connected.cardiff.ac.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a9:b0:bc:78:64:97:5d:d2:dc:e6:c4:31:1b:eb:67:a3:26 was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=connected.cardiff.ac.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a9:b0:bc:78:64:97:5d:d2:dc:e6:c4:31:1b:eb:67:a3:26
Serial Number (int): 406191786457605951005014145909495687521062
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 08:78:3d:c4:29:4a:39:64:bc:64:84:00:35:4c:84:ac:a5:3d:e2:2d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 12:d5:04:a8:37:8b:10:98:70:bd:3b:4f:60:57:b9:36:bd:10:89:d4
Fingerprint (sha256): 78:81:67:1c:09:e9:65:e3:ec:2f:46:40:aa:72:e7:e1:c8:fa:5c:d3:ac:36:65:6b:08:8b:b5:b4:fd:57:20:ca

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate connected.cardiff.ac.uk

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connected.cardiff.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campionalumni.org
casscommunity.co.uk
caterhamschoolsociety.co.uk
cettconnect.es
challonersconnected.com
charterhouseconnect.org.uk
cheveningconnect.com
choba.org
chsnetwork.co.uk
cisvalumni-connect.org
citizensconnect.co.uk
cityshefalumni.org
clarehallconnect.uk
clubdanetwork.com
colfesnet.com
columbansconnect.org
community.alumniportal-deutschland.org
community.birthrightexcel.com
community.bpp.com
connect.staffordglobal.org
connected.cardiff.ac.uk
corpusalumni.com
csfcalumni.com
cualumni.org
cumbrianetwork.global
www.campionalumni.org
www.casscommunity.co.uk
www.caterhamschoolsociety.co.uk
www.cettconnect.es
www.challonersconnected.com
www.charterhouseconnect.org.uk
www.cheveningconnect.com
www.choba.org
www.chsnetwork.co.uk
www.cisvalumni-connect.org
www.citizensconnect.co.uk
www.cityshefalumni.org
www.clarehallconnect.uk
www.clubdanetwork.com
www.colfesnet.com
www.columbansconnect.org
www.community.alumniportal-deutschland.org
www.community.birthrightexcel.com
www.community.bpp.com
www.connect.staffordglobal.org
www.connected.cardiff.ac.uk
www.corpusalumni.com
www.csfcalumni.com
www.cualumni.org
www.cumbrianetwork.global

