www-a1.lsa.umich.edu

- University of Michigan -

Issued by UTN-USERFirst-Hardware

About this certificate

This digital certificate with serial number 41:db:63:7d:6a:12:df:34:40:1f:07:16:eb:d3:e0:c0 was issued on by The USERTRUST Network.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

University of Michigan

Organization: University of Michigan
Organization unit: College of LS&A
Organization unit: Issued through University of Michigan E-PKI Manager
Organization unit: Comodo InstantSSL
Address: 4251 Plymouth Road
Address: Bldg 1 Rm 2640
Postal code: 48109
State / Province: Michigan
Locality: Ann Arbor
Country: US

The USERTRUST Network

Organization: The USERTRUST Network
Organization unit: http://www.usertrust.com
State / Province: UT
Locality: Salt Lake City
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 41:db:63:7d:6a:12:df:34:40:1f:07:16:eb:d3:e0:c0
Serial Number (int): 87538950632937960545202239496676171968
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d9:99:96:61:e2:9c:08:33:42:55:cb:b5:d0:09:7b:30:0a:26:f6:40
AuthorityKeyId: a1:72:5f:26:1b:28:98:43:95:5d:07:37:d5:85:96:9d:4b:d2:c3:45

Fingerprint (sha1): b3:36:c9:e8:42:f7:3e:4a:ed:01:f1:ce:4a:a1:3e:ea:4a:28:72:e1
Fingerprint (sha256): 00:69:63:ee:2c:7d:e2:43:73:d1:fe:d9:26:1f:75:30:39:26:fe:f8:1f:4b:3c:c8:3b:fb:fc:e6:af:5d:cd:d1

Issuing Certificate URL: http://crt.comodoca.com/UTNAddTrustServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/UTN-USERFirst-Hardware.crl
CRL Distribution Point: http://crl.comodo.net/UTN-USERFirst-Hardware.crl

Check the revocation status for certificate www-a1.lsa.umich.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-a1.lsa.umich.edu

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www-a1.lsa.umich.edu
www.www-a1.lsa.umich.edu

Other certificates including the domain name umich.edu

(limited to 100 certificates)
pconway.people.si.umich.edu
5708235679989760-fe2.pantheonsite.io
his-364y.hosp.med.umich.edu
*.pathology.med.umich.edu
clips.vpcomm.umich.edu
jealexa.people.si.umich.edu
cshl.engin.umich.edu
charvat.people.si.umich.edu
his-351t.hosp.med.umich.edu
staging.wdi.bus.umich.edu
ephraims.people.si.umich.edu
exchange.umich.edu
exp-e3-ext.med.umich.edu
paulscot.people.si.umich.edu
prodremedy.med.umich.edu
msnyd.people.si.umich.edu
uofmjosh.people.si.umich.edu
ppethick.people.si.umich.edu
clinicaltrials.med.umich.edu
margauxk.people.si.umich.edu
www.umms.med.umich.edu
its-thistle.adsroot.itcs.umich.edu
his-752y.hosp.med.umich.edu
keunhou.people.si.umich.edu
grip.umich.edu
carpepm.almonds.com
vidyo3.umms.med.umich.edu
remotesupport-qa.it.umich.edu
drgage.people.si.umich.edu
dkimme.people.si.umich.edu
accounts.itcs.umich.edu
sitemaker.umich.edu
gtabach.people.si.umich.edu
his-788y.hosp.med.umich.edu
maggiel.people.si.umich.edu
kencald.people.si.umich.edu
seas.umich.edu
message.umich.edu
joshilyn.people.si.umich.edu
mcneilgroup.chem.lsa.umich.edu
mjcantle.people.si.umich.edu
kunsingh.people.si.umich.edu
kafedewa.people.si.umich.edu
yuchengh.people.si.umich.edu
it.umich.edu
haoyoliu.people.si.umich.edu
fentonic.people.si.umich.edu
his-374x.hosp.med.umich.edu
quant.sites.uofmhosting.net
earnestw.people.si.umich.edu
anjshah.people.si.umich.edu
chowcy.people.si.umich.edu
chollad.people.si.umich.edu
swborders.sites.uofmhosting.net
alicla.people.si.umich.edu
5708235679989760-fe2.pantheonsite.io
jobs.alumni.umich.edu
jpasche.people.si.umich.edu
quadrangle.law.umich.edu
mibytes.eecs.umich.edu
bssp.sites.uofmhosting.net
bmes.bme.umich.edu
nabgilby.people.si.umich.edu
www-a1.lsa.umich.edu
yunchang.people.si.umich.edu
tle.soe.umich.edu
veenap.people.si.umich.edu
mottgolf.sites.uofmhosting.net
kessen.people.si.umich.edu
api-esb.it.umich.edu
uprint.umd.umich.edu
crtye.people.si.umich.edu
hsseo.people.si.umich.edu
mlearningreports.med.umich.edu
eecs494-server-b.eecs.umich.edu
jjstant.people.si.umich.edu
bthoma.people.si.umich.edu
abudziak.people.si.umich.edu
msis.med.umich.edu
phzhao.people.si.umich.edu
umchina.umich.edu
5708235679989760-fe2.pantheonsite.io
wgluc.people.si.umich.edu
cluster3.technolutions.net
clasp-research.engin.umich.edu
cryoem.lsi.umich.edu
yckuo.people.si.umich.edu
mobley.lab.medicine.umich.edu
lila.rad.med.umich.edu
cjburwe.people.si.umich.edu
pratapak.people.si.umich.edu
campaign.law.umich.edu
chhecht.people.si.umich.edu
prt-819y.prt.med.umich.edu
shihyi.people.si.umich.edu
chirayil.people.si.umich.edu
ericroth.people.si.umich.edu
studentemployment.umich.edu
psgt.earth.lsa.umich.edu
desigosys2.med.umich.edu

