*.rcm.ac.uk

- Royal College of Music -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 6e:e5:62:5d:e9:b9:ca:7d:5a:fb:8b:cd:db:25:0c:56 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Royal College of Music

Organization: Royal College of Music
State / Province: London, City of
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 6e:e5:62:5d:e9:b9:ca:7d:5a:fb:8b:cd:db:25:0c:56
Serial Number (int): 147406110633640108032067847011493547094
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 0b:60:4e:27:2f:e5:28:8c:76:e2:12:fc:e1:bd:5f:66:a9:f9:2f:fa
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 97:be:7f:e6:8e:96:12:c0:b7:16:a8:90:fa:90:c1:f2:2a:26:71:39
Fingerprint (sha256): 50:bb:0e:72:c0:45:ce:fc:4c:53:75:16:b0:4c:be:0a:55:82:51:11:d8:39:24:98:bb:b1:8b:7c:f2:5a:2e:47

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.rcm.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.rcm.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.rcm.ac.uk
rcm.ac.uk

Other certificates including the domain name rcm.ac.uk

(limited to 100 certificates)
openathensla.rcm.ac.uk
rcm-owa.rcm.ac.uk
muse.rcm.ac.uk
museumcollections.rcm.ac.uk
museumcollections.rcm.ac.uk
activesync.rcm.ac.uk
museumcollections.rcm.ac.uk
adfs.rcm.ac.uk
www.petergellhorn.rcm.ac.uk
rcm.ac.uk
museumcollections.rcm.ac.uk
registration.rcm.ac.uk
*.rcm.ac.uk
*.rcm.ac.uk
www.petergellhorn.rcm.ac.uk
museumcollections.rcm.ac.uk
ext.muse.rcm.ac.uk
fees.rcm.ac.uk
researchonline-uat.rcm.ac.uk
rcm-dc-01.rcm.ac.uk
museumcollections.rcm.ac.uk
museumcollections.rcm.ac.uk
*.rcm.ac.uk
rcm.ac.uk
museumcollections.rcm.ac.uk
payments.rcm.ac.uk
payments.rcm.ac.uk
openathensla.rcm.ac.uk
ext.muse.rcm.ac.uk
*.rcm.ac.uk
www.boxoffice.rcm.ac.uk
activesync.rcm.ac.uk
fees.rcm.ac.uk
rcmstream.rcm.ac.uk
rcm-dc-02.rcm.ac.uk
activesync.rcm.ac.uk
mail.rcm.ac.uk
activesync.rcm.ac.uk
museumcollections.rcm.ac.uk
learn.rcm.ac.uk
rcmstream.rcm.ac.uk
museumcollections.rcm.ac.uk
rcmstream.rcm.ac.uk
activesync.rcm.ac.uk
adfs.rcm.ac.uk
muse.rcm.ac.uk
rcmmail.rcm.ac.uk
adfs.rcm.ac.uk
muse.rcm.ac.uk
password.rcm.ac.uk
fees.rcm.ac.uk
activesync.rcm.ac.uk
registration.rcm.ac.uk
museumcollections.rcm.ac.uk
fees.rcm.ac.uk
ext.mysite.rcm.ac.uk
password.rcm.ac.uk
museumcollections.rcm.ac.uk
openathensla.rcm.ac.uk
activesync.rcm.ac.uk
fees.rcm.ac.uk
museumcollections.rcm.ac.uk
museumcollections.rcm.ac.uk
rcm.ac.uk
museumcollections.rcm.ac.uk
password.rcm.ac.uk
openathensla.rcm.ac.uk
learn.rcm.ac.uk
mail.rcm.ac.uk
petergellhorn.rcm.ac.uk
password.rcm.ac.uk
adfs.rcm.ac.uk
ext.mysite.rcm.ac.uk
*.rcm.ac.uk
adfs.rcm.ac.uk
rcmwireless.rcm.ac.uk
rcmldaps.rcm.ac.uk
www.boxoffice.rcm.ac.uk
registration.rcm.ac.uk
researchonline-uat.rcm.ac.uk
learn.rcm.ac.uk
muse.rcm.ac.uk
*.rcm.ac.uk
registration.rcm.ac.uk
password.rcm.ac.uk
*.rcm.ac.uk
*.rcm.ac.uk

