www.studygroup.com

Issued by R3

About this certificate

This digital certificate with serial number 03:5b:92:f5:f3:7c:84:57:2c:f5:9c:86:07:8d:4b:93:9e:79 was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.studygroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5b:92:f5:f3:7c:84:57:2c:f5:9c:86:07:8d:4b:93:9e:79
Serial Number (int): 292497897523691862114534004743825331035769
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:51:db:de:eb:28:59:cc:d5:24:d3:78:8f:06:cb:d4:07:df:ac:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bc:81:0e:db:e8:f1:5d:42:c5:d5:7a:e0:82:a5:88:8b:f2:88:3d:f6
Fingerprint (sha256): 4c:03:cd:18:0a:14:58:f0:c3:c2:31:33:d8:12:5b:44:42:bf:84:d8:c1:33:1f:ef:3c:d9:8d:ab:99:52:38:0a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.studygroup.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.studygroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

buildingfutures.studygroup.com
cn.afy.ac.nz
cn.bellerbys.com
cn.coventryisc.com
cn.durhamisc.com
cn.hollandisc.com
cn.huddersfieldisc.com
cn.lancasterisc.com
cn.rhulisc.com
cn.taylorsauckland.ac.nz
globaldirect.depaul.edu
international.lipscomb.edu
international.wwu.edu
isc.baylor.edu
isc.cardiff.ac.uk
isc.flinders.edu.au
isc.jmu.edu
isc.leedsbeckett.ac.uk
isc.strath.ac.uk
isc.surrey.ac.uk
isc.sussex.ac.uk
isc.tamucc.edu
isc.tees.ac.uk
kingston-preview.studygroup.com
london.hud.ac.uk
pathways.hartford.edu
prephd.studygroup.com
usic.sheffield.ac.uk
www.aberdeen-isc.ac.uk
www.afy.ac.nz
www.anucollege.edu.au
www.bellerbys.com
www.coventryisc.com
www.csustudycentres.edu.au
www.dublinisc.com
www.durhamisc.com
www.hollandisc.com
www.huddersfieldisc.com
www.kingstonisc.com
www.lancasterisc.com
www.leedsisc.com
www.liu-international.com
www.ljmuisc.com
www.onlinepathways.com
www.rhulisc.com
www.studygroup.ac.uk
www.studygroup.com
www.studygroupfairs.com
www.taylorsauckland.ac.nz
www.taylorshighschool.nsw.edu.au

Other certificates including the domain name studygroup.com

(limited to 100 certificates)
www.studygroup.com
www.studygroup.com
mdm.studygroup.com
*.uk.studygroup.com
test.mdm.studygroup.com
www.studygroup.com
*.au.studygroup.com
www.studygroup.com
www.studygroup.com
systest.sgreport.studygroup.com
www.studygroup.com
www.studygroup.com
*.studygroup.com
*.ezproxy.au.studygroup.com
*.studygroup.com
www.studygroup.com
www.studygroup.com
www.studygroup.com
www.studygroup.com
*.au.studygroup.com
www.studygroup.com
kace.au.studygroup.com
systest.emailer.studygroup.com
www.studygroup.com
san-7-s7.tlsprovisioning.exacttarget.com
*.us.studygroup.com
*.sg.studygroup.com
systest.sgreport.studygroup.com
www.studygroup.com
mdm.studygroup.com
www.studygroup.com
www.studygroup.com
*.studygroup.com
ukwifi.studygroup.com
www.studygroup.com
www.studygroup.com
systest.sgapi.studygroup.com
*.studygroup.com
www.studygroup.com
systest.bouncer.studygroup.com
www.studygroup.com
www.studygroup.com
sip.studygroup.com
kace.au.studygroup.com
www.studygroup.com
*.uk.studygroup.com
www.studygroup.com
www.studygroup.com
www.studygroup.com
americas.studygroup.com
systest.emailer.studygroup.com
www.studygroup.com
accessreview.studygroup.com
www.studygroup.com
*.api.studygroup.com
lgs-bs1.emea.studygroup.com
www.studygroup.com
www-cloudflare.studygroup.com
www.studygroup.com
americas.studygroup.com
www.studygroup.com
www.studygroup.com
san-7-s7.tlsprovisioning.exacttarget.com
*.studygroup.com
www.studygroup.com
uat.mdm.studygroup.com
www.studygroup.com
systest.sg.studygroup.com
san-7-s7.tlsprovisioning.exacttarget.com
www.studygroup.com
www.studygroup.com
www.studygroup.com
www.studygroup.com
www.studygroup.com
*.studygroup.com
uat.mdm.studygroup.com
citrix.studygroup.com
www.studygroup.com
www.studygroup.com
timeshighereducation.studygroup.com
www.studygroup.com
americas.studygroup.com
www.studygroup.com
*.studygroup.com
www.studygroup.com
kace.us.studygroup.com
www.studygroup.com
www.studygroup.com
sip.studygroup.com
*.ezproxy.au.studygroup.com
*.studygroup.com
vault.studygroup.com
systest.sg.studygroup.com
secure.studygroup.com
www.studygroup.com
systest.bouncer.studygroup.com
www.studygroup.com
systest.sgapi.studygroup.com
www.studygroup.com
ukwifi.studygroup.com

