keystone.it.gwu.edu

- The George Washington University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number c4:54:df:e8:c3:a4:7e:42:f0:77:e9:72:e9:bb:24:9f was issued on by Internet2.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The George Washington University

Organization: The George Washington University
Organization unit: Systems Engineering Services
Address: 44983 Knoll Square
Postal code: 20147
State / Province: VA
Locality: Ashburn
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c4:54:df:e8:c3:a4:7e:42:f0:77:e9:72:e9:bb:24:9f
Serial Number (int): 260969381528784191244342220243034907807
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: bd:66:fa:f5:4f:d5:53:9d:a8:3d:84:2b:90:57:31:44:c8:2c:43:ce
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 25:1e:27:24:34:fa:af:c7:30:c9:f5:99:6f:5e:29:fc:0c:f5:79:ed
Fingerprint (sha256): 00:15:6b:47:86:7c:4e:e9:1c:81:73:91:8f:27:51:1e:92:73:df:f8:98:be:83:06:b9:4a:6e:e1:cf:7a:da:18

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate keystone.it.gwu.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for keystone.it.gwu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

keystone.it.gwu.edu
dit-keystfb-p01.ead.gwu.edu

Other certificates including the domain name gwu.edu

(limited to 100 certificates)
keystone.it.gwu.edu
webrequest.gwu.edu
progressreport.publichealth.gwu.edu
it.uahs.arizona.edu
secure.mdl.io
fb-webexhybrid-c.uc.gwu.edu
identity.gwu.edu
5679413765079040-fe4.pantheonsite.io
linc.seas.gwu.edu
sni.cloudflaressl.com
assets.library.gwu.edu
secure.mdl.io
guides.himmelfarb.gwu.edu
uconnectlabs.com
banweb.gwu.edu
ode.hr.gwu.edu
sonxr1.erp.gwu.edu
hcsi.seas.gwu.edu
ipcc.seas.gwu.edu
www.design-engineering.princeton.edu
uconnectlabs.com
bigdata.seas.gwu.edu
5650817738604544-fe4.pantheonsite.io
5649202965118976-fe1.pantheonsite.io
biostatcenter.gwu.edu
www.hcii.cs.cmu.edu
dataprograms.gwu.edu
landing.healthsciencesprograms.online.gwu.edu
securetransfer.gwu.edu
208.lsnc.net
sni.cloudflaressl.com
www.blogs.earthjustice.org
useastucc5.acquia.com
hsrc.himmelfarb.gwu.edu
hsrc.himmelfarb.gwu.edu
careerconnect.gwu.edu
alumnifamiliesweekend.gwu.edu
healthsciencesprograms.online.gwu.edu
linc.seas.gwu.edu
hermes.gwu.edu
webdev.colorado.edu
virtual2.unlv.edu
dar.connect.gwu.edu
*.mfa.gwu.edu
sa.gwu.edu
ieres.elliott.gwu.edu
getinfo.gspm.gwu.edu
tftcav.seas.gwu.edu
natsecuritymedia.gwu.edu
test-admin.gworld.gwu.edu
jacob.law.gwu.edu
*.publichealthonline.gwu.edu
5679413765079040-fe4.pantheonsite.io
servicedesk.kerrylogistics.com
efc.gwu.edu
uconnectlabs.com
servicedesk.kerrylogistics.com
scholarship.law.gwu.edu
dit-sebmsfb-p01.ead.gwu.edu
scholarship.law.gwu.edu
hub.meed.com
amer-san1.blackboard.com
208.lsnc.net
uconnectlabs.com
www.cspri.seas.gwu.edu
webrequest.gwu.edu
services.gworld.gwu.edu
archivesspace.library.gwu.edu
dev.wellness.yale.edu
5679413765079040-fe4.pantheonsite.io
onlineemse.seas.gwu.edu
oak.itl.gwu.edu
uconnectlabs.com
els.at.gwu.edu
sni.cloudflaressl.com
5650817738604544-fe4.pantheonsite.io
*.mfa.gwu.edu
sa.gwu.edu
dnp2019.columbian.gwu.edu
live.ucdavis.edu
info-dev.calperformances.org
*.publichealthonline.gwu.edu
bmeday.seas.gwu.edu
secure.mdl.io
sorger.seas.gwu.edu
www.cesun2016.seas.gwu.edu
good.gsm.cornell.edu
fb-webexhybrid-c.uc.gwu.edu
hpcat.seas.gwu.edu
business.gwu.edu
eagle.phys.gwu.edu
scom.it.gwu.edu
uwspoctmct1.es.gwu.edu
kbox.seas.gwu.edu
hermes.gwu.edu
landing.gsehd.gwu.edu
servicedesk.kerrylogistics.com
*.elliott.gwu.edu
gwoffice.it.gwu.edu
liberalarts.ss.pacific.edu

Certificate

The complete raw certificate details for keystone.it.gwu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JVpxlGAFLCDzb8XpNOK
RN6Lr0/Qp33ZmyZuQX+v3W59XtZ0t9AanOV55NTipZfw0Bq+1RcHJ6OxdHlOBUmZ
YKmsnaU5ooQAitQtpZqFE2VOlAMGqf/v+d4gieI+eRZKMCGvjSWpO/fNNQ3YL9cL
viMVIavJw32xWCGht3FTla0dmZCokjabdvkqnEp1OR9W//JeOjoLWbI4FNtJbWKD
UtdQEB4dHBI37j1NBAac5mNHGVExItVshqbOWDbEV1T/NyZlf21PYt2jYRQndcaQ
dXRQ2uEMsrpKRofRwpzk/67DbYSl6EJvE5dQ3O1T24OUFOOnnZQ8B01FK36ph+YP
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 260969381528784191244342220243034907807
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '20147'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ashburn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '44983 Knoll Square'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The George Washington University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Systems Engineering Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'keystone.it.gwu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29865918358236710471887615189681930214439166951271462039734460067913398172504372908161542553684397962034874834711556057652839293143742194137239946531149177543221344370443768137764123027191050854445207705038350583339621415572161044244972079863738064223560505451452661506194217937943448776247473715607551160292607234240094342362680311881022019698655624241709766812462503037454927456932856047810849815753641569002677508852575564557595219321196174876054258709073207371662930896649901888232971146810884043615001665318451903184618895521976629371749305056553498036557586985702503337231751085669803425161020441722990476267323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd66faf54fd5539da83d842b90573144c82c43ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keystone.it.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dit-keystfb-p01.ead.gwu.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003f52298663cc0c61d768effe5f31c2da5a087b002f41dd0687dbb67ee0352a5ead0cc698a23fdfc2bd698ee3d8c0fb7b24cf77fd97bb949e1dc5a4b229414c457caa76b1c72a9736acc5e9982b26231fb93ab7802f25f610c5dfed55d972f3035a2f2a288cad1d0ca17f02ed05e077f56aaab5f30b42b65abe8b2e374533b1be24a8232f4d319fe2cc89d3ee3d2e49948fe2e11c5fc3d19cad4726f189ba3b5d2dacd94a0f18e5d33bb9002b48230b2511df4bd4988f86fa614fa74d5576174e2fe20bf38a1b621c5c7659a2ccc6d8e00e4e9bc468895f2ca5ccec768538e897886928e677da277d25730188f0e429f4c761aed45d3a79e45c0feaee3034cbc5