webapps.sfsu.edu

- San Francisco State University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 0e:3f:a5:99:6d:23:98:b6:f1:b3:e3:d4:73:03:ca:13 was issued on by Internet2.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

San Francisco State University

Organization: San Francisco State University
Organization unit: Information Technology Services
Address: 1600 Holloway Avenue
Postal code: 94132
State / Province: CA
Locality: San Francisco
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:3f:a5:99:6d:23:98:b6:f1:b3:e3:d4:73:03:ca:13
Serial Number (int): 18939665396346883217956780020253051411
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3b:02:f5:84:b6:73:bc:b4:90:f6:93:7a:d3:13:ef:ef:e2:92:90:b6
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): a5:fc:a3:7e:4e:1b:60:5c:71:f6:d2:1f:5f:8d:72:4e:37:2d:07:0a
Fingerprint (sha256): 00:27:91:fb:55:5d:8c:46:34:ce:cc:aa:57:5e:6f:c6:cf:2e:a2:79:e7:5f:3a:f2:11:38:0e:3a:cf:8d:68:23

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate webapps.sfsu.edu

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webapps.sfsu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webapps.sfsu.edu
webapps.ops.sfsu.edu
webapps01.ops.sfsu.edu
webapps02.ops.sfsu.edu

Other certificates including the domain name sfsu.edu

(limited to 100 certificates)
5638059940904960-fe3.pantheonsite.io
5712793714032640-fe1.pantheonsite.io
5653294995210240-fe3.pantheonsite.io
webapps.sfsu.edu
5769623379116032-fe2.pantheonsite.io
5693048138760192-fe2.pantheonsite.io
5658044692168704-fe3.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
5638059940904960-fe3.pantheonsite.io
counseling.sfsu.edu
5675573259010048-fe3.pantheonsite.io
budget.sfsu.edu
it.uahs.arizona.edu
sfsu.edu
5698125863845888-fe3.pantheonsite.io
5689792285114368-fe2.pantheonsite.io
5712272949248000-fe3.pantheonsite.io
5702351037923328-fe2.pantheonsite.io
5733679603122176-fe4.pantheonsite.io
5727217287954432-fe1.pantheonsite.io
5638059940904960-fe3.pantheonsite.io
5693048138760192-fe2.pantheonsite.io
5638916786880512-fe1.pantheonsite.io
fawebp.sfsu.edu
5691420614590464-fe3.pantheonsite.io
5709068098338816-fe3.pantheonsite.io
nartc.fcm.arizona.edu
5752142325350400-fe1.pantheonsite.io
5730602795925504-fe1.pantheonsite.io
5730774057746432-fe4.pantheonsite.io
5763210187636736-fe2.pantheonsite.io
5700866052980736-fe2.pantheonsite.io
5752142325350400-fe1.pantheonsite.io
5658962204557312-fe4.pantheonsite.io
5736907271045120-fe1.pantheonsite.io
5763210187636736-fe2.pantheonsite.io
5659822271758336-fe3.pantheonsite.io
www.sfsu.edu
5650082896543744-fe3.pantheonsite.io
5769623379116032-fe2.pantheonsite.io
5689792285114368-fe2.pantheonsite.io
site-staging.sfsu.edu
5736907271045120-fe1.pantheonsite.io
5709068098338816-fe3.pantheonsite.io
5731346630574080-fe3.pantheonsite.io
5767409591910400-fe4.pantheonsite.io
5728757302165504-fe2.pantheonsite.io
intranet.chss.sfsu.edu
5751399832879104-fe1.pantheonsite.io
5673309542809600-fe1.pantheonsite.io
facilities.sfsu.edu
5673309542809600-fe1.pantheonsite.io
5650082896543744-fe3.pantheonsite.io
bidal.sfsu.edu
5630239073894400-fe2.pantheonsite.io
5639026912526336-fe4.pantheonsite.io
dart.sfsu.edu
5727517264576512-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5767409591910400-fe4.pantheonsite.io
5727217287954432-fe1.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
5675052494225408-fe2.pantheonsite.io
citeak.multidevcom.uaf.edu
5639026912526336-fe4.pantheonsite.io
5728757302165504-fe2.pantheonsite.io
www.design-engineering.princeton.edu
coursestream.sfsu.edu
web.sfsu.edu
5675573259010048-fe3.pantheonsite.io
5714163003293696-fe1.pantheonsite.io
website-staging.sfsu.edu
nxterra.ucop.edu
5672889575538688-fe1.pantheonsite.io
5709068098338816-fe3.pantheonsite.io
5639026912526336-fe4.pantheonsite.io
5653294995210240-fe3.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5666823336886272-fe4.pantheonsite.io
baypass.sfsu.edu
5754903989321728-fe2.pantheonsite.io
5660765553950720-fe1.pantheonsite.io
5714163003293696-fe1.pantheonsite.io
5754903989321728-fe2.pantheonsite.io
5714163003293696-fe1.pantheonsite.io
creativewriting.sfsu.edu
5712453606309888-fe4.pantheonsite.io
5658044692168704-fe3.pantheonsite.io
5650082896543744-fe3.pantheonsite.io
5754079087165440-fe4.pantheonsite.io
5675573259010048-fe3.pantheonsite.io
5702351037923328-fe2.pantheonsite.io
www.hcii.cs.cmu.edu
chns120.courseresource.yale.edu
oip.sfsu.edu
5696605713858560-fe4.pantheonsite.io
5673309542809600-fe1.pantheonsite.io
5696459148099584-fe4.pantheonsite.io

Certificate

The complete raw certificate details for webapps.sfsu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSrxnq2T3OE+tXvmlmzY
3mWZHXtkDWEBDGAWhe67b8FpBi1gItONe/vlAnJwFNaVxM9XkTtqFvfWALFkNLIt
d84FfHj6ERnDYXX8Cre5Xu6R9ZGeALruSmC2lf4IOZlwVMe7J7lXjQzxsa1DxG+W
mOLLonhRGjG3ZxoUXUDqJh0IfRrU3IoXK36N8HRn41ubROM4NFG7BOYDjpoX7qG/
AmQjQQ6PsQsw+sIWwyYe0UcaNHLQftmPVdxdj5rRmPQOoYjJ6BL28Keq6Vy+lUAm
GoVAYGNi0uqBSOauuXu6ef6+UqT63VXVGuZc2sUu6547GjHeJiqpDo1mQeTOHLrb
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18939665396346883217956780020253051411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '94132'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1600 Holloway Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webapps.sfsu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20345543490123030660242587725563966389356786747343017805926045424482179520372656692227922830358528402093846358795825936028980277101790292062752775559154023203952417559858985516835351109420023366453323091910174921304321776858953777709533249884682506305337615854931353929253046875447452551341735613347149311954470404339087165849971791702549490484417942510906853906632192403775286329017000224425367647853537203534189733697984208359560151423116190113644114803545809786966036041558417407393448094171011304139830884308378616553612590727569194628748843131229165471163228253877818406182484187542257455629896676166496897653753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b02f584b673bcb490f6937ad313efefe29290b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapps.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapps.ops.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapps01.ops.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapps02.ops.sfsu.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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