firm.ucop.edu

- University of California Office of the President -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 22:db:49:72:be:bc:dd:08:20:5f:c6:6d:ee:43:1b:51 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of California Office of the President

Organization: University of California Office of the President
Address: 1111 Franklin Street
Postal code: 94607
State / Province: CA
Locality: Oakland
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 22:db:49:72:be:bc:dd:08:20:5f:c6:6d:ee:43:1b:51
Serial Number (int): 46332354575648333840495633990259252049
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: b2:2d:df:65:84:7d:cd:18:be:99:6d:23:0f:51:5b:d7:3c:0d:b2:4f
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 91:36:c4:4f:76:2d:ec:8b:e8:30:5b:2e:cc:0e:0f:1f:c2:52:7a:fb
Fingerprint (sha256): 00:05:56:f5:d6:22:43:3c:e9:47:5b:4d:6d:cc:9d:f3:c2:ba:55:66:66:a7:42:39:1d:5f:87:34:35:25:03:8b

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate firm.ucop.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for firm.ucop.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

firm.ucop.edu

Other certificates including the domain name ucop.edu

(limited to 100 certificates)
firm.ucop.edu
ucars.ucop.edu
doscodes.ucop.edu
ucengage2014.ucop.edu
biprod.ucop.edu
ermd.ucop.edu
ajsqa.ucop.edu
danr.ucop.edu
climatechampions.ucop.edu
nartc.fcm.arizona.edu
ottwebapps.ucop.edu
5654831519760384-fe2.pantheonsite.io
5664902681198592-fe4.pantheonsite.io
iws-ucpath.ucop.edu
www.design-engineering.princeton.edu
ucs-ucb-prod.ucop.edu
isedev.ucop.edu
secure.ucop.edu
ucleads.ucop.edu
nxterra.ucop.edu
5737350726418432-fe4.pantheonsite.io
i9complete.ucop.edu
ajsdev.ucop.edu
5738275486564352-fe1.pantheonsite.io
www.blogs.earthjustice.org
cognos-training.ucop.edu
pts.ucop.edu
2021convention.ncte.org
its-skhalil-9.ucop.edu
webdev.colorado.edu
qa.eias.ucop.edu
virtual2.unlv.edu
5688160465977344-fe4.pantheonsite.io
qa.csg.ucop.edu
cognos-training.ucop.edu
keys.ucop.edu
accessqa.ucop.edu
vml.ucop.edu
ucop-system-notification.ucop.edu
dev.wellness.yale.edu
staging-secure.ucop.edu
ucpathmon.ucop.edu
vmp.ucop.edu
csgqa.ucop.edu
info-dev.calperformances.org
agd.nebrwesleyan.edu
timelogdev.ucop.edu
doorways.ucop.edu
dcsstage.ucop.edu
beta.ucop.edu
agd.nebrwesleyan.edu
5688160465977344-fe4.pantheonsite.io
roots.ucop.edu
5684666375864320-fe2.pantheonsite.io
nistmep.blogs.govdelivery.com
5738275486564352-fe1.pantheonsite.io
dev.embody.yale.edu
policy.ucop.edu
voip-edge.ucop.edu
siteimprove.ucop.edu
dev.wellness.yale.edu
ugappinfo.ucop.edu
uccoronc2019project.ucop.edu
*.was.devops.ucop.edu
cicsdev-ca-signed.ucop.edu
5737350726418432-fe4.pantheonsite.io
ois.ucop.edu
www.esc.rutgers.edu
safe.ucop.edu
giannini.ucop.edu
5654831519760384-fe2.pantheonsite.io
5742387179552768-fe1.pantheonsite.io
dmsuat.ucop.edu
ca-ecology.ucnrs.org
www.bodywerks-medspa.com
rsamldev.ucop.edu
sp.ucop.edu
dev.irapinfocenter.ucop.edu
5742387179552768-fe1.pantheonsite.io
ottwebapps.ucop.edu
*.negotiators-handbook.ucop.edu
sas112.ucop.edu
5738275486564352-fe1.pantheonsite.io
5737350726418432-fe4.pantheonsite.io
pts.ucop.edu
ucimmtoolkit.ucop.edu
itinnovate.ucop.edu
www.extension.ucdavis.edu
2fadmin.govdelivery.com
5742387179552768-fe1.pantheonsite.io
cl.ucop.edu
qa.rgpodonate.ucop.edu
ppsqa.ucop.edu
ugappinfo.ucop.edu
agd.nebrwesleyan.edu
5737350726418432-fe4.pantheonsite.io
5742387179552768-fe1.pantheonsite.io
5738275486564352-fe1.pantheonsite.io
5684666375864320-fe2.pantheonsite.io
applyucd.ucop.edu

