dmponline-lb.dcc.ac.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:89:ce:e1:9d:12:31:81:5a:40:84:e1:68:bc:fb:b8:eb:92 was issued on by Let's Encrypt.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dmponline-lb.dcc.ac.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:89:ce:e1:9d:12:31:81:5a:40:84:e1:68:bc:fb:b8:eb:92
Serial Number (int): 395342820414914154928696663804737146645394
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 36:d6:9a:25:4c:59:13:ec:75:63:c9:fd:26:a7:5a:c1:01:fe:52:65
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a7:26:55:db:46:b8:c6:e5:c0:52:c1:31:9d:a9:56:73:cb:00:6c:05
Fingerprint (sha256): 80:d6:e8:03:3e:fb:64:e1:2e:90:0b:b3:d9:90:2b:29:42:ba:d5:ae:0d:9e:f7:82:4e:db:e6:8f:6c:5f:d2:f6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dmponline-lb.dcc.ac.uk

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dmponline-lb.dcc.ac.uk

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dmp.bham.ac.uk
dmp.gih.se
dmp.hh.se
dmp.kcl.ac.uk
dmp.kent.ac.uk
dmp.ki.se
dmp.kth.se
dmp.ncl.ac.uk
dmp.npl.co.uk
dmp.radboudumc.nl
dmp.researchdata.ox.ac.uk
dmp.shh.se
dmp.stir.ac.uk
dmp.su.se
dmp.tees.ac.uk
dmp.ucd.ie
dmp.umu.se
dmp.unil.ch
dmp.uu.se
dmp.wur.nl
dmponline-lb.dcc.ac.uk
dmponline.bth.se
dmponline.dcc.ac.uk
dmponline.ed.ac.uk
dmponline.eur.nl
dmponline.exeter.ac.uk
dmponline.gla.ac.uk
dmponline.hig.se
dmponline.kau.se
dmponline.lumc.nl
dmponline.manchester.ac.uk
dmponline.mdu.se
dmponline.miun.se
dmponline.nhlstenden.com
dmponline.plymouth.ac.uk
dmponline.research.lu.se
dmponline.rivm.nl
dmponline.shef.ac.uk
dmponline.sheffield.ac.uk
dmponline.slu.se
dmponline.tudelft.nl
dmponline.vu.nl
kmh.dmponline-mt.dcc.ac.uk
lse.dmponline-mt.dcc.ac.uk
nwo.dmponline-mt.dcc.ac.uk
qub.dmponline-mt.dcc.ac.uk
sse.dmponline-mt.dcc.ac.uk
unilu.dmponline-mt.dcc.ac.uk

