hitchinsit.co.uk
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number b7:cd:3e:8e:87:ac:94:c0:0e:c6:e3:e4:2f:b7:90:f5 was issued on by Google Trust Services LLC.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=hitchinsit.co.uk
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): b7:cd:3e:8e:87:ac:94:c0:0e:c6:e3:e4:2f:b7:90:f5Serial Number (int): 244314412886422861854282083078346608885
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: bb:76:63:4c:61:d7:be:d0:52:94:85:cc:87:4a:e3:02:a0:6c:0c:5a
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): dd:36:07:a1:10:50:c0:19:d1:df:60:6e:b6:ec:02:59:70:b6:4e:c3
Fingerprint (sha256): 90:ac:f0:f2:88:92:54:48:ea:f8:ed:c0:58:d0:89:df:89:a4:b6:27:9d:27:ae:a4:e0:af:75:db:c1:04:1c:2e
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/-bdgZ0fkfSICRL Distribution Point: http://crls.pki.goog/gts1p5/P5F4NwTe1ho.crl
Check the revocation status for certificate hitchinsit.co.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hitchinsit.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
hitchinsit.co.uk
*.hitchinsit.co.uk
*.hitchinsit.co.uk
Other certificates including the domain name hitchinsit.co.uk
(limited to 100 certificates)
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378275.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378276.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378276.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378275.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
hitchinsit.co.uk
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378276.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
hitchinsit.co.uk
ssl378276.cloudflaressl.com
ssl378275.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378275.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378275.cloudflaressl.com
hitchinsit.co.uk
ssl378276.cloudflaressl.com
sni.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378276.cloudflaressl.com
sni37965.cloudflaressl.com
sni.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
hitchinsit.co.uk
hitchinsit.co.uk
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378276.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378275.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378276.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378276.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378275.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
hitchinsit.co.uk
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378276.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
hitchinsit.co.uk
ssl378276.cloudflaressl.com
ssl378275.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378275.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378275.cloudflaressl.com
hitchinsit.co.uk
ssl378276.cloudflaressl.com
sni.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378276.cloudflaressl.com
sni37965.cloudflaressl.com
sni.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
hitchinsit.co.uk
hitchinsit.co.uk
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378276.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
Certificate
The complete raw certificate details for hitchinsit.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIRALfNPo6HrJTADsbj5C+3kPUwDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjQwNDIwMDQzMTQ2WhcNMjQwNzE5 MDQzMTQ1WjAbMRkwFwYDVQQDExBoaXRjaGluc2l0LmNvLnVrMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdohzrTXntLTlWZ/PlEUcVuow1UUHUvkclPw 3umQ9aQOaoTgmnoPKsumDOi75aghgzPUmVrig6L6RLB7Zb5gLBP2KgX4hZrgfpR3 vRCO0Tvo1d8g792uTh4T2Z7pa5x5n87ihacfRTqahabrrnFJS+66t6gPi/tLbFer k/7L9O7dVqhaOOJ1x4uYWLobtTePSE+JkXmezEBnbU0iUIFMDUbaomRKHttN5GXh y/vHRbO/O+9rZ0K98x7wZY9DFr8ABQepKxSUm/03H4BABDAIkU0LBKCW/VJ6EVfH riL8VK1uTtS2SZwNv3kROXlk17ymU6WqdQmIWFwi3kLGCysQHwIDAQABo4ICijCC AoYwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFLt2Y0xh177QUpSFzIdK4wKgbAxaMB8GA1UdIwQYMBaA