itap-netedge-asa5555x-01.tcom.purdue.edu

- Purdue University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 32:58:d7:8f:33:7f:e0:ca:ad:9f:d5:d6:dc:3f:cf:00 was issued on by Internet2.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Purdue University

Organization: Purdue University
Organization unit: IT Networks & Security
State / Province: Indiana
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 32:58:d7:8f:33:7f:e0:ca:ad:9f:d5:d6:dc:3f:cf:00
Serial Number (int): 66922693976427213754267536735462215424
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: e3:b7:99:41:f3:22:ba:52:8e:33:cd:c2:3b:0a:30:b1:57:53:3b:41
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 97:1d:e9:f8:3b:a2:91:a2:f0:04:6e:b0:d1:b3:e0:c6:eb:a6:bf:c7
Fingerprint (sha256): 00:ae:b4:39:77:8a:e3:c1:8d:65:ea:53:2e:14:bf:d8:23:cc:0f:90:f1:fa:f7:eb:74:78:4f:f2:ce:98:58:b6

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate itap-netedge-asa5555x-01.tcom.purdue.edu

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itap-netedge-asa5555x-01.tcom.purdue.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

itap-netedge-asa5555x-01.tcom.purdue.edu
itadminvpn.itap.purdue.edu
rezone-vpn.itap.purdue.edu
webvpn.purdue.edu
zonevpn.itap.purdue.edu

Other certificates including the domain name purdue.edu

(limited to 100 certificates)
dev.boilerpress.itap.purdue.edu
srv-fna.student-orgs.purdue.edu
frodo.lib.purdue.edu
dayofgiving.purdue.edu
icds28.cs.purdue.edu
buddy-boy1.ecn.purdue.edu
dev.www.purdue.edu
wqvwebasp02-05.www.purdue.edu
roger.ecn.purdue.edu
pc.cs.purdue.edu
webvpn.purdue.edu
itap-netedge-asa5555x-01.tcom.purdue.edu
givingisgorges.org
dev2.hort.purdue.edu
dev.wp.www.purdue.edu
freedom.cs.purdue.edu
wdvwebasp03-01.www.purdue.edu
cmsdev.pha.purdue.edu
www.math.purdue.edu
npdn-dev.ceris.purdue.edu
dns-vetting1l.map.fastly.net
amarillo.nserl.purdue.edu
author.www.purdue.edu
npdn-dev.ceris.purdue.edu
www.purdue.edu
bionum.cs.purdue.edu
webdav.bio.purdue.edu
5684961520648192-fe4.pantheonsite.io
wqvwebcfm02a.www.purdue.edu
sp-dev.itap.purdue.edu
one.purdue.edu
prtg-test.psc.purdue.edu
wqvwebasp03b.www.purdue.edu
5757715179634688-fe2.pantheonsite.io
dns-vetting1l.map.fastly.net
cluster2.technolutions.net
dev.www.purdue.edu
owl.english.purdue.edu
one.purdue.edu
aribaqa.itap.purdue.edu
blackmesa.cerias.purdue.edu
dayofgiving.purdue.edu
5684961520648192-fe4.pantheonsite.io
www.ag.purdue.edu
wdvwebpec02.www.purdue.edu
www.bio.purdue.edu
cancerresearch.purdue.edu
5767874312404992-fe2.pantheonsite.io
dev.boilerpress.itap.purdue.edu
givingisgorges.org
www.eaps.purdue.edu
wpvwebdls01-01.www.purdue.edu
lacuna.cla.purdue.edu
www.purdue.edu
www-old.pharmacy.purdue.edu
wdvwebinf03.www.purdue.edu
redirect.www.purdue.edu
dev.boilerpress.itap.purdue.edu
napis.ceris.purdue.edu
polytechnic.purdue.edu
wpvpfrmft01.itap.purdue.edu
Collegiatelink4.Campuslabs.com
dns-vetting1l.map.fastly.net
phishing.itap.purdue.edu
5684961520648192-fe4.pantheonsite.io
cancerresearch.purdue.edu
erp-reporting-sbx.itap.purdue.edu
deleuze.cla.purdue.edu
5750683647082496-fe3.pantheonsite.io
incapsula.com
assets.lib.purdue.edu
www-new.foodsci.purdue.edu
www-new.foodsci.purdue.edu
jafcidev.chem.purdue.edu
weldon.ecn.purdue.edu
wpvwebasp03-01.www.purdue.edu
cancerresearch.purdue.edu
saraswat.rcac.purdue.edu
bmew.ecn.purdue.edu
n002.offcampuspartners.com
www.cs.purdue.edu
n002.offcampuspartners.com
dev.wiki.itap.purdue.edu
*.math.purdue.edu
collections.lib.purdue.edu
sharepoint.purdue.edu
incapsula.com
givingisgorges.org
bejih.com
cos-7apollo.boilerad.purdue.edu
dev.wp.www.purdue.edu
exchange.purdue.edu
dat2-100-asa5506-01.tcom.purdue.edu
offcampushousing.fau.edu
givingisgorges.org
givingisgorges.org
dev.sharepoint.purdue.edu
www.itap.purdue.edu
webapps.krannert.purdue.edu
dns-vetting1l.map.fastly.net

