanacademy.clf.uk
www.broadoakacademy.clf.uk
broadoakacademy.clf.uk
www.careers.clf.uk
www.cityacademybristol.clf.uk
cityacademybristol.clf.uk
www.develop.clf.uk
develop.clf.uk
www.digitechstudioschool.clf.uk
digitechstudioschool.clf.uk
www.evergreenprimaryacademy.clf.uk
evergreenprimaryacademy.clf.uk
www.fromevaleacademy.clf.uk
fromevaleacademy.clf.uk
www.hanhamwoodsacademy.clf.uk
hanhamwoodsacademy.clf.uk
www.hanspriceacademy.clf.uk
hanspriceacademy.clf.uk
www.haywoodvillageacademy.clf.uk
haywoodvillageacademy.clf.uk
www.heronsmooracademy.clf.uk
heronsmooracademy.clf.uk
www.johncabotacademy.clf.uk
johncabotacademy.clf.uk

Other certificates including the domain name clf.uk

(limited to 100 certificates)
clf.uk
jca1.clf-vps-001.clf.uk
hwa1.clf-vps-001.clf.uk
hwa1.clf-vps-001.clf.uk
clf.uk
tls.automattic.com
hpa1.clf-vps-001.clf.uk
clf.uk
clf.clf.academy
tls.automattic.com
staging.p161.clf-vps-001.clf.uk
clf.uk
*.clf.uk
staging.template1.clf-vps-001.clf.uk
clfhelpdesk.clf.uk
*.clf.uk
clf.uk
sa1.clf-vps-001.clf.uk
*.clf.uk
sni.cloudflaressl.com
bfa1.clf-vps-001.clf.uk
jca1.clf-vps-001.clf.uk
*.clf.uk
clf.uk
clf.uk
tls.automattic.com
wfa1.clf-vps-001.clf.uk
ba1.clf-vps-001.clf.uk
koa1.clf-vps-001.clf.uk
epa3.clf-vps-001.clf.uk
staging.p161.clf-vps-001.clf.uk
broadoakacademy.clf.uk
ba1.clf-vps-001.clf.uk
clf.uk
sts.clf.uk
tls.automattic.com
clf.clf.academy
clf.uk
clf.clf.academy
sni.cloudflaressl.com
staging.p161.clf-vps-001.clf.uk
tls.automattic.com
bpa1.clf-vps-001.clf.uk
ba1.clf-vps-001.clf.uk
dssb1.clf-vps-001.clf.uk
clfhelpdesk.clf.uk
jca1.clf-vps-001.clf.uk
bfa2.clf-vps-001.clf.uk
hwa1.clf-vps-001.clf.uk
tls.automattic.com
demoslider.clf-vps-001.clf.uk
broadoakacademy.clf.uk
bpa1.clf-vps-001.clf.uk
clfhelpdesk.clf.uk
clfhelpdesk.clf.uk
wfa1.clf-vps-001.clf.uk
bfa1.clf-vps-001.clf.uk
clf.uk
hpa1.clf-vps-001.clf.uk
hva1.clf-vps-001.clf.uk
clf.uk
sa1.clf-vps-001.clf.uk
tls.automattic.com
portal.clf.uk
clf.uk
clf.uk

Certificate

The complete raw certificate details for clf.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKaTCCCVGgAwIBAgIQKMihg54eKo4O7HBv4pESUDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yNDA1MDgwMjI4MDNaFw0yNDA4MDYw
MzI1MzRaMBExDzANBgNVBAMTBmNsZi51azCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALcABvoI30SS33UIe74/Oc4RQYhPLny//EHe7L/GbHvnbECBGZnR
xYy2owQqoP3a+hpcAscRzX8cYg9z8Z1wk76bJMz048xrFu5nOMNaXDxzueZzJPfZ
V5+UUOyw037GZbgJump3nwX8zIkhGdQPmrwsEwAlD0ROq7mzqxp3rZsHXIxkGHim
YmDCQujQcjS2QgefDUdEd4mkI20FThNAN867BH7wP8dO885OPxStfoQZLYL6zzgt
UsH5oJu35uiJudH3vEH5noXB2TT1wBownx4WwCFpgWuYudT9kbQYmI8Q/B7wiaLU
0LLZB4sWAcOskXz7lb8vQU47VYifGRCWcKkCAwEAAaOCB4YwggeCMA4GA1UdDwEB
/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBQECV0su0QjzRl9/C8u/dMVTAEGlzAfBgNVHSMEGDAWgBTV/J4N3x7K3QiX
l24rxV/FK/XsuDB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUHMAGGKWh0dHA6Ly9v
Y3NwLnBraS5nb29nL3MvZ3RzMXA1L2haSVFkM1h6bUdzMDEGCCsGAQUFBzAChiVo
dHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxcDUuZGVyMIIFJwYDVR0RBIIF
HjCCBRqCBmNsZi51a4IWa2luZ3NvYWthY2FkZW15LmNsZi51a4Iad3d3Lmtpbmdz
b2FrYWNhZGVteS5jbGYudWuCEXd3dy5wb3N0MTYuY2xmLnVrght1cGhpbGx2aWxs
YWdlYWNhZGVteS5jbGYudWuCIHd3dy53YWxsc2NvdXJ0ZmFybWFjYWRlbXkuY2xm
LnVrghx3YWxsc2NvdXJ0ZmFybWFjYWRlbXkuY2xmLnVrgiR3d3cud2ludGVyc3Rv
a2VodW5kcmVkYWNhZGVteS5jbGYudWuCHG1pbmVydmFwcmltYXJ5YWNhZGVteS5j
bGYudWuCGHN1bW1lcmhpbGxhY2FkZW15LmNsZi51a4Igd3d3Lm1pbmVydmFwcmlt
YXJ5YWNhZGVteS5jbGYudWuCDXBvc3QxNi5jbGYudWuCGXd3dy5zbm93ZG9udmls
bGFnZS5jbGYudWuCFXNub3dkb252aWxsYWdlLmNsZi51a4Icd3d3LnN1bW1lcmhp
bGxhY2FkZW15LmNsZi51a4Ifd3d3LnVwaGlsbHZpbGxhZ2VhY2FkZW15LmNsZi51
a4Idd3d3LndpbnRlcnN0b2tlaHVuZHJlZC5jbGYudWuCGXdpbnRlcnN0b2tlaHVu
