ceepr.mit.edu

- Massachusetts Institute of Technology -

Issued by InCommon Server CA

About this certificate

This digital certificate with serial number 1b:c0:cc:2e:ab:d0:94:a8:cc:2c:a9:25:84:87:37:0b was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Massachusetts Institute of Technology

Organization: Massachusetts Institute of Technology
Organization unit: Information Services & Technology
Address: 77 Massachusetts Ave
Postal code: 02139
State / Province: Ma
Locality: Cambridge
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1b:c0:cc:2e:ab:d0:94:a8:cc:2c:a9:25:84:87:37:0b
Serial Number (int): 36890218192260131343941299237351274251
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: b4:24:93:cc:55:ee:6a:24:bd:c1:1f:ad:88:aa:fa:9c:2a:f2:ab:6b
AuthorityKeyId: 48:4f:5a:fa:2f:4a:9a:5e:e0:50:f3:6b:7b:55:a5:de:f5:be:34:5d

Fingerprint (sha1): e9:c2:4b:9f:5f:0c:ca:b5:e3:9e:52:9a:fd:71:af:37:1c:db:51:0f
Fingerprint (sha256): 00:bb:6c:7b:70:2a:57:b9:4d:18:94:59:a2:c3:95:fc:a7:82:f9:e8:c9:83:61:da:a5:51:fe:a5:1b:a7:14:ba

Issuing Certificate URL: http://cert.incommon.org/InCommonServerCA.crt

Revocation information

OCSP Server: http://ocsp.incommon.org
CRL Distribution Point: http://crl.incommon.org/InCommonServerCA.crl

Check the revocation status for certificate ceepr.mit.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ceepr.mit.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ceepr.mit.edu

Other certificates including the domain name mit.edu

(limited to 100 certificates)
5692462144159744-fe3.pantheonsite.io
discussions.odl.mit.edu
frankwilczek.mit.edu
5671617594130432-fe3.pantheonsite.io
dreams.media.mit.edu
github-backup.mit.edu
www.wgs.mit.edu
bucket.mit.edu
cf-registration.mit.edu
tstormvideo.ll.mit.edu
clpi.mers.csail.mit.edu
bosefellows.mit.edu
ceepr.mit.edu
somtow-sucharitkul.mit.edu
us.prod.campusgroups.com
cliff-homepage.mcservices1.media.mit.edu
sloanfacultysearches.mit.edu
image.20210408.094303.s11.et.yellsatcloud.com
5724596284162048-fe2.pantheonsite.io
mailto.mit.edu
discussions-ci.odl.mit.edu
covid-stats.wi.mit.edu
bone.mit.edu
nothangout.media.mit.edu
eqaads.ll.mit.edu
listlottery-dev.mit.edu
crowdsensor.org
sciwrite.mit.edu
edu-apps-test.mit.edu
statuspage.io
maz.mit.edu
theta.mit.edu
rmerton.mit.edu
psirudahximenes.com
admissions.emeritus.org
mobilityofthefuture.mit.edu
dome-preview.mit.edu
www.borgeapps.eu
radius.mit.edu
5638203017003008-fe2.pantheonsite.io
aidm.mit.edu
tatacenter.mit.edu
newhouse.mit.edu
sloangroups.mit.edu
mitoc.mit.edu
meche-prod-app-2.mit.edu
olinda.mit.edu
ipespeakerseries.mit.edu
probcomp-2.csail.mit.edu
5750683647082496-fe3.pantheonsite.io
boyerlab.mit.edu
fryonthefly.mit.edu
silvaire.mit.edu
imes-fmp.mit.edu
git.mers.csail.mit.edu
us.prod.campusgroups.com
aldy.csail.mit.edu
beeme.mit.edu
alm.mit.edu
www.gcws.mit.edu
www.create.mit.edu
infiniteseries.mit.edu
mri-rle.mit.edu
5636026810761216-fe1.pantheonsite.io
hsf1.csail.mit.edu
ceepr.mit.edu
ceipostdoc.mit.edu
socialphysics.media.mit.edu
think.mit.edu
hilary.mit.edu
cce.mit.edu
clubsports.mit.edu
clubareawest.alumclub.mit.edu
ikim.mit.edu
capco-status.polaris.synopsys.com
sdm.mit.edu
msm-dsoos.mit.edu
visor.mit.edu
education.mit.edu
classrooms.mit.edu
terrascope.mit.edu
5638203017003008-fe2.pantheonsite.io
unhangout.media.mit.edu
atlas.mit.edu
www.sloan-hbc.mit.edu
j3.shared.global.fastly.net
cfg2018.csail.mit.edu
ogs.mit.edu
paulbert.media.mit.edu
stat-stage.mit.edu
oc11-jabber-2.mit.edu
j3.shared.global.fastly.net
darts.mit.edu
skullhouse.mit.edu
5636026810761216-fe1.pantheonsite.io
techspace.mit.edu
hkn.mit.edu
create.mit.edu
hecsh1web01.mit.edu
fermi.haystack.mit.edu