Other certificates including the domain name cardiff.ac.uk

(limited to 100 certificates)
medicinesdiscoverydata.cardiff.ac.uk
private.zacharyhill.dev
data.cardiff.ac.uk
ask.cardiff.ac.uk
bidr.cardiff.ac.uk
beta-status.astronomer.io
www.studygroup.com
api.vonagestatus.com
beta-status.astronomer.io
private.zacharyhill.dev
exampapers.cf.ac.uk
api.vonagestatus.com
private.zacharyhill.dev
cwaf.status.radwarecloud.com
beta-status.astronomer.io
roombooking.cardiff.ac.uk
private.zacharyhill.dev
status-pre.cardiff.ac.uk
www.studygroup.com
private.zacharyhill.dev
private.zacharyhill.dev
campionalumni.org
private.zacharyhill.dev
anngriffiths.cardiff.ac.uk
sharelatex.cs.cf.ac.uk
bidev.cardiff.ac.uk
api.vonagestatus.com
mappedsites.cardiff.ac.uk
muscat.astro.cf.ac.uk
campionalumni.org
remotesupport.cardiff.ac.uk
*.data.cardiff.ac.uk
learningcentral.cardiff.ac.uk
status.cardiff.ac.uk
campionalumni.org
www.studygroup.com
blogs.cardiff.ac.uk
polls.cardiff.ac.uk
api.vonagestatus.com
fusion-dev.cardiff.ac.uk
community.mancosa.co.za
campionalumni.org
home.cf.ac.uk
private.zacharyhill.dev
lawpl.cardiff.ac.uk
private.zacharyhill.dev
campaigns.cardiff.ac.uk
connected.cardiff.ac.uk
status-pre.cardiff.ac.uk
api.vonagestatus.com
password-sso.cardiff.ac.uk
www.studygroup.com
www.cardiff.ac.uk
private.zacharyhill.dev
beta-status.astronomer.io
gems.cardiff.ac.uk
git.cardiff.ac.uk
*.data.cardiff.ac.uk
beta-status.astronomer.io
private.zacharyhill.dev
mssgweb02.id.add.cardiff.ac.uk
private.zacharyhill.dev
private.zacharyhill.dev
e2sapi.cardiff.ac.uk
campionalumni.org
private.zacharyhill.dev
mydispense.cardiff.ac.uk
module-evaluation.cardiff.ac.uk
www.studygroup.com
cwaf.status.radwarecloud.com
undergraduate-enews.cardiff.ac.uk
private.zacharyhill.dev
wwwstaging.cardiff.ac.uk
password.cardiff.ac.uk
extranet.cardiff.ac.uk
www.studygroup.com
api.vonagestatus.com
research.cardiff.ac.uk
vault.cardiff.ac.uk
intranet.cardiff.ac.uk
beta-status.astronomer.io
crmapi.cardiff.ac.uk
campaigns.cardiff.ac.uk
www.residences.cardiff.ac.uk
private.zacharyhill.dev
community.mancosa.co.za
gitlab.cs.cf.ac.uk
mmp.cardiff.ac.uk
xerte.cardiff.ac.uk
private.zacharyhill.dev
simstestlearn.cf.ac.uk
rssdp.cardiff.ac.uk
inside.biosi.cf.ac.uk
sitescardiff.cf.ac.uk
adfs.cardiff.ac.uk
www.studygroup.com
private.zacharyhill.dev
hmlupload.cardiff.ac.uk
helix-prod.cardiff.ac.uk
wikis.cf.ac.uk

Certificate

The complete raw certificate details for connected.cardiff.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+PUqVfXfXvwBhJ3CWIH
Jefq1VNBfgaodQL+Ob4fl54dIDvlsQlj5lINK3N6Q19n3+JGi2bVeC44rnVM1f4M
IZ1zwaily1lmR0TIdBWk6k6FeTeEeS5Nilz6xhFaImF7m2qcBTbS+l1+WZNJPuGt
cuhqOTMPWdxZ/l2dWBhpEHZbVYl67LHPYhttF7U315cxJbJKgUeSArf77Oiilk91
B3O/us/9b6lmnrxhUYCtVbyFu+wP28Gpg0ZKgrvUW1d8Z/IQUEk6Bf8zSvwfoh3l
M2Yte3rNnAv0auRwnOq2WQnw/N7ZmA2oyKH2/nw9Yl+0XSj3Rgk+7nlbsLaq4sBb
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406191786457605951005014145909495687521062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-08 08:49:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-06 08:49:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connected.cardiff.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22709004098767191244076548786666575019099221463906515328142222098427438791129989310902083479581275782954762075875926824152407679857454123379798173893379396593107467102560128750930988920028826097569617882341150186809451733529788207719639223049006662417944573287951822432097103178087011885947530065425273089963703989510812817804772771651101952520148909116991950985481808531787729121257732283748544415294630832016173165779058748320255911055600639939903406605402936529372486245781567424938297258787392502456100207592651900165101425657442333559677678370973940900331993573560984887264664184345801810246227501097373298351021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08783dc4294a3964bc648400354c84aca53de22d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1198 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campionalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casscommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterhamschoolsociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cettconnect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challonersconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charterhouseconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheveningconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisvalumni-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizensconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityshefalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarehallconnect.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubdanetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colfesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbansconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.alumniportal-deutschland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.birthrightexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.bpp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.staffordglobal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connected.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpusalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csfcalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cualumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumbrianetwork.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campionalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casscommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caterhamschoolsociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cettconnect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.challonersconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charterhouseconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheveningconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cisvalumni-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citizensconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityshefalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarehallconnect.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubdanetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colfesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbansconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.alumniportal-deutschland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.birthrightexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.bpp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.staffordglobal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connected.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpusalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csfcalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cualumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumbrianetwork.global'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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