ZHJlZC5jbGYudWuCIHdpbnRlcnN0b2tlaHVuZHJlZGFjYWRlbXkuY2xmLnVrgggq
LmNsZi51a4Ihd3d3LmJlZ2Jyb29rcHJpbWFyeWFjYWRlbXkuY2xmLnVrgh1iZWdi
cm9va3ByaW1hcnlhY2FkZW15LmNsZi51a4Ild3d3LmJyaXN0b2xtZXRyb3BvbGl0
YW5hY2FkZW15LmNsZi51a4IhYnJpc3RvbG1ldHJvcG9saXRhbmFjYWRlbXkuY2xm
LnVrghp3d3cuYnJvYWRvYWthY2FkZW15LmNsZi51a4IWYnJvYWRvYWthY2FkZW15
LmNsZi51a4ISd3d3LmNhcmVlcnMuY2xmLnVrgh13d3cuY2l0eWFjYWRlbXlicmlz
dG9sLmNsZi51a4IZY2l0eWFjYWRlbXlicmlzdG9sLmNsZi51a4ISd3d3LmRldmVs
b3AuY2xmLnVrgg5kZXZlbG9wLmNsZi51a4Ifd3d3LmRpZ2l0ZWNoc3R1ZGlvc2No
b29sLmNsZi51a4IbZGlnaXRlY2hzdHVkaW9zY2hvb2wuY2xmLnVrgiJ3d3cuZXZl
cmdyZWVucHJpbWFyeWFjYWRlbXkuY2xmLnVrgh5ldmVyZ3JlZW5wcmltYXJ5YWNh
ZGVteS5jbGYudWuCG3d3dy5mcm9tZXZhbGVhY2FkZW15LmNsZi51a4IXZnJvbWV2
YWxlYWNhZGVteS5jbGYudWuCHXd3dy5oYW5oYW13b29kc2FjYWRlbXkuY2xmLnVr
ghloYW5oYW13b29kc2FjYWRlbXkuY2xmLnVrght3d3cuaGFuc3ByaWNlYWNhZGVt
eS5jbGYudWuCF2hhbnNwcmljZWFjYWRlbXkuY2xmLnVrgiB3d3cuaGF5d29vZHZp
bGxhZ2VhY2FkZW15LmNsZi51a4IcaGF5d29vZHZpbGxhZ2VhY2FkZW15LmNsZi51
a4Icd3d3Lmhlcm9uc21vb3JhY2FkZW15LmNsZi51a4IYaGVyb25zbW9vcmFjYWRl
bXkuY2xmLnVrght3d3cuam9obmNhYm90YWNhZGVteS5jbGYudWuCF2pvaG5jYWJv
dGFjYWRlbXkuY2xmLnVrMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkC
BQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMXA1
L2lUNE00Z0ExWWI0LmNybDCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AHb/iD8K
tvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABj1Y+etMAAAQDAEcwRQIhANkQ
okg4SWnKb/UupoTF5PJE+g4rRyhstG+bG98S4Hq5AiB/1TehTnXLi1c9Yb6z14ak
08ATqdIjyyf6LiYJ3Jys+AB3ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI
1/urAAABj1Y+etAAAAQDAEgwRgIhAPEBKKMadq8IFvxsST1fH+YFRd05AnJmeQgm
lhJAC7k+AiEAhxDgzcNE6kB1EMv/dS8TkWe5iW8Z39862czOoyBGl20wDQYJKoZI
hvcNAQELBQADggEBAE6wAfUvqvoKSLzLqSdEyLbh1CRdr2dfr5YiH3dJ3O577CVk
EJbY1Y7hSXudGmxjCiKRO5a34xQSzlFU12NviHJFhoywyIF//s4XPld4xg9Udc3M
4SucBsRXaGiAuP8mtCqX4Ssccyj5RLP1hWaZfiFKb/Jz0DhayLemwLgm2X1WxdSX
e8oO0PGmBnjxKcb3gG5JxhoJsMxpIaIsz5sFB7VXko+HJ+NiTozD6VEbkKbOpXHa
uV74LeYiQjjpGJg1JLITwOVRzZpQluSPbEye2Xl1NbAl1X5c9yG3fyrKmsRZ7szw
GisD9KWpst0PQbeHATnSUDlgcnMzfjvDzppn0K0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwAG+gjfRJLfdQh7vj85
zhFBiE8ufL/8Qd7sv8Zse+dsQIEZmdHFjLajBCqg/dr6GlwCxxHNfxxiD3PxnXCT
vpskzPTjzGsW7mc4w1pcPHO55nMk99lXn5RQ7LDTfsZluAm6anefBfzMiSEZ1A+a
vCwTACUPRE6rubOrGnetmwdcjGQYeKZiYMJC6NByNLZCB58NR0R3iaQjbQVOE0A3
zrsEfvA/x07zzk4/FK1+hBktgvrPOC1Swfmgm7fm6Im50fe8QfmehcHZNPXAGjCf
HhbAIWmBa5i51P2RtBiYjxD8HvCJotTQstkHixYBw6yRfPuVvy9BTjtViJ8ZEJZw
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 54210855098874178015691118701263786576
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 02:28:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 03:25:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clf.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23101623247608832755693657068209316042103345388894291370239027793647730835274208826441322020325196801772377320312464835950283541185135406577666602280231293713361591122658297881435349711039460337995280996188530848286119745149895332639753920661289233204994532981912114367419483059758988053723153761612367276809072548940190876057874493012539091673846436123001953931543208397030163476506696636146157155470897394869692627047233442719475189583897481341451520704054882047471219365107655947964205536339589584983898136944075876068038842616093809728383154423843792859985628639583798010803110566640952999358675495366028879622313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04095d2cbb4423cd197dfc2f2efdd3154c010697
