tinker.lpl.arizona.edu

- The University of Arizona -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 99:e4:a1:02:94:a6:f0:64:50:59:b7:49:de:4c:e4:f2 was issued on by Internet2.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The University of Arizona

Organization: The University of Arizona
Organization unit: Lunar and Planetary Laboratory, Department of Planetary Sciences
Address: The University of Arizona
Postal code: 85721
State / Province: Arizona
Locality: Tucson
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 99:e4:a1:02:94:a6:f0:64:50:59:b7:49:de:4c:e4:f2
Serial Number (int): 204558992711246180559089619104426681586
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f5:d3:9a:ce:0f:db:9f:06:2d:39:f7:cc:84:0e:36:fe:91:58:42:ef
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 00:f4:47:da:3c:82:48:cb:6a:d2:56:f4:14:26:bd:71:97:94:d7:70
Fingerprint (sha256): 00:ba:31:d0:fa:8f:2d:97:73:e8:73:94:b0:2a:28:f2:f3:6d:53:15:17:5c:f2:4c:de:ac:66:ca:ce:62:c7:f2

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate tinker.lpl.arizona.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tinker.lpl.arizona.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tinker.lpl.arizona.edu
lars.lpl.arizona.edu
schedule.lpl.arizona.edu

Other certificates including the domain name arizona.edu

(limited to 100 certificates)
5734743547052032-fe3.pantheonsite.io
5698998010642432-fe4.pantheonsite.io
webservice.oscr.arizona.edu
5658514613600256-fe2.pantheonsite.io
5693703389708288-fe3.pantheonsite.io
drc-dev.arizona.edu
*.ezproxy2.library.arizona.edu
test-web-lws.edu.help
p21.uawebhost.arizona.edu
carpepm.almonds.com
photonicshub2.uawebhost.arizona.edu
5697124062724096-fe2.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
5703128158568448-fe1.pantheonsite.io
aer.arizona.edu
5723088213770240-fe3.pantheonsite.io
it.uahs.arizona.edu
pictor.as.arizona.edu
accona-idrac.fm.arizona.edu
helpdesk.travelleaders.com
cluster3.technolutions.net
remote.azgs.arizona.edu
helpdesk.travelleaders.com
imr.uawebhost.arizona.edu
libguides.library.arizona.edu
5631943370604544-fe1.pantheonsite.io
mis-mallinfra1.microagelab.arizona.edu
5702351037923328-fe2.pantheonsite.io
5720453519769600-fe1.pantheonsite.io
5685665089978368-fe3.pantheonsite.io
ucdc.edu
cluster3.technolutions.net
5733052001026048-fe3.pantheonsite.io
survey.pharmacy.arizona.edu
5643365030821888-fe1.pantheonsite.io
5685665089978368-fe3.pantheonsite.io
nartc.fcm.arizona.edu
5732910535540736-fe1.pantheonsite.io
xlr7.lpl.arizona.edu
azmesa.arizona.edu
tinker.lpl.arizona.edu
in.arizona.edu
calendar.sdzsafaripark.org
5763210187636736-fe2.pantheonsite.io
amonhen-th-01.ucode.arizona.edu
legacy.fso.arizona.edu
5700866052980736-fe2.pantheonsite.io
l3.shared.global.fastly.net
jsw.arizona.edu
5723088213770240-fe3.pantheonsite.io
ba-vpn.lpl.arizona.edu
data.library.arizona.edu
consciousness.arizona.edu
housing.arizona.edu
5743114304094208-fe3.pantheonsite.io
5693341270278144-fe4.pantheonsite.io
cls.uawebhost.arizona.edu
skycenter.arizona.edu
vas.uawebhost.arizona.edu
samis.webhost.uits.arizona.edu
5685665089978368-fe3.pantheonsite.io
5679846214598656-fe1.pantheonsite.io
5763210187636736-fe2.pantheonsite.io
mesupport.saloncloudsplus.com
cesd.arizona.edu
udallcenter.uawebhost.arizona.edu
www2.engr.arizona.edu
5650082896543744-fe3.pantheonsite.io
*.playposit.com
5693703389708288-fe3.pantheonsite.io
5689792285114368-fe2.pantheonsite.io
5736449051721728-fe1.pantheonsite.io
law.arizona.edu
accounting.eller.arizona.edu
5754818358411264-fe2.pantheonsite.io
5662329727352832-fe1.pantheonsite.io
5721489412194304-fe1.pantheonsite.io
psi.arizona.edu
banking-business-review.com
5650082896543744-fe3.pantheonsite.io
5636635823702016-fe2.pantheonsite.io
apps.iam.arizona.edu
5692201761767424-fe3.pantheonsite.io
portal.environment.arizona.edu
5747976207073280-fe2.pantheonsite.io
cdn-test.battlefields.org
rds.athletics.arizona.edu
test.eis.uw.edu
aemrc.arizona.edu
cybersw.org
5703128158568448-fe1.pantheonsite.io
5634612826996736-fe4.pantheonsite.io
5734743547052032-fe3.pantheonsite.io
5668906396024832-fe3.pantheonsite.io
5639026912526336-fe4.pantheonsite.io
*.mosaic.arizona.edu
r-barthelson-lab.uawebhost.arizona.edu
i3.shared.global.fastly.net
2016.arche.peds.arizona.edu

