osier.ac.uk

- University of Bristol -

Issued by QuoVadis EV SSL ICA G3

About this certificate

This digital certificate with serial number 2f:54:3b:1b:1c:11:dd:50:73:08:5d:c6:6c:1f:c6:d1:d9:d4:25:cc was issued on by QuoVadis Limited.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Bristol

Company registration number: May-17-09
Organization: University of Bristol
Organization unit: IT Services
State / Province: City of Bristol
Locality: BRISTOL
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:54:3b:1b:1c:11:dd:50:73:08:5d:c6:6c:1f:c6:d1:d9:d4:25:cc
Serial Number (int): 270200977675202052417686461960235911935985722828
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 05:51:87:48:dd:d7:25:48:6e:0e:f5:f9:32:3f:44:d1:e5:e1:87:a5
AuthorityKeyId: e5:84:54:d0:90:49:9f:38:ba:f2:c9:e1:2a:08:c5:4e:9f:a0:48:3f

Fingerprint (sha1): b2:c9:8c:84:3e:40:f3:bd:3a:c6:ea:c8:42:09:fe:3f:3e:5f:f4:65
Fingerprint (sha256): 95:b6:e3:68:fd:ad:cc:5c:9e:75:a9:7d:5a:61:e4:c8:ed:23:09:04:ff:54:6a:3c:66:cd:cf:04:ea:c0:55:95

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevsslg3.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevsslg3.crl

Check the revocation status for certificate osier.ac.uk

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for osier.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