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/hZIQd3XzmGs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1310 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingsoakacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingsoakacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.post16.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uphillvillageacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wallscourtfarmacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallscourtfarmacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winterstokehundredacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minervaprimaryacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summerhillacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minervaprimaryacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'post16.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snowdonvillage.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowdonvillage.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summerhillacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uphillvillageacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winterstokehundred.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winterstokehundred.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winterstokehundredacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.begbrookprimaryacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'begbrookprimaryacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bristolmetropolitanacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bristolmetropolitanacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broadoakacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadoakacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careers.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityacademybristol.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityacademybristol.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.develop.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitechstudioschool.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitechstudioschool.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evergreenprimaryacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evergreenprimaryacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fromevaleacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fromevaleacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hanhamwoodsacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanhamwoodsacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hanspriceacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanspriceacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haywoodvillageacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haywoodvillageacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heronsmooracademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heronsmooracademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johncabotacademy.clf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johncabotacademy.clf.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/iT4M4gA1Yb4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f563e7ad30000040300473045022100d910a248384969ca6ff52ea684c5e4f244fa0e2b47286cb46f9b1bdf12e07ab902207fd537a14e75cb8b573d61beb3d786a4d3c013a9d223cb27fa2e2609dc9cacf8007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018f563e7ad00000040300483046022100f10128a31a76af0816fc6c493d5f1fe60545dd390272667908269612400bb93e0221008710e0cdc344ea407510cbff752f139167b9896f19dfdf3ad9cccea32046976d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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