Certificate

The complete raw certificate details for *.rcm.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHVjCCBT6gAwIBAgIQbuViXem5yn1a+4vN2yUMVjANBgkqhkiG9w0BAQwFADBE
MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE
AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjQwMjAyMDAwMDAwWhcNMjUwMjIxMjM1
OTU5WjBeMQswCQYDVQQGEwJHQjEYMBYGA1UECBMPTG9uZG9uLCBDaXR5IG9mMR8w
HQYDVQQKExZSb3lhbCBDb2xsZWdlIG9mIE11c2ljMRQwEgYDVQQDDAsqLnJjbS5h
Yy51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALG3kvyjXxKBy7cB
m8NhcXsoRArFj7bs26428OiR8id6ZGO5y2r2Sfzq+Cw9LWX/F1IdBeWHKlYpdD3W
WYa+YXc+6Xb0ljjPfj09L6qR2OuvVlOqOdJh2NduJ7seRuzOmHW1HkA+30/2VFIC
7gBYkRt09zhdHF+4ejP5dk2/GHEcWBJDSDufJMyznFZNvE4141jg95sCFTdfmcHi
9ASYP1ZrtZpCIHTBlA+E4oz7rWkjVuBj/HnlMztK1ri+zdGn3QTFvZVbg7M+UYuE
4zolfX/4813Pkdz4BCbe2KDRepQx4pMnv/4j4VOXEzlerwofbgOFesVcmDfx1JAa
Q0QQCC0CAwEAAaOCAygwggMkMB8GA1UdIwQYMBaAFG8dNUkQbDL6WaCevIroH5W+
cXoMMB0GA1UdDgQWBBQLYE4nL+UojHbiEvzhvV9mqfkv+jAOBgNVHQ8BAf8EBAMC
BaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
SQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICTzAlMCMGCCsGAQUFBwIBFhdodHRwczov
L3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0
cDovL0dFQU5ULmNybC5zZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNybDB1Bggr
BgEFBQcBAQRpMGcwOgYIKwYBBQUHMAKGLmh0dHA6Ly9HRUFOVC5jcnQuc2VjdGln
by5jb20vR0VBTlRPVlJTQUNBNC5jcnQwKQYIKwYBBQUHMAGGHWh0dHA6Ly9HRUFO
VC5vY3NwLnNlY3RpZ28uY29tMCEGA1UdEQQaMBiCCyoucmNtLmFjLnVrgglyY20u
YWMudWswggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AM8RVu7VLnyv84db2Wku
m+kacWdKsBfsrAHSW3fOzDsIAAABjWm49ZgAAAQDAEcwRQIgDq6ebqxxTs8K76kP
cqzTsnvgvhRniFGbRfViitAENmQCIQCfhfOXifmdwY+0882GP//YhsvaVpoxoJVS
JHv7SKqNqgB2AKLjCuRF772tm3447Udnd1PXgluElNcrXhssxLlQpEfnAAABjWm4
9b8AAAQDAEcwRQIga6cRVVtqIEBC1hsyykStX0ESgwsE96b8K4mjc9SQl7ECIQDq
Isr989myVNKGyACqhStZEliGRhltAfJIJ9QvHYOL4AB1AE51oydcmhDDOFts1N8/
Uusd8OCOG41pwLH6ZLFimjnfAAABjWm49hoAAAQDAEYwRAIgPhAV72l6gx3NfA2Y
064+iM4YptpJY+j6HMNFA3j5GmECICrU8yjTKCzzFScaCV/wAX1ZKBZZPhhAIv6z
XfyGrHl1MA0GCSqGSIb3DQEBDAUAA4ICAQAAsPCW7Wh9fPmxwMf99/LO5jjhXtiY
heRlyrqVtN5bdMfPjg6D8PixU/Jx+USiHPCJPet4vs0pCpXGgTZBD8os2YmG39Yu
PIR41oq1BhkIV2rBDrYe2EW+Ag5MecQgpsUQH0y+0QJm2SsITk5ugOMScuwGa2xt
zleexRBG5Wj4ytmgrFpxIpPFZY/Y4SLMCvWinA7yUHO+i7Or8BplZ8Ah6xAqrOXj
O0bdooG3kjStXMoOuegMsyrBbrgP705dB8aUee8PNlkROERXkQANtlZvEvVUXf8j
JLWHgsV3KFp5GbQiRQcIUrdWpnJHCKFBMWx+0Nz1Q98fD67AMRcJhLLOKVAObVAN
Af20LVHf0wca/BKdtqX5YgubbMLCHt8KplS2IQ+2SJpdx6CNrUc9A7dcC7d+rm8l
55N7wzTCEXWdOmJ4+hz6dCZ8Pv5Y+wqSYYZ2E7YX1fdHmnHON0roaBFrCLjTAEz9
g2JPo2piMmidZJvktUfDUEx1qH/t6cLfdIMnbg3Xk84ZCS1uqmfoqTNDhKRKOzxq
x0r3QEW3p6E92Vx0bfe7erGUO4069+Vpa/4MyyGKJhq16/ogUkkhFi7qKoq/Trzf
2PdaXlut9s4dpzfqD48PYwXfNkSTnVnlLez5qMCfqRhSjbtkw3SO9NQJ7OtMCLgn
