ultron.srv.cs.cmu.edu

- Carnegie Mellon University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 05:24:04:71:45:57:d4:af:62:7d:69:8e:29:28:90:90 was issued on by Internet2.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Carnegie Mellon University

Organization: Carnegie Mellon University
State / Province: Pennsylvania
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:24:04:71:45:57:d4:af:62:7d:69:8e:29:28:90:90
Serial Number (int): 6833152769713258478648785419993911440
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 02:7a:c5:06:fa:11:53:30:c2:8b:f0:79:02:da:76:02:e4:64:c1:2d
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 35:16:4f:65:ef:1c:76:01:c4:eb:f1:06:4f:66:0f:2f:62:2b:12:ba
Fingerprint (sha256): 00:57:bf:fe:24:57:2d:3c:34:7d:71:44:5a:1b:06:83:25:39:c9:a2:9f:ab:e7:16:4b:5f:1c:70:ca:0a:68:70

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate ultron.srv.cs.cmu.edu

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ultron.srv.cs.cmu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ultron.srv.cs.cmu.edu
biorobotics.ri.cmu.edu
ccc12.cs.cmu.edu
csadmins.cs.cmu.edu
dreal.cs.cmu.edu
gambit.srv.cs.cmu.edu
innovation.cs.cmu.edu
major.ri.cmu.edu
multicomp.cs.cmu.edu
origami.qolt.cs.cmu.edu
pic.cs.cmu.edu
ptest1-userpool.web.cs.cmu.edu
ptest2-userpool.web.cs.cmu.edu
ptest3-userpool.web.cs.cmu.edu
ptest4-userpool.web.cs.cmu.edu
ptest5-userpool.web.cs.cmu.edu
robowall.hcii.cs.cmu.edu
sites.cs.cmu.edu
trust.cs.cmu.edu
unlocked-internal.cs.cmu.edu
unlocked.cs.cmu.edu
web01.srv.cs.cmu.edu
www-dev.cs.cmu.edu
www.cleese.cs.cmu.edu
www.csadmins.cs.cmu.edu
www.trust.cs.cmu.edu
www.wiki.cs.cmu.edu
www.xia.cs.cmu.edu
xia.cs.cmu.edu

Other certificates including the domain name cmu.edu

(limited to 100 certificates)
yellowstone.andrew.cmu.edu
dev-andyjr.enrollment.cmu.edu
test-web-lws.edu.help
www.soa.cmu.edu
sfunder5cert.net
admissions.scs.cmu.edu
oli.cmu.edu
ultron.srv.cs.cmu.edu
*.oli.cmu.edu
blockchain.cylab.cmu.edu
admissions.emeritus.org
it.qatar.cmu.edu
cluster3.technolutions.net
5746569068412928-fe1.pantheonsite.io
ucdc.edu
cluster3.technolutions.net
www.architecture.cmu.edu
wtslocal2.srv.cs.cmu.edu
reporting.as.cmu.edu
csgapp.andrew.cmu.edu
apply.etc.cmu.edu
dvl-vhost-01.andrew.ad.cmu.edu
backend.academy.cs.cmu.edu
qtr-vdi-gtw-p01.qatar.cmu.edu
admission.qatar.cmu.edu
webhost.srv.cs.cmu.edu
cmu.stellic.com
5746569068412928-fe1.pantheonsite.io
innovation.cmu.edu
studentaid.cmu.edu
scsmydb2.andrew.cmu.edu
publishing.andrew.cmu.edu
esx-1.isri.cmu.edu
starrez-test.housing.cmu.edu
portal.cylab.cmu.edu
starrez-test.housing.cmu.edu
clusters2.andrew.cmu.edu
www.cmu.edu
ebstest.andrew.cmu.edu
puzzlehunt.club.cc.cmu.edu
test.eis.uw.edu
www.magazine.tepper.cmu.edu
shibboleth-test.andrew.cmu.edu
privacycert.cs.cmu.edu
citeak.multidevcom.uaf.edu
www.design-engineering.princeton.edu
mbrooks-dev.net.cmu.edu
illiad.library.cmu.edu
cluster3.technolutions.net
nxterra.ucop.edu
resources.ideate.cmu.edu
fractions.cs.cmu.edu
cardinaltetra.coral.cs.cmu.edu
wtslocal1.srv.cs.cmu.edu
5746569068412928-fe1.pantheonsite.io
rohan.andrew.cmu.edu
rich.srv.cs.cmu.edu
cluster2.technolutions.net
scalefunder.net
rubeus.fac.cs.cmu.edu
puzzlehunt.club.cc.cmu.edu
cms-dev4.andrew.cmu.edu
sfunder5cert.net
sc.isri.cmu.edu
ulissigroup.cheme.cmu.edu
pgh-ad-temp.go.ece.cmu.edu
5741830645743616-fe1.pantheonsite.io
tickets.its.cit.cmu.edu
www.hcii.cs.cmu.edu
spiral-web.ece.cmu.edu
www.blogs.earthjustice.org
qatar.webiso.andrew.cmu.edu
stills.andrew.cmu.edu
exchange.soa.cmu.edu
scom.andrew.cmu.edu
memexqa.cs.cmu.edu
clusters.andrew.cmu.edu
5741830645743616-fe1.pantheonsite.io
webdev.colorado.edu
virtual2.unlv.edu
research-pp.stonybrook.edu
tepper-aid.andrew.cmu.edu
architecture.cmu.edu
recruiting.tepper.cmu.edu
kitchingroup.cheme.cmu.edu
hotline.andrew.cmu.edu
garrod.isri.cmu.edu
upenn-it.asc.upenn.edu
ssp.australia.cmu.edu
forms.qatar.cmu.edu
15721.courses.cs.cmu.edu
tls.automattic.com
faculty.ce.cmu.edu
bookstore.web.cmu.edu
apply.tepper.cmu.edu
web.phys.cmu.edu
olr-test.as.cmu.edu
faculty.ce.cmu.edu
gitlab.library.cmu.edu
bd-test.andrew.cmu.edu