Certificate

The complete raw certificate details for itap-netedge-asa5555x-01.tcom.purdue.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN4xhIylvzIwjMmEYHRf
SSOmxxMtUxll0bJrN8Y+D2sAnbOyp6Mp5NW1Ei14UTp/28NyrfkD+4OB3ah6wlzs
UdfdjOey9blpJ8aPcUeBSCgwMU3bGGmNGgrxeYdQ7phP41C4EL3RDRGFdA/SP285
+CrHb7HUiA4n1PkmwXITpGdW1YxtRjSC+1hRwHVIsQstyQW5FU0FTgbriVk+AmIX
2ydIVAjnsfAk96J8brx5m97fvyUulg2bYBNumCqMNWbg2GMPGccO8ONpeXRbgq41
uB/6gCgli+qR5+disViI0vsfHpwnuiH9UbqWg6BHBfFREGXoBKZ4Kz0sOJsgBpMh
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 66922693976427213754267536735462215424
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Purdue University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Networks & Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itap-netedge-asa5555x-01.tcom.purdue.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19297790018221672851491072647967385937755805803820708242482431872395696690728016613440952286982032706032650852623010404540088768470695236096256111643423443529518058221688195327616619131151536452263098948817926389556391425221678744793718618686323554125550403823152588271288932423358219170513807806149722519587242705519376472366478014950410857649226956984018065398268788796865841954202097818855264539239305693735459292107181911906668428964013488696548958589491298455002488361901448693883798014743817222739918640809599261309259050012201892019191749186779080472270488409710090513007877211045543357335359796275070102610331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3b79941f322ba528e33cdc23b0a30b157533b41
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itap-netedge-asa5555x-01.tcom.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itadminvpn.itap.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rezone-vpn.itap.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webvpn.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonevpn.itap.purdue.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00909f81d6a4c7557a20f4b83b5a7c0d7937be803e49a918f739136a7559bd772c7e33404571c2e01a99d5d7cc76dd57636e2a978bc2fb9f20ce85612bd67a3175e9fbb5d6c8effa677b68eb8580424bd55b968871ade87f67ffd26819a9bb67b5673233bb1c06979b3eb43ffc2e4f5e12a4aac1f49c7566386d631bff8e8cf83dc5626e8cf8fb3d62a745be062e756fce4e356cf42d89cd12d694592aa14be2f07fb4d7a3f147cea2b15e08d23a42a627c7af20cea81f54add0613fe0a0cd7e45e6485a407cfaf91a2257244baaf30fbb8d9f467cad70ac514be6e4b7b371db5c983f8052ca8dae85c33da762f792987d4d932a543de02d86c48b3d5082b5d3d3