SkbyHiLQEJ8Jxg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbeS/KNfEoHLtwGbw2Fx
eyhECsWPtuzbrjbw6JHyJ3pkY7nLavZJ/Or4LD0tZf8XUh0F5YcqVil0PdZZhr5h
dz7pdvSWOM9+PT0vqpHY669WU6o50mHY124nux5G7M6YdbUeQD7fT/ZUUgLuAFiR
G3T3OF0cX7h6M/l2Tb8YcRxYEkNIO58kzLOcVk28TjXjWOD3mwIVN1+ZweL0BJg/
Vmu1mkIgdMGUD4TijPutaSNW4GP8eeUzO0rWuL7N0afdBMW9lVuDsz5Ri4TjOiV9
f/jzXc+R3PgEJt7YoNF6lDHikye//iPhU5cTOV6vCh9uA4V6xVyYN/HUkBpDRBAI
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 147406110633640108032067847011493547094
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London, City of'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Royal College of Music'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.rcm.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22434703774831296559911080756040534864441906942523995608758480752407400370795439147604632480407938741628886684495773729733129211725401154299151301372319254232591917444708986315139354174919024975537016138303886035372785154003784492282109314771545614475542787697484740323332617072073051226623854181074759690921812103311786878475732358676366092053885819458368434605734296894757313195271502692116329058331594821412419626203497749123117178634280948385161216414642217779586054790337298583043276801138043439867814811426911670880357627799029952013708499251296822996029003235011571381100085578148000215799042625369592550131757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b604e272fe5288c76e212fce1bd5f66a9f92ffa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcm.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcm.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0000b0f096ed687d7cf9b1c0c7fdf7f2cee638e15ed89885e465caba95b4de5b74c7cf8e0e83f0f8b153f271f944a21cf0893deb78becd290a95c68136410fca2cd98986dfd62e3c8478d68ab5061908576ac10eb61ed845be020e4c79c420a6c5101f4cbed10266d92b084e4e6e80e31272ec066b6c6dce579ec51046e568f8cad9a0ac5a712293c5658fd8e122cc0af5a29c0ef25073be8bb3abf01a6567c021eb102aace5e33b46dda281b79234ad5cca0eb9e80cb32ac16eb80fef4e5d07c69479ef0f36591138445791000db6566f12f5545dff2324b58782c577285a7919b42245070852b756a6724708a141316c7ed0dcf543df1f0faec031170984b2ce29500e6d500d01fdb42d51dfd3071afc129db6a5f9620b9b6cc2c21edf0aa654b6210fb6489a5dc7a08dad473d03b75c0bb77eae6f25e7937bc334c211759d3a6278fa1cfa74267c3efe58fb0a9261867613b617d5f7479a71ce374ae868116b08b8d3004cfd83624fa36a6232689d649be4b547c3504c75a87fede9c2df7483276e0dd793ce19092d6eaa67e8a9334384a44a3b3c6ac74af74045b7a7a13dd95c746df7bb7ab1943b8d3af7e5696bfe0ccb218a261ab5ebfa20524921162eea2a8abf4ebcdfd8f75a5e5badf6ce1da737ea0f8f0f6305df3644939d59e52decf9a8c09fa918528dbb64c3748ef4d409eceb4c08b8274a46f21e22d0109f09c6