Other certificates including the domain name dcc.ac.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for dmponline-lb.dcc.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHuDCCBqCgAwIBAgISBInO4Z0SMYFaQIThaLz7uOuSMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMDkxMzA2NTFaFw0yNDAyMDcxMzA2NTBaMCExHzAdBgNVBAMT
FmRtcG9ubGluZS1sYi5kY2MuYWMudWswWTATBgcqhkjOPQIBBggqhkjOPQMBBwNC
AAR8ZRxVqpg1zHZ6fQRbnFSMio+nNbD9aa7zWrRJgcngijZcXLjmyXM+GasCAC73
yx9yBxAT/T379fZOXS6JTHyko4IFojCCBZ4wDgYDVR0PAQH/BAQDAgeAMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBQ21polTFkT7HVjyf0mp1rBAf5SZTAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm
H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v
LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCC
A6gGA1UdEQSCA58wggObgg5kbXAuYmhhbS5hYy51a4IKZG1wLmdpaC5zZYIJZG1w
LmhoLnNlgg1kbXAua2NsLmFjLnVrgg5kbXAua2VudC5hYy51a4IJZG1wLmtpLnNl
ggpkbXAua3RoLnNlgg1kbXAubmNsLmFjLnVrgg1kbXAubnBsLmNvLnVrghFkbXAu
cmFkYm91ZHVtYy5ubIIZZG1wLnJlc2VhcmNoZGF0YS5veC5hYy51a4IKZG1wLnNo
aC5zZYIOZG1wLnN0aXIuYWMudWuCCWRtcC5zdS5zZYIOZG1wLnRlZXMuYWMudWuC
CmRtcC51Y2QuaWWCCmRtcC51bXUuc2WCC2RtcC51bmlsLmNogglkbXAudXUuc2WC
CmRtcC53dXIubmyCFmRtcG9ubGluZS1sYi5kY2MuYWMudWuCEGRtcG9ubGluZS5i
dGguc2WCE2RtcG9ubGluZS5kY2MuYWMudWuCEmRtcG9ubGluZS5lZC5hYy51a4IQ
ZG1wb25saW5lLmV1ci5ubIIWZG1wb25saW5lLmV4ZXRlci5hYy51a4ITZG1wb25s
aW5lLmdsYS5hYy51a4IQZG1wb25saW5lLmhpZy5zZYIQZG1wb25saW5lLmthdS5z
ZYIRZG1wb25saW5lLmx1bWMubmyCGmRtcG9ubGluZS5tYW5jaGVzdGVyLmFjLnVr
ghBkbXBvbmxpbmUubWR1LnNlghFkbXBvbmxpbmUubWl1bi5zZYIYZG1wb25saW5l
Lm5obHN0ZW5kZW4uY29tghhkbXBvbmxpbmUucGx5bW91dGguYWMudWuCGGRtcG9u
bGluZS5yZXNlYXJjaC5sdS5zZYIRZG1wb25saW5lLnJpdm0ubmyCFGRtcG9ubGlu
ZS5zaGVmLmFjLnVrghlkbXBvbmxpbmUuc2hlZmZpZWxkLmFjLnVrghBkbXBvbmxp
bmUuc2x1LnNlghRkbXBvbmxpbmUudHVkZWxmdC5ubIIPZG1wb25saW5lLnZ1Lm5s
ghprbWguZG1wb25saW5lLW10LmRjYy5hYy51a4IabHNlLmRtcG9ubGluZS1tdC5k
Y2MuYWMudWuCGm53by5kbXBvbmxpbmUtbXQuZGNjLmFjLnVrghpxdWIuZG1wb25s
aW5lLW10LmRjYy5hYy51a4Iac3NlLmRtcG9ubGluZS1tdC5kY2MuYWMudWuCHHVu
aWx1LmRtcG9ubGluZS1tdC5kY2MuYWMudWswEwYDVR0gBAwwCjAIBgZngQwBAgEw
ggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwA7U3d1Pi25gE6LMFsG/kA7Z9hPw/TH
vQANLXJv4frUFwAAAYu0aD1MAAAEAwBIMEYCIQD8rbnf4fgM8isWKhF0qVLmBWEl
WxzdUY/KQZWB3hMz3wIhAJjKUYU1kn/TRXMzXDXz6hlT8fDqzaybIZ0fS2K9tH/y
AHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGLtGg9VAAABAMA
RzBFAiBVrvkkc08z0qIUd009X5D4HSM6QIXD1cxB2T2fbeSJOwIhAIbSMqfqmtuz
sqac7Ou0Iu8AzuYFTvmhxnpCRoCUawDFMA0GCSqGSIb3DQEBCwUAA4IBAQAqDpQG
kYE94c7O+eeWH+GGwwd5CrR1SnrmhDEhk+Y43icNUDy9gT+juBqKaK87K8FYULjz
+NnVE6igV5Y+IQdPmCfjGjEiNy8eNuYTnXq6WIyeJ1Yec7P961f7lLqWzNhkY5lg
7BS9cKiwpVfD1xAjUvNIMazOdOtLg7geMi38zZkDQw3FeuNJfd1pwcdoqshsmdD/
7bJXxbSkklm+9uscWFstc9HEfqez+nsk/uaU5f35CbedpuaTDFDaSaxi7uD+Zrch
h8g6/MjTAh6uiQHIJRpffQfhwPlIsKev6s9P7Kplv6/zwObbuOH0KhEm8O7650Jp
1KhJAWPWyMynoBKO
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEfGUcVaqYNcx2en0EW5xUjIqPpzWw
/Wmu81q0SYHJ4Io2XFy45slzPhmrAgAu98sfcgcQE/09+/X2Tl0uiUx8pA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 395342820414914154928696663804737146645394
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 13:06:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 13:06:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dmponline-lb.dcc.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00047c651c55aa9835cc767a7d045b9c548c8a8fa735b0fd69aef35ab44981c9e08a365c5cb8e6c9733e19ab02002ef7cb1f72071013fd3dfbf5f64e5d2e894c7ca4
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							36d69a254c5913ec7563c9fd26a75ac101fe5265
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (927 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.bham.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.gih.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.hh.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.kcl.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.kent.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.ki.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.kth.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.ncl.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.npl.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.radboudumc.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.researchdata.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.shh.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.stir.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.su.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.tees.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.ucd.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.umu.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.unil.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.uu.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmp.wur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline-lb.dcc.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.bth.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.dcc.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.ed.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.exeter.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.gla.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.hig.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.kau.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.lumc.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.manchester.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.mdu.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.miun.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.nhlstenden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.plymouth.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.research.lu.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.rivm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.shef.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.sheffield.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.slu.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.tudelft.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmponline.vu.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmh.dmponline-mt.dcc.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lse.dmponline-mt.dcc.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwo.dmponline-mt.dcc.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qub.dmponline-mt.dcc.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sse.dmponline-mt.dcc.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unilu.dmponline-mt.dcc.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bb4683d4c0000040300483046022100fcadb9dfe1f80cf22b162a1174a952e60561255b1cdd518fca419581de1333df02210098ca518535927fd34573335c35f3ea1953f1f0eacdac9b219d1f4b62bdb47ff2007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bb4683d540000040300473045022055aef924734f33d2a214774d3d5f90f81d233a4085c3d5cc41d93d9f6de4893b02210086d232a7ea9adbb3b2a69cecebb422ef00cee6054ef9a1c67a424680946b00c5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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