FNX8ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcw AYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUvLWJkZ1owZmtmU0kwMQYI KwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5kZXIw LwYDVR0RBCgwJoIQaGl0Y2hpbnNpdC5jby51a4ISKi5oaXRjaGluc2l0LmNvLnVr MCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAx oC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMXA1L1A1RjROd1RlMWhvLmNy bDCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AHb/iD8KtvuVUcJhzPWHujS0pM27 KdxoQgqf5mdMWjp0AAABjvn9PsEAAAQDAEYwRAIgAy+M8IY5C91aDVksyB9cvY96 AbwWpqVs5v39pVrPY74CIAFzN0f5rgMJf5zv1A9bICRvbLiDF1mqB0gmwqfkLa9P AHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGO+f0+tAAABAMA RzBFAiEAlGCMbT5ci5+jEm5Pjso/PxnCHs+acTLu09uHBWFKEYoCICFcjJIZ6Crx L4LFT1iulTma5GHCbBbBAv7PXO7PS8giMA0GCSqGSIb3DQEBCwUAA4IBAQBB+iv6 tcqqfdeFQgqkNtNPYqBjEhfYql5VKS+BgB/FvSmSZbWiAEc/F28BS6Hc/BtWRKFI 5UW/4LdEpCdm5AdcVyz+hg+wYaIZH+gPCJGuidRJMiy8jq5+IM99OVyTqMTPPaYD TlREueTLUBNHM1tzAnhbiBV/I2OGYDK+nCkQkZXeWksfvmH+hG4HtfRr+yb9o98h hkrxidivpQ/K7YyFayZAVukzbhgYKAfI9cdmccjqqQPqIA83oJNZnRA2fxl/9tA8 Wxz6qv9QQzOSD0x2LZTp0guNHeOEc8wZKGn60+hM0ac/W7yIPAdonpr7Rt6uvICs C2vOz71ZvXpszbim -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdohzrTXntLTlWZ/PlEU cVuow1UUHUvkclPw3umQ9aQOaoTgmnoPKsumDOi75aghgzPUmVrig6L6RLB7Zb5g LBP2KgX4hZrgfpR3vRCO0Tvo1d8g792uTh4T2Z7pa5x5n87ihacfRTqahabrrnFJ S+66t6gPi/tLbFerk/7L9O7dVqhaOOJ1x4uYWLobtTePSE+JkXmezEBnbU0iUIFM DUbaomRKHttN5GXhy/vHRbO/O+9rZ0K98x7wZY9DFr8ABQepKxSUm/03H4BABDAI kU0LBKCW/VJ6EVfHriL8VK1uTtS2SZwNv3kROXlk17ymU6WqdQmIWFwi3kLGCysQ HwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 244314412886422861854282083078346608885 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 04:31:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-19 04:31:45 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hitchinsit.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24976511006266764816829330435681513779764865503515431571684504574837977951608777604829986820763407498221341604472182898821075860334338683102753405088344024634454879279128392386837173571460331385535464225014365127140007281223448379755410844309113586391510133720624081318927280210208937300606157335245840743516514986717321788067548335439196463533335766025412210317144226948776850630254838305516580680124917002189977032041364886399369934864174458182326138030220668141667476598041421953349090742029757211662639293649259006094927258772152541020881144174523634923144931677244992166201857754412394661258732152824249071636511 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bb76634c61d7bed0529485cc874ae302a06c0c5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/-bdgZ0fkfSI' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitchinsit.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitchinsit.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/P5F4NwTe1ho.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ef9fd3ec100000403004630440220032f8cf086390bdd5a0d592cc81f5cbd8f7a01bc16a6a56ce6fdfda55acf63be022001733747f9ae03097f9cefd40f5b20246f6cb8831759aa074826c2a7e42daf4f00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ef9fd3eb4000004030047304502210094608c6d3e5c8b9fa3126e4f8eca3f3f19c21ecf9a7132eed3db8705614a118a0220215c8c9219e82af12f82c54f58ae95399ae461c26c16c102fecf5ceecf4bc822 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0041fa2bfab5caaa7dd785420aa436d34f62a0631217d8aa5e55292f81801fc5bd299265b5a200473f176f014ba1dcfc1b5644a148e545bfe0b744a42766e4075c572cfe860fb061a2191fe80f0891ae89d449322cbc8eae7e20cf7d395c93a8c4cf3da6034e5444b9e4cb501347335b7302785b88157f2363866032be9c29109195de5a4b1fbe61fe846e07b5f46bfb26fda3df21864af189d8afa50fcaed8c856b264056e9336e18182807c8f5c76671c8eaa903ea200f37a093599d10367f197ff6d03c5b1cfaaaff504333920f4c762d94e9d20b8d1de38473cc192869fad3e84cd1a73f5bbc883c07689e9afb46deaebc80ac0b6bcecfbd59bd7a6ccdb8a6