Certificate

The complete raw certificate details for ultron.srv.cs.cmu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rcnKdq9332js9ZfRDs+
jLoh839nydJp1PMYe9m/AkL9Yhb68uxdRsWGNIs7wuz6fmIWRfbu7iems2MFpgiA
aGUxnFyqEbF0Et362WQN66V9v8ThFD5GTqZuCQQTJOa75ys6UNmW208022jeOOkM
nKBFF+zKQK+WYFKvLfneB5Ups0OCIXi6sTbHZEJJkkTPglyb9n25xgu7ApwYAgh4
Ega/ZuJcT6P7o42rmPeKMSJoQQzaMrQbecKZxQgE0BUFgQN/DuYddsN9n/ldq7lM
mgxuH5PJ3CnEnw3r/ud5CqpAwlM17gargiYA7oKWeRnpAnG+ROwqIX0IuXcadS0b
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6833152769713258478648785419993911440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Carnegie Mellon University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ultron.srv.cs.cmu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27610266584348626917438920869665139799463175275884383878615365573877863429136917338528649440253127652831044272993383504100931350989349049536150251248836011470610408122821911205615821237059748455769451809081377567479720758088278973818812152179960198759055904100117247398503449381345787496188191189931428972629290553009106195712063706940212965417991766010139594901123729681993718779850600885997945537606162831165633562949626745601262769086739227841311920854217526393515268006685248587843949969288379201226923865619748413815703881279475559284666403902793523143326155210421518250483204388460038659170120269657886455307027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							027ac506fa115330c28bf07902da7602e464c12d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018a90aab5c3000004030046304402203daa6e5a973412d5c44a0b0b66ad27d8be3c2d7eed26bb712bc74760818e8e470220422dbe859f97558dd83f1536353024e6b6fbb2aab7adf3170995b6f7d19f143b007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a90aab6170000040300483046022100be03d4e477a34764dacd15df8eca127d5ecb3a9ec43441bf91645ce3894fd945022100e4381bd47c27bec9ce9c0a5ac59acde986168281b5df2bb47a7803849c2e0f23007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018a90aab65e0000040300473045022100fef434bbdd8f183f6f26c0e9a4cfe8a39561e09118d247e2154445e0895ba8c602200ff6b39a22e90e6ba0ed3b39456de2a8d439892594a1c874c88baa911b056d00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (677 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultron.srv.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biorobotics.ri.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccc12.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csadmins.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreal.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gambit.srv.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovation.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'major.ri.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multicomp.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origami.qolt.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pic.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptest1-userpool.web.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptest2-userpool.web.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptest3-userpool.web.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptest4-userpool.web.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptest5-userpool.web.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robowall.hcii.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trust.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unlocked-internal.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unlocked.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web01.srv.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleese.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csadmins.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trust.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiki.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xia.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xia.cs.cmu.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0066a43c06349a0ec517956414e9dfe0b0d2a3b6623a793a6edf1a5317e46b0418ac74799e46cf88d1143c72cf402dca1ea2c323c338b58f177c8e91a655926509213470e76f85ac34d445e48b144a32c6a407fe58049f82f774a7d8ca0885e1c48c8961870d955181fd84c6ae1742adf750be93bc829f72e4ac19876ecd92be6a0cbb0dac997ca6a3b0caac71e07232d0a7b0840d5cad70d9359d7754903de30d9aa3009c9187a11ef5f4c816ddb40d0edf077939b848196293ea3dcd0b38833ae63f69ba7148308ff7af4ade251b92fefbe9832068ccf1b582201383f708e9a28d99377237123cecdc42f221bc341206f674efdb301d3852f0a2cf4e304625f3