mail.nilgosc.org.uk

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number a5:52:0e:9a:ed:57:3a:24 was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.nilgosc.org.uk,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a5:52:0e:9a:ed:57:3a:24
Serial Number (int): 11912600022918052388
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 3b:54:3c:80:94:14:55:02:66:ab:54:2b:51:0d:1d:52:68:18:79:f4
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): cd:5d:ff:45:22:41:1c:35:1a:90:0f:ff:ab:21:c9:8d:e9:1f:3c:02
Fingerprint (sha256): 9e:0c:26:41:01:c7:fd:e8:3f:62:51:d6:1b:c4:38:ee:7c:d1:7d:25:28:e2:ad:a1:49:e0:be:ed:62:78:e8:0b

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-248.crl

Check the revocation status for certificate mail.nilgosc.org.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.nilgosc.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.nilgosc.org.uk
www.mail.nilgosc.org.uk

Other certificates including the domain name nilgosc.org.uk

(limited to 100 certificates)
www.nilgosc.org.uk
*.nilgosc.org.uk
mail.nilgosc.org.uk
ithelp.visionrt.com
servicedesk.hermesairports.com
helpdesk.kleen-tex.eu
itdesk.mkspamp.com
support.erm.com
it.littlegarth.org
helpdesk.kleen-tex.eu
support.erm.com
servicedesk.danbred.com
ithelpdesk.farnboroughairport.com
ithelp.visionrt.com
helpdesk.troax.com
www.nilgosc.org.uk
employer.nilgosc.org.uk
ithelpdesk.farnboroughairport.com
soporte.llorenteycuenca.com
nilgosc.org.uk
ithelpdesk.farnboroughairport.com
*.nilgosc.org.uk
support.erm.com
servicedesk.hermesairports.com
servicedesk.hermesairports.com
ithelpdesk.farnboroughairport.com
helpdesk.fast.eu
helpdesk.kleen-tex.eu
it.littlegarth.org
employer.nilgosc.org.uk
ithelpdesk.farnboroughairport.com
it.littlegarth.org
servicedesk.nilgosc.org.uk
employer.nilgosc.org.uk
soporte.llorenteycuenca.com
*.nilgosc.org.uk
servicedesk.hermesairports.com
servicedesk.hermesairports.com
nilgosc.org.uk
helpdesk.criticaltechworks.com
soporte.llorenteycuenca.com
mail.nilgosc.org.uk
itdesk.mkspamp.com
servicedesk.hermesairports.com
mail.nilgosc.org.uk
support.erm.com
support.jjhousing.co.uk
ithelpdesk.holmes-hills.co.uk
servicedesk.nilgosc.org.uk
ithelpdesk.farnboroughairport.com
ithelpdesk.farnboroughairport.com
servicedesk.groupe-r.ch
ithelpdesk.farnboroughairport.com
servicedesk.hermesairports.com
helpdesk.troax.com
itsupport.alphaplusgroup.co.uk
nilgosc.org.uk
helpdesk.troax.com
helpdesk.troax.com
helpdesk.fsbtech.com
soporte.llorenteycuenca.com
servicedesk.hermesairports.com
helpdesk.fast.eu
itdesk.mkspamp.com
ithelpdesk.holmes-hills.co.uk
nilgosc.org.uk
*.nilgosc.org.uk
servicedesk.hermesairports.com
helpdesk.kleen-tex.eu
employer.nilgosc.org.uk
employer.nilgosc.org.uk
nilgosc.org.uk
servicedesk.hermesairports.com
ithelpdesk.farnboroughairport.com
it.littlegarth.org
servicedesk.hermesairports.com
ithelpdesk.holmes-hills.co.uk