Certificate

The complete raw certificate details for firm.ucop.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIQIttJcr683QggX8Zt7kMbUTANBgkqhkiG9w0BAQsFADB2
MQswCQYDVQQGEwJVUzELMAkGA1UECBMCTUkxEjAQBgNVBAcTCUFubiBBcmJvcjES
MBAGA1UEChMJSW50ZXJuZXQyMREwDwYDVQQLEwhJbkNvbW1vbjEfMB0GA1UEAxMW
SW5Db21tb24gUlNBIFNlcnZlciBDQTAeFw0xNzAxMTcwMDAwMDBaFw0yMDAxMTcy
MzU5NTlaMIGuMQswCQYDVQQGEwJVUzEOMAwGA1UEERMFOTQ2MDcxCzAJBgNVBAgT
AkNBMRAwDgYDVQQHEwdPYWtsYW5kMR0wGwYDVQQJExQxMTExIEZyYW5rbGluIFN0
cmVldDE5MDcGA1UEChMwVW5pdmVyc2l0eSBvZiBDYWxpZm9ybmlhIE9mZmljZSBv
ZiB0aGUgUHJlc2lkZW50MRYwFAYDVQQDEw1maXJtLnVjb3AuZWR1MIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln1BYxxXhfAS0FXgbY/QITuxi0sq/g7m
47uuVfMGuiw6etl0vS3ba8BmSDFMBc9lmU5yCaEwis3B28w+pMn9wa+lIrKpmwhW
cVsZBTWPy4J6aWVh13LweV8kpJFkulnDsHryLeoOKDcifzIoA4S2ErLh8LzXpYdA
T2Zl/fF4tYQGBK+g/pzhwIznZXGsm5HNplwJgYkTMSs+c8bpUVhdi+A/XCyrylGG
y/scTA0d0d6jFbMLNL7Hjjve1838zZiCTywkYMsk2kvRQFH1FiZY8kmC3Fz1zt6u
n7xklGIHCvrug5ufV3eQUndTb7Z9DIWgllotkV3NIHkwhRjsa/wHfwIDAQABo4IB
wTCCAb0wHwYDVR0jBBgwFoAUHgWjd49sluJbh0umtIascQAM5zgwHQYDVR0OBBYE
FLIt32WEfc0YvpltIw9RW9c8DbJPMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8E
AjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBnBgNVHSAEYDBeMFIG
DCsGAQQBriMBBAMBATBCMEAGCCsGAQUFBwIBFjRodHRwczovL3d3dy5pbmNvbW1v
bi5vcmcvY2VydC9yZXBvc2l0b3J5L2Nwc19zc2wucGRmMAgGBmeBDAECAjBEBgNV
HR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLmluY29tbW9uLXJzYS5vcmcvSW5Db21t
b25SU0FTZXJ2ZXJDQS5jcmwwdQYIKwYBBQUHAQEEaTBnMD4GCCsGAQUFBzAChjJo
dHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vSW5Db21tb25SU0FTZXJ2ZXJDQV8yLmNy
dDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTAYBgNVHREE
ETAPgg1maXJtLnVjb3AuZWR1MA0GCSqGSIb3DQEBCwUAA4IBAQCQ0xrJO2Er4x/g
kAe+5+qYSFA+TBvHqsj8dIqxVi2dQNt2eez/FZiFUGQaZkrFMI8HKWKGrnIe4aG5
MFH1mP7PrOoAWfwixpXHoqx5cfX4zCtgnhuSsuK0ZYye73W+ycGp0a5Aroax8hlQ
3n9NEeHVoJ2RDCajpu8DZkQcUJv79zBkGwcpfQQJeXvXV+3LioAXAqSYXdYKaRn6
wVfZ6+Y3OXOkujJ3luwSt6lr1C8KCyVgPh3s/M9xH8KHPAzaNDXyPwzSE0UEYdSD
86N1P7Yj282YnFFKLxb1Xj+dpUYOrQ23qZhE6mRpWb8pmpwM+3DddCpDDI/wcTjN
xldVBQ2k
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln1BYxxXhfAS0FXgbY/Q
ITuxi0sq/g7m47uuVfMGuiw6etl0vS3ba8BmSDFMBc9lmU5yCaEwis3B28w+pMn9
wa+lIrKpmwhWcVsZBTWPy4J6aWVh13LweV8kpJFkulnDsHryLeoOKDcifzIoA4S2
ErLh8LzXpYdAT2Zl/fF4tYQGBK+g/pzhwIznZXGsm5HNplwJgYkTMSs+c8bpUVhd
i+A/XCyrylGGy/scTA0d0d6jFbMLNL7Hjjve1838zZiCTywkYMsk2kvRQFH1FiZY
8kmC3Fz1zt6un7xklGIHCvrug5ufV3eQUndTb7Z9DIWgllotkV3NIHkwhRjsa/wH
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 46332354575648333840495633990259252049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '94607'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oakland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1111 Franklin Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of California Office of the President'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'firm.ucop.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18997511493841434172547030691819379798875267811447630308003405597503945014901190131773300783323140804972813019025829510932247495714316154739315200129522350455784551497132918695894173615373803364833206159637429024880645928488699326143768208877286094435651082427214255370702660384368922977731639608228297072142746364389651610565548809357471239362139141350909880540570724095399508685958094525148651481856131243620416882847789646293150778786058338945787677113148291613564762055459569796342477471004787231678455168571053365450713027280085356701294289111879702266021802037228176972594911581216958902054848861738508173969279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b22ddf65847dcd18be996d230f515bd73c0db24f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firm.ucop.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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