*.rcm.ac.uk
- Royal College of Music -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 6e:e5:62:5d:e9:b9:ca:7d:5a:fb:8b:cd:db:25:0c:56 was issued on by GEANT Vereniging.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Royal College of Music
Organization:
Royal College of Music
State / Province:
London, City of
Country: GB
Country: GB
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate will expire on
Certificate Details
Serial Number (hex): 6e:e5:62:5d:e9:b9:ca:7d:5a:fb:8b:cd:db:25:0c:56Serial Number (int): 147406110633640108032067847011493547094
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 0b:60:4e:27:2f:e5:28:8c:76:e2:12:fc:e1:bd:5f:66:a9:f9:2f:fa
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 97:be:7f:e6:8e:96:12:c0:b7:16:a8:90:fa:90:c1:f2:2a:26:71:39
Fingerprint (sha256): 50:bb:0e:72:c0:45:ce:fc:4c:53:75:16:b0:4c:be:0a:55:82:51:11:d8:39:24:98:bb:b1:8b:7c:f2:5a:2e:47
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate *.rcm.ac.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.rcm.ac.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.rcm.ac.uk
rcm.ac.uk
rcm.ac.uk
Other certificates including the domain name rcm.ac.uk
(limited to 100 certificates)
openathensla.rcm.ac.uk
rcm-owa.rcm.ac.uk
muse.rcm.ac.uk
museumcollections.rcm.ac.uk
museumcollections.rcm.ac.uk
activesync.rcm.ac.uk
museumcollections.rcm.ac.uk
adfs.rcm.ac.uk
www.petergellhorn.rcm.ac.uk
rcm.ac.uk
museumcollections.rcm.ac.uk
registration.rcm.ac.uk
*.rcm.ac.uk
*.rcm.ac.uk
www.petergellhorn.rcm.ac.uk
museumcollections.rcm.ac.uk
ext.muse.rcm.ac.uk
fees.rcm.ac.uk
researchonline-uat.rcm.ac.uk
rcm-dc-01.rcm.ac.uk
museumcollections.rcm.ac.uk
museumcollections.rcm.ac.uk
*.rcm.ac.uk
rcm.ac.uk
museumcollections.rcm.ac.uk
payments.rcm.ac.uk
payments.rcm.ac.uk
openathensla.rcm.ac.uk
ext.muse.rcm.ac.uk
*.rcm.ac.uk
www.boxoffice.rcm.ac.uk
activesync.rcm.ac.uk
fees.rcm.ac.uk
rcmstream.rcm.ac.uk
rcm-dc-02.rcm.ac.uk
activesync.rcm.ac.uk
mail.rcm.ac.uk
activesync.rcm.ac.uk
museumcollections.rcm.ac.uk
learn.rcm.ac.uk
rcmstream.rcm.ac.uk
museumcollections.rcm.ac.uk
rcmstream.rcm.ac.uk
activesync.rcm.ac.uk
adfs.rcm.ac.uk
muse.rcm.ac.uk
rcmmail.rcm.ac.uk
adfs.rcm.ac.uk
muse.rcm.ac.uk
password.rcm.ac.uk
fees.rcm.ac.uk
activesync.rcm.ac.uk
registration.rcm.ac.uk
museumcollections.rcm.ac.uk
fees.rcm.ac.uk
ext.mysite.rcm.ac.uk
password.rcm.ac.uk
museumcollections.rcm.ac.uk
openathensla.rcm.ac.uk
activesync.rcm.ac.uk
fees.rcm.ac.uk
museumcollections.rcm.ac.uk
museumcollections.rcm.ac.uk
rcm.ac.uk
museumcollections.rcm.ac.uk
password.rcm.ac.uk
openathensla.rcm.ac.uk
learn.rcm.ac.uk
mail.rcm.ac.uk
petergellhorn.rcm.ac.uk
password.rcm.ac.uk
adfs.rcm.ac.uk
ext.mysite.rcm.ac.uk
*.rcm.ac.uk
adfs.rcm.ac.uk
rcmwireless.rcm.ac.uk
rcmldaps.rcm.ac.uk
www.boxoffice.rcm.ac.uk
registration.rcm.ac.uk
researchonline-uat.rcm.ac.uk
learn.rcm.ac.uk
muse.rcm.ac.uk
*.rcm.ac.uk
registration.rcm.ac.uk
password.rcm.ac.uk
*.rcm.ac.uk
*.rcm.ac.uk
rcm-owa.rcm.ac.uk
muse.rcm.ac.uk
museumcollections.rcm.ac.uk
