remotesupport-qa.it.umich.edu

- University of Michigan -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number db:12:f1:38:fd:c7:76:e4:22:82:6c:55:ad:86:af:12 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Michigan

Organization: University of Michigan
Organization unit: Information Technology Services
Address: 4251 Plymouth Rd
Postal code: 48105-3640
State / Province: MI
Locality: Ann Arbor
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): db:12:f1:38:fd:c7:76:e4:22:82:6c:55:ad:86:af:12
Serial Number (int): 291199284996382629085115281737892933394
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 57:ba:3c:9e:26:c8:68:00:65:3b:36:8a:6a:3c:69:0f:89:6e:37:1b
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): b9:35:d1:f6:f5:36:27:53:dc:8a:69:70:75:30:af:16:52:e9:24:8c
Fingerprint (sha256): 00:2f:71:d3:58:30:0f:19:c6:02:81:b7:80:f5:7a:7c:0d:e4:f8:62:b1:ed:79:e2:88:fe:ca:d7:1a:d4:31:22

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate remotesupport-qa.it.umich.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for remotesupport-qa.it.umich.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

remotesupport-qa.it.umich.edu

Other certificates including the domain name umich.edu

(limited to 100 certificates)
pconway.people.si.umich.edu
5708235679989760-fe2.pantheonsite.io
his-364y.hosp.med.umich.edu
*.pathology.med.umich.edu
clips.vpcomm.umich.edu
jealexa.people.si.umich.edu
cshl.engin.umich.edu
charvat.people.si.umich.edu
his-351t.hosp.med.umich.edu
staging.wdi.bus.umich.edu
ephraims.people.si.umich.edu
exchange.umich.edu
exp-e3-ext.med.umich.edu
paulscot.people.si.umich.edu
prodremedy.med.umich.edu
msnyd.people.si.umich.edu
uofmjosh.people.si.umich.edu
ppethick.people.si.umich.edu
clinicaltrials.med.umich.edu
margauxk.people.si.umich.edu
www.umms.med.umich.edu
its-thistle.adsroot.itcs.umich.edu
his-752y.hosp.med.umich.edu
keunhou.people.si.umich.edu
grip.umich.edu
carpepm.almonds.com
vidyo3.umms.med.umich.edu
remotesupport-qa.it.umich.edu
drgage.people.si.umich.edu
dkimme.people.si.umich.edu
accounts.itcs.umich.edu
sitemaker.umich.edu
gtabach.people.si.umich.edu
his-788y.hosp.med.umich.edu
maggiel.people.si.umich.edu
kencald.people.si.umich.edu
seas.umich.edu
message.umich.edu
joshilyn.people.si.umich.edu
mcneilgroup.chem.lsa.umich.edu
mjcantle.people.si.umich.edu
kunsingh.people.si.umich.edu
kafedewa.people.si.umich.edu
yuchengh.people.si.umich.edu
it.umich.edu
haoyoliu.people.si.umich.edu
fentonic.people.si.umich.edu
his-374x.hosp.med.umich.edu
quant.sites.uofmhosting.net
earnestw.people.si.umich.edu
anjshah.people.si.umich.edu
chowcy.people.si.umich.edu
chollad.people.si.umich.edu
swborders.sites.uofmhosting.net
alicla.people.si.umich.edu
5708235679989760-fe2.pantheonsite.io
jobs.alumni.umich.edu
jpasche.people.si.umich.edu
quadrangle.law.umich.edu
mibytes.eecs.umich.edu
bssp.sites.uofmhosting.net
bmes.bme.umich.edu
nabgilby.people.si.umich.edu
www-a1.lsa.umich.edu
yunchang.people.si.umich.edu
tle.soe.umich.edu
veenap.people.si.umich.edu
mottgolf.sites.uofmhosting.net
kessen.people.si.umich.edu
api-esb.it.umich.edu
uprint.umd.umich.edu
crtye.people.si.umich.edu
hsseo.people.si.umich.edu
mlearningreports.med.umich.edu
eecs494-server-b.eecs.umich.edu
jjstant.people.si.umich.edu
bthoma.people.si.umich.edu
abudziak.people.si.umich.edu
msis.med.umich.edu
phzhao.people.si.umich.edu
umchina.umich.edu
5708235679989760-fe2.pantheonsite.io
wgluc.people.si.umich.edu
cluster3.technolutions.net
clasp-research.engin.umich.edu
cryoem.lsi.umich.edu
yckuo.people.si.umich.edu
mobley.lab.medicine.umich.edu
lila.rad.med.umich.edu
cjburwe.people.si.umich.edu
pratapak.people.si.umich.edu
campaign.law.umich.edu
chhecht.people.si.umich.edu
prt-819y.prt.med.umich.edu
shihyi.people.si.umich.edu
chirayil.people.si.umich.edu
ericroth.people.si.umich.edu
studentemployment.umich.edu
psgt.earth.lsa.umich.edu
desigosys2.med.umich.edu

Certificate

The complete raw certificate details for remotesupport-qa.it.umich.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkTariFAvgwrHVuQRjv6
hNEBetTgw3lY4Rl6nk7kS/d4oCj9byrkBPEQ32BhPwqj3PEfq7qRViLf7rPgT9kQ
eBgq473WHiw+EKDyxoI+cMbnWrRj1bZcTBc16ooI3D+rYryk+hdmQw+K1egnBoTo
2kCX5IOwhAoFIOBGhVpdT3w6xM+Rb6ZwPmE8nXAUEF1hZXotW1WKTZbAULl5a4sZ
AXm62xFTWXTvabMkdkIX/XV95RNwSfu/CUfT96pRaOxbP5XMl2uUrHCzSasy1qp/
MUnIo1v6Me43yFvb+VvyDjktajhkN6RMhUbojYRYnsYxBXZlkKak+ebBbtHD0+Mr
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291199284996382629085115281737892933394
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '48105-3640'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4251 Plymouth Rd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'remotesupport-qa.it.umich.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20989511905462881622018608742627725602857912410423764017726384030857889937024796981040993702121337372637960027328827919189214088232071165178380572970625687413265351713605651187192408210104080943242401199041356124358544772718139157245634584578521831526922464930628760705866387831522792522582680106025034546225089183675265160364253195482005232182572304461006398998846302885002822640732916619414500933033488842437394643838840332275324275928304871142727147501298549667548177843155713844867278217697467977947060268878051498357986727809453332507747302620232183601208910204660679396367004329053045839236503041565679943887683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57ba3c9e26c86800653b368a6a3c690f896e371b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotesupport-qa.it.umich.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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