Certificate

The complete raw certificate details for www.studygroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3lorYh2pn1Vu8dR0k9C
qtmTQsDsgIalyW7sNeeKRtambpJI5h7YluHMeWp+WyIy8pUM8hGzEDnzkjYyNsON
ZceW23tbhOT5j/ak3e8LRHL+lcGemA2WWfxA177eOV9sTJiSGtNQBEnHKAu8w2F7
knsi1dMkVVmP8UcNx+SepBwsv4skuxIxxtKzKsSNaOE+li9gloheiUtEnOUkvfQ3
PKH38ANu7lSrrxxZbGSSOvjg588J7nicvUASWhK81W85UH4qIhzddqs11MQFMVyj
1u+VLiLSaJMGITA1MddDeWbNQ387/5yTnVEYxI40zKAZ4R6gXGwhX+gosEf3oiMz
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292497897523691862114534004743825331035769
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 11:18:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 11:18:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.studygroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21646619108099322442178255644127792380086640859191313202061962826118971391286706044148205734875599958368795356546519498446273939836742676382056530552677390178636076017968305588404854627871379571673863297575280996991580746635733034758345144589765263607145307726092832638201748038058968569523772644920234661125564967480768449400439619271226697723500973773043067087528562241964212478501981691695025793923832356053580704250796352667410814211798059567921194864115766458846948876053505235230515906267358028033297201630284779643620093068132623402240777236052198759036715941179881579305209662677180549360639535484097553183639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6251dbdeeb2859ccd524d3788f06cbd407dfac57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1073 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildingfutures.studygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.afy.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.bellerbys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.coventryisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.durhamisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.hollandisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.huddersfieldisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.lancasterisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.rhulisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.taylorsauckland.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaldirect.depaul.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international.wwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isc.baylor.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isc.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isc.flinders.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isc.jmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isc.leedsbeckett.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isc.strath.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isc.surrey.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isc.sussex.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isc.tamucc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isc.tees.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingston-preview.studygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'london.hud.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathways.hartford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prephd.studygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usic.sheffield.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aberdeen-isc.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afy.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anucollege.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellerbys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coventryisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csustudycentres.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dublinisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.durhamisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hollandisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huddersfieldisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingstonisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lancasterisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leedsisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liu-international.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ljmuisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinepathways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rhulisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studygroup.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studygroupfairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taylorsauckland.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taylorshighschool.nsw.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d5a4e30fb0000040300483046022100f810a61fa1cf97b3b6a74941b73783e67e9936a4062557caaf706d72fb1cd97b0221008faec475d04bf3702782670e55e0d033bf913ea964490f49b2ac5f2b76cec808007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d5a4e3116000004030046304402200e1f622e099efcf38107ab6bde5330223785ded94f8f8fd9b8d1cb0bcf8253e802207367bf9a19d6ac7b5c1239dd0f2793cbbe01caf51ecb8f513c4a440e9736702f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007a1d1200e02df5aa6311227ddf878b009a4614669fb7ed4124b724e255af09c8cbcb5dba706d9b60223b978c20f39bc64195bd412b64d0cf18ba9ee787cda1cf120ba6ea3bdf61dc793447ba8595700474029b9b550304882b82ca1eedaab5184e1aeeccb89ca4e857cf40bffeb7d66ae322d61f3296d3112783646787d8b5e91a598d9c9531829627756b985049749b8e6f18141240a2975efc5d32b09ef18ec39f9c2bac1474a7c0fb8c0bcf4cca8bbc42ae35efba9a5e594f5e52f556a4a42101b8508bf3f6cee819246080bd8fc52ae7de81f2b3d46887720ce7cf382bb17883f4b84d661f06b1157011148df1fcb393866f35c46a1c11a19d8805479e3c