Certificate

The complete raw certificate details for mail.nilgosc.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIJAKVSDprtVzokMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD
VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa
MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0
cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj
dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTE2MDYwNjExMjgzOFoX
DTE5MDYwNjExMjgzOFowQTEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRh
dGVkMRwwGgYDVQQDExNtYWlsLm5pbGdvc2Mub3JnLnVrMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEA0jK6Ikr/AX/VnPYoVn/o4fvacaYsiQFiDd0NED07
HBgiYCFus4q1Ts8mIOwBA2iCiWuNVLzq2152/6LXKvb9QOIGBv83pB674cFtAPsH
TEVOWvJBVnYICnKcwjvft5IhANYZ+GS9mWLnwPxMXQW2/ENCGcIC77kn9cVBhpLG
6CRUpH6VYC4VKx55GFfRyqRfb8fFOMsJ6iOVcSJHOFN+ifnNzf75E32ivo0/2dmS
JlBbET9/XcLHvbf1+MNUJddvjH/zZlzHpYkS9j1l8KRtIzdL731lU+qww2lA8KTh
I68rp8NaPu8z9GrenPF4lF21veg36CKQXBY20b7DahwFKQIDAQABo4IByjCCAcYw
DAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDgYD
VR0PAQH/BAQDAgWgMDcGA1UdHwQwMC4wLKAqoCiGJmh0dHA6Ly9jcmwuZ29kYWRk
eS5jb20vZ2RpZzJzMS0yNDguY3JsMF0GA1UdIARWMFQwSAYLYIZIAYb9bQEHFwEw
OTA3BggrBgEFBQcCARYraHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9y
ZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYIKwYBBQUHAQEEajBoMCQGCCsGAQUFBzAB
hhhodHRwOi8vb2NzcC5nb2RhZGR5LmNvbS8wQAYIKwYBBQUHMAKGNGh0dHA6Ly9j
ZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS9nZGlnMi5jcnQwHwYD
VR0jBBgwFoAUQMK9J47MNIMwojPX+2yz8LQsgM4wNwYDVR0RBDAwLoITbWFpbC5u
aWxnb3NjLm9yZy51a4IXd3d3Lm1haWwubmlsZ29zYy5vcmcudWswHQYDVR0OBBYE
FDtUPICUFFUCZqtUK1ENHVJoGHn0MA0GCSqGSIb3DQEBCwUAA4IBAQAQF0a5/qxR
lMjyFAQDuZJ5m9dYoIy1XO5WuPixl/R2c5AOX1GSPPU8t/IFHpP/BRRoVVb1XtuA
Aij8zDTyawJfvo9iqm18k+JJ+sXZOVX1+fuIjmXvFFoOTGCuU38qqzUXlIBPALRo
ynP1BYDeD1ReQ8ptZ7xRXdVQORooCJGgn3wXqIH35Jp4l7kZ1DGkyNliOC7A38ib
iKWnYljmJWuXgGV42dohMPmwj4i6AAHmDQMPM4jrskcwHMdV4SRWhh2SajjsuJvP
9ksPqmQkKLoVrSGwn7Ozvjq6urJO4ivEmkzDWDb/+UeW4yRlnh06LGmreqhikbGR
LlKHJqlqmsWO
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jK6Ikr/AX/VnPYoVn/o
4fvacaYsiQFiDd0NED07HBgiYCFus4q1Ts8mIOwBA2iCiWuNVLzq2152/6LXKvb9
QOIGBv83pB674cFtAPsHTEVOWvJBVnYICnKcwjvft5IhANYZ+GS9mWLnwPxMXQW2
/ENCGcIC77kn9cVBhpLG6CRUpH6VYC4VKx55GFfRyqRfb8fFOMsJ6iOVcSJHOFN+
ifnNzf75E32ivo0/2dmSJlBbET9/XcLHvbf1+MNUJddvjH/zZlzHpYkS9j1l8KRt
IzdL731lU+qww2lA8KThI68rp8NaPu8z9GrenPF4lF21veg36CKQXBY20b7DahwF
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11912600022918052388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-06 11:28:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-06 11:28:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.nilgosc.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26535058501166605572068816214047002434676541658211220703967999964429646256390843495770499185218832525058275274153596755573001535366550070138345507925637857600711904393199902355174956718733106811995933444560896146713575931530482056392438360734097864875606490185522695108293595536097333494073702630636614149603296635928105062516358900957672598116099901327058319609625032103549434165631910414641034303712206402492901956307984506184384522946413982474946088748155464716697018843371773485051858858790658720377477049047239072434986757955709700250605381306262893029643640751533139441986805172899085769992924006230812809495849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-248.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nilgosc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mail.nilgosc.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b543c809414550266ab542b510d1d52681879f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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