Certificate

The complete raw certificate details for www-a1.lsa.umich.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6VQ0SF3q+jNMN5Tcp37eLbHsW
/dovptenyzh8MVFY3HouWIhlO6Flsa7QG1ZHu1LwV1PEYmL+jjC6e/GsE1lspPd8
2dPUk5hj1tsBWO88PjYKB191pnvulQ5Nu4K5bsXYDYEesk0VBTgg2Zs5WsCQZJ6V
eA15I9TT5BeR6DGjxwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 87538950632937960545202239496676171968
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://www.usertrust.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UTN-USERFirst-Hardware'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-10-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-12-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '48109'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4251 Plymouth Road'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bldg 1 Rm 2640'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'College of LS&A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Issued through University of Michigan E-PKI Manager'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Comodo InstantSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-a1.lsa.umich.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 130846942156126171050340626928081522774723228832581440272889376495934971502780061390791320961501504872302239168550759138449613801101017620484170832350270567564097831793266422803891135041510019924965049042336358033237335961967097210950959591357209155127084266698812406010920020669866845404573983399190193087431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a1725f261b289843955d0737d585969d4bd2c345
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9999661e29c08334255cbb5d0097b300a26f640
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/UTN-USERFirst-Hardware.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodo.net/UTN-USERFirst-Hardware.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/UTNAddTrustServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-a1.lsa.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.www-a1.lsa.umich.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000c3b2d54a890b8b7058de66fa00b392e2401e343acbb51713c3fef7852716b76ea116a942119dfffc2247dbbdc8c1bf6fe572a9924f42e4efd9a89f1bcfdc5ac8059747c304af40b35ba71d8c72fc086ebe22d9da8dc02c3e8a0f7bc62e8c7e5331cf44da1b0753987f1472f264472b0c64ef36b8d97a8d8f5942e244cdcd707f205038755839bef932200f1a68492fcfc1154454141feea3633d7c5ed062cda9d34bf8707207d35c4f3af659b7276e29c68d7c10be8fa6f0ea4b4da38d9ab20400cb287c4a71056e5d0bbb81c1f6e1023d3c4978ffa6843b31e3318b014f41ca9ed1852c0fb6f0a109f092e3a0717c98bdd664182542e389a78999288a55ea3