his-752y.hosp.med.umich.edu

- University of Michigan -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 04:d8:52:d8:4f:a0:ec:fb:63:e5:4b:01:83:71:1c:ee was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Michigan

Organization: University of Michigan
Organization unit: Medical Center Information Technology
Address: 530 S. State St.
Postal code: 48109
State / Province: MI
Locality: Ann Arbor
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d8:52:d8:4f:a0:ec:fb:63:e5:4b:01:83:71:1c:ee
Serial Number (int): 6440128400097651800295062212204109038
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 7b:0d:84:c5:9c:55:89:4a:6c:db:56:8a:8a:bc:8a:2e:c0:a7:e7:aa
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 7c:d2:c7:7a:b8:42:b6:2d:a0:0a:8f:f1:9c:a6:59:2e:2c:d9:dc:ee
Fingerprint (sha256): 00:24:54:da:cc:18:04:83:83:33:17:46:fd:bc:ac:ca:89:75:28:2c:c6:ea:d7:d3:e1:62:b0:c5:5d:b0:d5:7d

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate his-752y.hosp.med.umich.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for his-752y.hosp.med.umich.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

his-752y.hosp.med.umich.edu

Other certificates including the domain name umich.edu

(limited to 100 certificates)
pconway.people.si.umich.edu
5708235679989760-fe2.pantheonsite.io
his-364y.hosp.med.umich.edu
*.pathology.med.umich.edu
clips.vpcomm.umich.edu
jealexa.people.si.umich.edu
cshl.engin.umich.edu
charvat.people.si.umich.edu
his-351t.hosp.med.umich.edu
staging.wdi.bus.umich.edu
ephraims.people.si.umich.edu
exchange.umich.edu
exp-e3-ext.med.umich.edu
paulscot.people.si.umich.edu
prodremedy.med.umich.edu
msnyd.people.si.umich.edu
uofmjosh.people.si.umich.edu
ppethick.people.si.umich.edu
clinicaltrials.med.umich.edu
margauxk.people.si.umich.edu
www.umms.med.umich.edu
its-thistle.adsroot.itcs.umich.edu
his-752y.hosp.med.umich.edu
keunhou.people.si.umich.edu
grip.umich.edu
carpepm.almonds.com
vidyo3.umms.med.umich.edu
remotesupport-qa.it.umich.edu
drgage.people.si.umich.edu
dkimme.people.si.umich.edu
accounts.itcs.umich.edu
sitemaker.umich.edu
gtabach.people.si.umich.edu
his-788y.hosp.med.umich.edu
maggiel.people.si.umich.edu
kencald.people.si.umich.edu
seas.umich.edu
message.umich.edu
joshilyn.people.si.umich.edu
mcneilgroup.chem.lsa.umich.edu
mjcantle.people.si.umich.edu
kunsingh.people.si.umich.edu
kafedewa.people.si.umich.edu
yuchengh.people.si.umich.edu
it.umich.edu
haoyoliu.people.si.umich.edu
fentonic.people.si.umich.edu
his-374x.hosp.med.umich.edu
quant.sites.uofmhosting.net
earnestw.people.si.umich.edu
anjshah.people.si.umich.edu
chowcy.people.si.umich.edu
chollad.people.si.umich.edu
swborders.sites.uofmhosting.net
alicla.people.si.umich.edu
5708235679989760-fe2.pantheonsite.io
jobs.alumni.umich.edu
jpasche.people.si.umich.edu
quadrangle.law.umich.edu
mibytes.eecs.umich.edu
bssp.sites.uofmhosting.net
bmes.bme.umich.edu
nabgilby.people.si.umich.edu
www-a1.lsa.umich.edu
yunchang.people.si.umich.edu
tle.soe.umich.edu
veenap.people.si.umich.edu
mottgolf.sites.uofmhosting.net
kessen.people.si.umich.edu
api-esb.it.umich.edu
uprint.umd.umich.edu
crtye.people.si.umich.edu
hsseo.people.si.umich.edu
mlearningreports.med.umich.edu
eecs494-server-b.eecs.umich.edu
jjstant.people.si.umich.edu
bthoma.people.si.umich.edu
abudziak.people.si.umich.edu
msis.med.umich.edu
phzhao.people.si.umich.edu
umchina.umich.edu
5708235679989760-fe2.pantheonsite.io
wgluc.people.si.umich.edu
cluster3.technolutions.net
clasp-research.engin.umich.edu
cryoem.lsi.umich.edu
yckuo.people.si.umich.edu
mobley.lab.medicine.umich.edu
lila.rad.med.umich.edu
cjburwe.people.si.umich.edu
pratapak.people.si.umich.edu
campaign.law.umich.edu
chhecht.people.si.umich.edu
prt-819y.prt.med.umich.edu
shihyi.people.si.umich.edu
chirayil.people.si.umich.edu
ericroth.people.si.umich.edu
studentemployment.umich.edu
psgt.earth.lsa.umich.edu
desigosys2.med.umich.edu

Certificate

The complete raw certificate details for his-752y.hosp.med.umich.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLgZeHs5ncp/jpIeMgij
jYh0e1GLEGFFqlggfM1VqMdHDdL08f5tV2/LKKi5zqb0vmjG4T+FM7b9ZACpa8xF
h/RY9vyg5vQKaMPl4vSvg4e0DbHbv32nt7qu3vED4dRYd/nUAS9JFvL8Z25jisPc
ia9S4NgIH0ZUnLKj+2mboVANnTjkMO1RqjUVd3JRQMpy2WNrcL9/4PtX8wKp5Udg
dkD5NeL25EXpckOXavS7Gy6VktYNDx/7VFDSBQAgfgBJNNhqKFLpuy1WRFppfOe5
ttpzW2XkP72+Q6422HACFQzNnh+dIrk5hiJa8rB+sEbMQPgN9xUQgcL8ESlI2eiu
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6440128400097651800295062212204109038
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '48109'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '530 S. State St.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Medical Center Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'his-752y.hosp.med.umich.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23823584177953620728712779471400976763054215451152720221282160174651687958088953611747709796334530391718848089186993503746734880277044289753699771814333569185111615437324294786610328731337353260394904305633233935253970642813710063632182225297202970627556219267036768861503351115332074188831899231391416597362186694657755193965524539082629448182667018044288009158754790486466649290927404882352305434508464293427254869670154569752349358985944661793607865544813649467364985927654970406470294996157600093947644691184932200984340099154522964988221976098224117962261799830630552794770672922419432692064303460484972840267473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b0d84c59c55894a6cdb568a8abc8a2ec0a7e7aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'his-752y.hosp.med.umich.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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