museumcollections.rcm.ac.uk
activesync.rcm.ac.uk
museumcollections.rcm.ac.uk
adfs.rcm.ac.uk
www.petergellhorn.rcm.ac.uk
rcm.ac.uk
museumcollections.rcm.ac.uk
registration.rcm.ac.uk
*.rcm.ac.uk
*.rcm.ac.uk
www.petergellhorn.rcm.ac.uk
museumcollections.rcm.ac.uk
ext.muse.rcm.ac.uk
fees.rcm.ac.uk
researchonline-uat.rcm.ac.uk
rcm-dc-01.rcm.ac.uk
museumcollections.rcm.ac.uk
museumcollections.rcm.ac.uk
*.rcm.ac.uk
rcm.ac.uk
museumcollections.rcm.ac.uk
payments.rcm.ac.uk
payments.rcm.ac.uk
openathensla.rcm.ac.uk
ext.muse.rcm.ac.uk
*.rcm.ac.uk
www.boxoffice.rcm.ac.uk
activesync.rcm.ac.uk
fees.rcm.ac.uk
rcmstream.rcm.ac.uk
rcm-dc-02.rcm.ac.uk
activesync.rcm.ac.uk
mail.rcm.ac.uk
activesync.rcm.ac.uk
museumcollections.rcm.ac.uk
learn.rcm.ac.uk
rcmstream.rcm.ac.uk
museumcollections.rcm.ac.uk
rcmstream.rcm.ac.uk
activesync.rcm.ac.uk
adfs.rcm.ac.uk
muse.rcm.ac.uk
rcmmail.rcm.ac.uk
adfs.rcm.ac.uk
muse.rcm.ac.uk
password.rcm.ac.uk
fees.rcm.ac.uk
activesync.rcm.ac.uk
registration.rcm.ac.uk
museumcollections.rcm.ac.uk
fees.rcm.ac.uk
ext.mysite.rcm.ac.uk
password.rcm.ac.uk
museumcollections.rcm.ac.uk
openathensla.rcm.ac.uk
activesync.rcm.ac.uk
fees.rcm.ac.uk
museumcollections.rcm.ac.uk
museumcollections.rcm.ac.uk
rcm.ac.uk
museumcollections.rcm.ac.uk
password.rcm.ac.uk
openathensla.rcm.ac.uk
learn.rcm.ac.uk
mail.rcm.ac.uk
petergellhorn.rcm.ac.uk
password.rcm.ac.uk
adfs.rcm.ac.uk
ext.mysite.rcm.ac.uk
*.rcm.ac.uk
adfs.rcm.ac.uk
rcmwireless.rcm.ac.uk
rcmldaps.rcm.ac.uk
www.boxoffice.rcm.ac.uk
registration.rcm.ac.uk
researchonline-uat.rcm.ac.uk
learn.rcm.ac.uk
muse.rcm.ac.uk
*.rcm.ac.uk
registration.rcm.ac.uk
password.rcm.ac.uk
*.rcm.ac.uk
*.rcm.ac.uk
Certificate
The complete raw certificate details for *.rcm.ac.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHVjCCBT6gAwIBAgIQbuViXem5yn1a+4vN2yUMVjANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjQwMjAyMDAwMDAwWhcNMjUwMjIxMjM1 OTU5WjBeMQswCQYDVQQGEwJHQjEYMBYGA1UECBMPTG9uZG9uLCBDaXR5IG9mMR8w HQYDVQQKExZSb3lhbCBDb2xsZWdlIG9mIE11c2ljMRQwEgYDVQQDDAsqLnJjbS5h Yy51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALG3kvyjXxKBy7cB m8NhcXsoRArFj7bs26428OiR8id6ZGO5y2r2Sfzq+Cw9LWX/F1IdBeWHKlYpdD3W WYa+YXc+6Xb0ljjPfj09L6qR2OuvVlOqOdJh2NduJ7seRuzOmHW1HkA+30/2VFIC 7gBYkRt09zhdHF+4ejP5dk2/GHEcWBJDSDufJMyznFZNvE4141jg95sCFTdfmcHi 9ASYP1ZrtZpCIHTBlA+E4oz7rWkjVuBj/HnlMztK1ri+zdGn3QTFvZVbg7M+UYuE 4zolfX/4813Pkdz4BCbe2KDRepQx4pMnv/4j4VOXEzlerwofbgOFesVcmDfx1JAa Q0QQCC0CAwEAAaOCAygwggMkMB8GA1UdIwQYMBaAFG8dNUkQbDL6WaCevIroH5W+ cXoMMB0GA1UdDgQWBBQLYE4nL+UojHbiEvzhvV9mqfkv+jAOBgNVHQ8BAf8EBAMC BaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw SQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICTzAlMCMGCCsGAQUFBwIBFhdodHRwczov L3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0 cDovL0dFQU5ULmNybC5zZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNybDB1Bggr BgEFBQcBAQRpMGcwOgYIKwYBBQUHMAKGLmh0dHA6Ly9HRUFOVC5jcnQuc2VjdGln by5jb20vR0VBTlRPVlJTQUNBNC5jcnQwKQYIKwYBBQUHMAGGHWh0dHA6Ly9HRUFO VC5vY3NwLnNlY3RpZ28uY29tMCEGA1UdEQQaMBiCCyoucmNtLmFjLnVrgglyY20u YWMudWswggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AM8RVu7VLnyv84db2Wku m+kacWdKsBfsrAHSW3fOzDsIAAABjWm49ZgAAAQDAEcwRQIgDq6ebqxxTs8K76kP cqzTsnvgvhRniFGbRfViitAENmQCIQCfhfOXifmdwY+0882GP//YhsvaVpoxoJVS JHv7SKqNqgB2AKLjCuRF772tm3447Udnd1PXgluElNcrXhssxLlQpEfnAAABjWm4 9b8AAAQDAEcwRQIga6cRVVtqIEBC1hsyykStX0ESgwsE96b8K4mjc9SQl7ECIQDq Isr989myVNKGyACqhStZEliGRhltAfJIJ9QvHYOL4AB1AE51oydcmhDDOFts1N8/ Uusd8OCOG41pwLH6ZLFimjnfAAABjWm49hoAAAQDAEYwRAIgPhAV72l6gx3NfA2Y 064+iM4YptpJY+j6HMNFA3j5GmECICrU8yjTKCzzFScaCV/wAX1ZKBZZPhhAIv6z XfyGrHl1MA0GCSqGSIb3DQEBDAUAA4ICAQAAsPCW7Wh9fPmxwMf99/LO5jjhXtiY heRlyrqVtN5bdMfPjg6D8PixU/Jx+USiHPCJPet4vs0pCpXGgTZBD8os2YmG39Yu PIR41oq1BhkIV2rBDrYe2EW+Ag5MecQgpsUQH0y+0QJm2SsITk5ugOMScuwGa2xt zleexRBG5Wj4ytmgrFpxIpPFZY/Y4SLMCvWinA7yUHO+i7Or8BplZ8Ah6xAqrOXj O0bdooG3kjStXMoOuegMsyrBbrgP705dB8aUee8PNlkROERXkQANtlZvEvVUXf8j JLWHgsV3KFp5GbQiRQcIUrdWpnJHCKFBMWx+0Nz1Q98fD67AMRcJhLLOKVAObVAN Af20LVHf0wca/BKdtqX5YgubbMLCHt8KplS2IQ+2SJpdx6CNrUc9A7dcC7d+rm8l 55N7wzTCEXWdOmJ4+hz6dCZ8Pv5Y+wqSYYZ2E7YX1fdHmnHON0roaBFrCLjTAEz9 g2JPo2piMmidZJvktUfDUEx1qH/t6cLfdIMnbg3Xk84ZCS1uqmfoqTNDhKRKOzxq x0r3QEW3p6E92Vx0bfe7erGUO4069+Vpa/4MyyGKJhq16/ogUkkhFi7qKoq/Trzf 2PdaXlut9s4dpzfqD48PYwXfNkSTnVnlLez5qMCfqRhSjbtkw3SO9NQJ7OtMCLgn SkbyHiLQEJ8Jxg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbeS/KNfEoHLtwGbw2Fx eyhECsWPtuzbrjbw6JHyJ3pkY7nLavZJ/Or4LD0tZf8XUh0F5YcqVil0PdZZhr5h dz7pdvSWOM9+PT0vqpHY669WU6o50mHY124nux5G7M6YdbUeQD7fT/ZUUgLuAFiR G3T3OF0cX7h6M/l2Tb8YcRxYEkNIO58kzLOcVk28TjXjWOD3mwIVN1+ZweL0BJg/ Vmu1mkIgdMGUD4TijPutaSNW4GP8eeUzO0rWuL7N0afdBMW9lVuDsz5Ri4TjOiV9 f/jzXc+R3PgEJt7YoNF6lDHikye//iPhU5cTOV6vCh9uA4V6xVyYN/HUkBpDRBAI LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 147406110633640108032067847011493547094 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-21 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London, City of' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Royal College of Music' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.rcm.ac.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22434703774831296559911080756040534864441906942523995608758480752407400370795439147604632480407938741628886684495773729733129211725401154299151301372319254232591917444708986315139354174919024975537016138303886035372785154003784492282109314771545614475542787697484740323332617072073051226623854181074759690921812103311786878475732358676366092053885819458368434605734296894757313195271502692116329058331594821412419626203497749123117178634280948385161216414642217779586054790337298583043276801138043439867814811426911670880357627799029952013708499251296822996029003235011571381100085578148000215799042625369592550131757 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0b604e272fe5288c76e212fce1bd5f66a9f92ffa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcm.ac.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcm.ac.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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