osier.ac.uk
www.osier.ac.uk
osier-f5.ggy.bris.ac.uk
its-osier.cse.bris.ac.uk

Other certificates including the domain name osier.ac.uk

(limited to 100 certificates)
osier.ac.uk
osier.ac.uk
osier.ac.uk
osier.ac.uk

Certificate

The complete raw certificate details for osier.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIjTCCBnWgAwIBAgIUL1Q7GxwR3VBzCF3GbB/G0dnUJcwwDQYJKoZIhvcNAQEL
BQAwSTELMAkGA1UEBhMCQk0xGTAXBgNVBAoMEFF1b1ZhZGlzIExpbWl0ZWQxHzAd
BgNVBAMMFlF1b1ZhZGlzIEVWIFNTTCBJQ0EgRzMwHhcNMTgwMzI4MTQxMzQwWhcN
MjAwMzI4MTQyMzAwWjCByjETMBEGCysGAQQBgjc8AgEDEwJHQjEaMBgGA1UEDwwR
R292ZXJubWVudCBFbnRpdHkxEjAQBgNVBAUTCU1heS0xNy0wOTELMAkGA1UEBhMC
R0IxGDAWBgNVBAgMD0NpdHkgb2YgQnJpc3RvbDEQMA4GA1UEBwwHQlJJU1RPTDEe
MBwGA1UECgwVVW5pdmVyc2l0eSBvZiBCcmlzdG9sMRQwEgYDVQQLDAtJVCBTZXJ2
aWNlczEUMBIGA1UEAwwLb3NpZXIuYWMudWswggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPp1Kd9+sQGe6xmWFWqgIUdu1XKZdpOik2Ds2m8XzUxv0mQfPE
/ez5CFiY+ZozAOm4IJg0jXqTDsUImabzidaUAyIrj/mXPb9atVEPifVH5qFJm2Kg
vCzdId8lbdLirQz8voPbGNiSfAI2bZD+8dvUYvTQhOAC7ldkOIHYEUaJXcEckZGP
Nkgaw4jNmKpS3v/OAhcrqhbez7NvT/mtkk6OE57By8wtFE9OdLqZdm2EylfQllCa
8aA+6iJLNla982X3HtmJqVepxL23TGm8K6WVZl+qz7ZKwInHtxK1XuC8zk9DChpL
pm5weqPIe5T9K7HDL9qZ7rhhZaRCd6KYisJBAgMBAAGjggPpMIID5TB4BggrBgEF
BQcBAQRsMGowOQYIKwYBBQUHMAKGLWh0dHA6Ly90cnVzdC5xdW92YWRpc2dsb2Jh
bC5jb20vcXZldnNzbGczLmNydDAtBggrBgEFBQcwAYYhaHR0cDovL2V2Lm9jc3Au
cXVvdmFkaXNnbG9iYWwuY29tMB0GA1UdDgQWBBQFUYdI3dclSG4O9fkyP0TR5eGH
pTAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFOWEVNCQSZ84uvLJ4SoIxU6foEg/
MFoGA1UdIARTMFEwRgYMKwYBBAG+WAACZAECMDYwNAYIKwYBBQUHAgEWKGh0dHA6
Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tL3JlcG9zaXRvcnkwBwYFZ4EMAQEwPAYD
VR0fBDUwMzAxoC+gLYYraHR0cDovL2NybC5xdW92YWRpc2dsb2JhbC5jb20vcXZl
dnNzbGczLmNybDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIG
CCsGAQUFBwMBMFoGA1UdEQRTMFGCC29zaWVyLmFjLnVrgg93d3cub3NpZXIuYWMu
dWuCF29zaWVyLWY1LmdneS5icmlzLmFjLnVrghhpdHMtb3NpZXIuY3NlLmJyaXMu
YWMudWswggH0BgorBgEEAdZ5AgQCBIIB5ASCAeAB3gB3ALvZ37wfinG1k5Qjl6qS
e0c4V5UKq1LoGpCWZDaOHtGFAAABYmz+LxUAAAQDAEgwRgIhAIj9wQxL+aCB8E3u
d+eSkBym4uJHNhLXLjDiLiZBgJ9iAiEAhSDP9k4KlWNRRlYfV0I+TWOrc9VGDgw2
K5iLNFNqe1MAdQCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWJs
/i82AAAEAwBGMEQCIDara+efEDmigF9WfCDjSCbnAUPKeapE7H5NzdItr0hcAiA6
ZTjxN5ryllw7kbUe0QYWePzgCIGasv6nBE3CF0GWQAB1AFYUBpov18Ls0/XhvUSy
PsdGdrm8mRFcwO+UmFXWidDdAAABYmz+MLoAAAQDAEYwRAIgdqTNcaI5UOCSwp06
Ng4n0nB4CViOlNSOC7+38iDRNGMCIAhojDxzg9wDnZY+OlfMSWlbDQ2bUm0aPCKH
VJvUBlb7AHUAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFibP4x
NwAABAMARjBEAiBswSiSvG/sFREL/5azUUzT1D0gO9QF+6Bxt8LsbhKMtgIgHzA2
LLgxTaQOd+Ua7a7drPNbH+8fNMBDHdaHmiCdsDQwDQYJKoZIhvcNAQELBQADggIB
AEUyJxoKWWRq6/cO1mSg4uUZCbUcYm9yKZHtMVSIWwGwiHeqDXe+Lp9mM05+4svF
7F/H8bVGJZV7BKoSs2dztaEqsgafreVKP0cVuEAkBeb4MiEJChTcOfxq/Z9zdeqM
bF9iWWNFriV7yzX05GGuU9Gjkr8lPVyhTtTDvGC9fcdWWt6aOYVesfvfGMrDDqL8
1C7xSNMWzpAhhLHRxFUPAMcrl6uJNLeNoexsaomNqC6djK+JcfAsxaNlLE4ye3C+
6zXSkKlTVr2NP/53Q9A9AKacZdNrEhUWJC00EZwrHeHTs3PNn83RO7VXpPuz8NQq
Q46HnXDWL89RDEWlDWu7jpdn2mEV0agKCh7Lqr765sHnirwBEAki9Lks5br1I6p/
yIK8NIqsaWRJhMwZMS0qEsZ+ypIwCdVNduQ5CuqaOAC+0oUx4bmJdAw4TmT4aV5T
Ly1OQ5GV59rCGtXaBYa4EHv29JiZsq6Dp7scEPFPNRSxw927cks1iioL/qGpVRsL
bV2oeVw3EAl3AcP79hygCv1ABN4Qnthm3hB7Humg3nlFPMPQxHCYnL3tO/sCvMBx