Certificate

The complete raw certificate details for tinker.lpl.arizona.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHhsKxG+5KJq15MMvXLx
+LSEXOBzjIFp+krmqMgsupl0do47qvwhu6AatewMe/aSYfmJofoEyJQzxDuKU/nV
Jzy6a9H6RFq4MnQbexgCuZSS0ak3be+ZekK/KFPmuvfchR3blzXNe5YcCbt39sB6
TV38EIGX0FJEt8g7HbFLWYS3oXdSikuYRzHgxXBIJWuqhQkl7Gz6qAZovLVF8ZZn
dzbwFPzQ+2vzSJcMMSDHd8mmWIHTo23pab1lY7ZR2ng+F9yLnlBGiAswB0nZ8URB
9L9f6+0bezxoAUJQCJRlhX6Hta7L+6OTb75rCeWwGOuQ4mu8+Q0Ymt23SO8JCAxM
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 204558992711246180559089619104426681586
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '85721'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tucson'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lunar and Planetary Laboratory, Department of Planetary Sciences'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tinker.lpl.arizona.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21267417798137058118180472738921668060217135172843001417670824108644984566185427224811845111811994747544475197839896172055390126167851674230110233009405070050967845102898775601259457763960317443965298483073800264627658165837186769409121840014887348863020228775326318155443750060029937090674071269244220127220049709650605165142176691714038818656509096749014756094183726641682174304394953970837885682088209785526329933889144029550061505954358673616276392024529051595233439909374457869319901641986776281097330581837786828265697602235859755301072605621566974707866669394951259526586901431175703589859815122853797928127709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5d39ace0fdb9f062d39f7cc840e36fe915842ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinker.lpl.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lars.lpl.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schedule.lpl.arizona.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002bfd856f89e72877a256f3b58d83677eee9cc47042554c35187eb0829aa917650bb6fff483344961adc27238f87eb39bfd88ff72649b4ae77824358f93ee192f5df0394b3e54b23c84fcd32155e2d767d1ddcc1e11f71439491056ef15e1908f09838d18a25dec2460f8328f90b2acb4fbeeb2dc2c9f249ff345eb9f0d9c495895ec5a3d48e1febf430152b6d0a86ee13aa74bf4e0d58175e3643c4b5e62d2a1dae04c4980c48dd8e4e0d84fbb05a20a414e02085e6ac220ca64bff7e271920e7cbc71562b78a9ec9ce582052755c72ef9bd70ad521e4d4ae34e7606ed1ec99c8030a66b7bb0a3f2ecc2a7516b7712eb5cfb9a5530b12f493ef32337c157303b