sits.northumbria.ac.uk

- University of Northumbria at Newcastle -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number ed:ef:50:bd:8f:76:6f:e8:8d:cf:01:1d:5f:b7:c7:44 was issued on by GEANT Vereniging.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

University of Northumbria at Newcastle

Organization: University of Northumbria at Newcastle
State / Province: Tyne and Wear
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): ed:ef:50:bd:8f:76:6f:e8:8d:cf:01:1d:5f:b7:c7:44
Serial Number (int): 316269631561505431134724264875726980932
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d3:fa:f2:44:37:77:43:fc:e9:2d:5e:01:d9:5e:17:ce:0f:5e:ff:01
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 63:8c:0a:0a:95:20:89:7c:0a:e9:96:cc:9e:f2:3f:d1:90:f3:8e:36
Fingerprint (sha256): 46:81:9d:5b:df:f4:6c:ae:81:bc:c7:3d:5a:9e:d8:46:1f:30:32:dd:55:e6:6f:c0:fb:92:ab:c7:db:11:93:e3

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate sits.northumbria.ac.uk

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sits.northumbria.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sits.northumbria.ac.uk
studdal.northumbria.ac.uk
studfold.northumbria.ac.uk
stutalk.northumbria.ac.uk
torver.northumbria.ac.uk
totten.northumbria.ac.uk
yarlington.northumbria.ac.uk
yarnbrook.northumbria.ac.uk
yarningale.northumbria.ac.uk
yarnton.northumbria.ac.uk
yarpole.northumbria.ac.uk
yarwell.northumbria.ac.uk
yatton.northumbria.ac.uk
yaxley.northumbria.ac.uk

Other certificates including the domain name northumbria.ac.uk

(limited to 100 certificates)
sts.northumbria.ac.uk
nrl.northumbria.ac.uk
dev.learning.northumbria.ac.uk
payments.northumbria.ac.uk
nurds.northumbria.ac.uk
*.northumbria.ac.uk
eu-central-1-san1.blackboard.com
rbscalendar.northumbria.ac.uk
eu-central-1-san1.blackboard.com
www.northumbriajournals.co.uk
pebblepad.northumbria.ac.uk
corp-uat.northumbria.ac.uk
*.northumbria.ac.uk
elp.northumbria.ac.uk
eu-central-1-san1.blackboard.com
library.northumbria.ac.uk
www.london.northumbria.ac.uk
sts.northumbria.ac.uk
mail.northumbria.ac.uk
dta.northumbria.ac.uk
eu-central-1-san1.blackboard.com
mytimetable-test.northumbria.ac.uk
library.northumbria.ac.uk
eu-central-1-san1.blackboard.com
rbscalendar.northumbria.ac.uk
login.northumbria.ac.uk
my.northumbria.ac.uk
puretest.northumbria.ac.uk
myportal.northumbria.ac.uk
eu-central-1-san1.blackboard.com
alumni.northumbria.ac.uk
rbscalendar.northumbria.ac.uk
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
libraryanswers.northumbria.ac.uk
www.northumbria.ac.uk
researchportal.northumbria.ac.uk
eu-central-1-san1.blackboard.com
np-k2-wfe01.northumbria.ac.uk
sts.northumbria.ac.uk
newsroom.northumbria.ac.uk
mailtest.northumbria.ac.uk
simplyweb.northumbria.ac.uk
journals.northumbria.ac.uk
*.northumbria.ac.uk
uraip.northumbria.ac.uk
eu-central-1-san1.blackboard.com
payments.northumbria.ac.uk
london.northumbria.ac.uk
sts.northumbria.ac.uk
elp.northumbria.ac.uk
sip.unn.ac.uk
libraryanswers.northumbria.ac.uk
eu-central-1-san1.blackboard.com
figshare.northumbria.ac.uk
figshare.northumbria.ac.uk
*.apps.sp.northumbria.ac.uk
eu-central-1-san1.blackboard.com
researchportaltest.northumbria.ac.uk
qa.northumbria.ac.uk
corp.northumbria.ac.uk
newsroom.northumbria.ac.uk
idptest.northumbria.ac.uk
mail.northumbria.ac.uk
journals.northumbria.ac.uk
www.northumbria.ac.uk
*.northumbria.ac.uk
uraip.northumbria.ac.uk
www.northumbria.ac.uk
dev.learning.northumbria.ac.uk
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
northumbriaworld.northumbria.ac.uk
library.northumbria.ac.uk
figshare.northumbria.ac.uk
login.northumbria.ac.uk
mentoring.northumbria.ac.uk
www.northumbria.ac.uk
work4.northumbria.ac.uk
store.northumbria.ac.uk
eu-central-1-san1.blackboard.com
mail.northumbria.ac.uk
*.northumbria.ac.uk
eu-central-1-san1.blackboard.com
rbscalendar.northumbria.ac.uk
www.northumbria.ac.uk
login.northumbria.ac.uk
rbscalendar.northumbria.ac.uk
simplyweb.northumbria.ac.uk
www.london.northumbria.ac.uk
eu-central-1-san1.blackboard.com
simplyweb.northumbria.ac.uk
pebblepad.northumbria.ac.uk
defcon.northumbria.ac.uk
libraryanswers.northumbria.ac.uk
sits.northumbria.ac.uk
eu-central-1-san1.blackboard.com
sits.northumbria.ac.uk
www.northumbria.ac.uk

Certificate

The complete raw certificate details for sits.northumbria.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXQxgWCyRyaR17DzLvFu
0bQolYD0Q/yoFuG6FI0ypduixGi0NpKKlVYjocNDfP+MNJ4RMVn2g1YT08sNrS5B
fdx0J23s7PShHtzwTJr/rSlHAsnEwrSnRWJxmrV2cUkVJQa5r/qrn897MqLJgS9b
glY7XSnKlGpSZeEPJxnOpzsqsriDDMrMpU4OY1wpVIXLrPjqhpRBQJRa0dXE97zC
G2yHT6hMj6YVV6W7FE6CGtYMDTWwmKtXrSK6w49oEehda8AHjC5W9KducdCklCWZ
qkXhraMTlst0aQaIkVO0Q1wfzlUdpp8memSYoTYym/3o9xFdxNueIjGDrmApOmrU
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316269631561505431134724264875726980932
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tyne and Wear'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Northumbria at Newcastle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sits.northumbria.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20381664190901208145739255785955738123316319882521200639833411828038874384555368936648593547629531130725980337624466099995222672293502070591419627640677534333228479419543131015110761299872348376583174727083773445905372491161181290489955034857251442800177942566471929353713683353100612095593853846456876238039924318550908222362913142399749100758617941249560393175215689169498980928632161321408668596951227998797097563386638474732822179617806826277879224344968429238888172268932955195953278072245793296535960009197460785043380777428708157093316374536237591391955733206347041700782244559329437181484717603730596557411511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3faf244377743fce92d5e01d95e17ce0f5eff01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (384 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sits.northumbria.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studdal.northumbria.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studfold.northumbria.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stutalk.northumbria.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torver.northumbria.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totten.northumbria.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarlington.northumbria.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarnbrook.northumbria.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarningale.northumbria.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarnton.northumbria.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarpole.northumbria.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarwell.northumbria.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yatton.northumbria.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaxley.northumbria.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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