JkfOrD4Sw08OVfB6/FiInvKEqENQJ/81JkQrvLidKsnzr4GwtedgahfDLw+NHonm
xN7vJlwF69Rf2At2h/uT5Ko+wPMF1IDJMneocxycSS7S
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6dSnffrEBnusZlhVqoC
FHbtVymXaTopNg7NpvF81Mb9JkHzxP3s+QhYmPmaMwDpuCCYNI16kw7FCJmm84nW
lAMiK4/5lz2/WrVRD4n1R+ahSZtioLws3SHfJW3S4q0M/L6D2xjYknwCNm2Q/vHb
1GL00ITgAu5XZDiB2BFGiV3BHJGRjzZIGsOIzZiqUt7/zgIXK6oW3s+zb0/5rZJO
jhOewcvMLRRPTnS6mXZthMpX0JZQmvGgPuoiSzZWvfNl9x7ZialXqcS9t0xpvCul
lWZfqs+2SsCJx7cStV7gvM5PQwoaS6ZucHqjyHuU/Suxwy/ame64YWWkQneimIrC
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270200977675202052417686461960235911935985722828
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis EV SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-28 14:13:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-28 14:23:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'May-17-09'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'City of Bristol'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BRISTOL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Bristol'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'osier.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26213839037826010313175237923964044695401292829225400751218460518181729430508385041593648337845804497396289923908847035259232877906840676325297215810166252735808703597609932803809551294092827304405920300685601609232250221678318151422282987603165636819944024648878328142108025998268967587680918245087525208262843472059439545294838853489300906380252427513012557113711961238889307220121695348344481854051168354334708884106079348893175455167196261722552996905922927946735016671439257105008951787299425117783024249359367242505414966049591073981893940450652441733946024369647298233263039803495279206534250068524427660411457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05518748ddd725486e0ef5f9323f44d1e5e187a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e58454d090499f38baf2c9e12a08c54e9fa0483f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osier.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osier.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osier-f5.ggy.bris.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'its-osier.cse.bris.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		004532271a0a59646aebf70ed664a0e2e51909b51c626f722991ed3154885b01b08877aa0d77be2e9f66334e7ee2cbc5ec5fc7f1b54625957b04aa12b36773b5a12ab2069fade54a3f4715b8402405e6f83221090a14dc39fc6afd9f7375ea8c6c5f62596345ae257bcb35f4e461ae53d1a392bf253d5ca14ed4c3bc60bd7dc7565ade9a39855eb1fbdf18cac30ea2fcd42ef148d316ce902184b1d1c4550f00c72b97ab8934b78da1ec6c6a898da82e9d8caf8971f02cc5a3652c4e327b70beeb35d290a95356bd8d3ffe7743d03d00a69c65d36b121516242d34119c2b1de1d3b373cd9fcdd13bb557a4fbb3f0d42a438e879d70d62fcf510c45a50d6bbb8e9767da6115d1a80a0a1ecbaabefae6c1e78abc01100922f4b92ce5baf523aa7fc882bc348aac69644984cc19312d2a12c67eca923009d54d76e4390aea9a3800bed28531e1b989740c384e64f8695e532f2d4e439195e7dac21ad5da0586b8107bf6f49899b2ae83a7bb1c10f14f3514b1c3ddbb724b358a2a0bfea1a9551b0b6d5da8795c3710097701c3fbf61ca00afd4004de109ed866de107b1ee9a0de79453cc3d0c470989cbded3bfb02bcc0712647ceac3e12c34f0e55f07afc58889ef284a8435027ff3526442bbcb89d2ac9f3af81b0b5e7606a17c32f0f8d1e89e6c4deef265c05ebd45fd80b7687fb93e4aa3ec0f305d480c93277a8731c9c492ed2