Certificate

The complete raw certificate details for ceepr.mit.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgIQG8DMLqvQlKjMLKklhIc3CzANBgkqhkiG9w0BAQUFADBR
MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSW50ZXJuZXQyMREwDwYDVQQLEwhJbkNv
bW1vbjEbMBkGA1UEAxMSSW5Db21tb24gU2VydmVyIENBMB4XDTEzMDczMTAwMDAw
MFoXDTE2MDczMDIzNTk1OVowgdExCzAJBgNVBAYTAlVTMQ4wDAYDVQQREwUwMjEz
OTELMAkGA1UECBMCTWExEjAQBgNVBAcTCUNhbWJyaWRnZTEdMBsGA1UECRMUNzcg
TWFzc2FjaHVzZXR0cyBBdmUxLjAsBgNVBAoTJU1hc3NhY2h1c2V0dHMgSW5zdGl0
dXRlIG9mIFRlY2hub2xvZ3kxKjAoBgNVBAsUIUluZm9ybWF0aW9uIFNlcnZpY2Vz
ICYgVGVjaG5vbG9neTEWMBQGA1UEAxMNY2VlcHIubWl0LmVkdTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAOHjHelR+vsIs+y9v7ISHtr/YQccuuy3kpBs
2NW1CI4/nBavest/KGV0DmrXopEyjWjrvW6Q2oUgKbhPXl7nln4IO1FfNxRXj3H/
9i+LoqzhmAte1LK/bydlQzmboO+Fxm1w67IhMlS4Oi1fU3L4UmqYd+3c4i69zW3X
aQYt6hwnaGZsFRvH93jMPEg/yvvkRXVNT9EZZCmijGUDKMVfSSQypu7I/rXv7Xqv
424wPGgOp36EuKnN+km6hbEY+eVo1Lmcl46rQLwILPS/joRPS7HFw8GYLRYqtW2L
JTNpodXxDm7l6yayA4E+VLfQDCVaCI3XTTWdkfO+4OPq+Y/wsEUCAwEAAaOCAbQw
ggGwMB8GA1UdIwQYMBaAFEhPWvovSppe4FDza3tVpd71vjRdMB0GA1UdDgQWBBS0
JJPMVe5qJL3BH62IqvqcKvKrazAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIw
ADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwZwYDVR0gBGAwXjBSBgwr
BgEEAa4jAQQDAQEwQjBABggrBgEFBQcCARY0aHR0cHM6Ly93d3cuaW5jb21tb24u
b3JnL2NlcnQvcmVwb3NpdG9yeS9jcHNfc3NsLnBkZjAIBgZngQwBAgIwPQYDVR0f
BDYwNDAyoDCgLoYsaHR0cDovL2NybC5pbmNvbW1vbi5vcmcvSW5Db21tb25TZXJ2
ZXJDQS5jcmwwbwYIKwYBBQUHAQEEYzBhMDkGCCsGAQUFBzAChi1odHRwOi8vY2Vy
dC5pbmNvbW1vbi5vcmcvSW5Db21tb25TZXJ2ZXJDQS5jcnQwJAYIKwYBBQUHMAGG
GGh0dHA6Ly9vY3NwLmluY29tbW9uLm9yZzAYBgNVHREEETAPgg1jZWVwci5taXQu
ZWR1MA0GCSqGSIb3DQEBBQUAA4IBAQCNZgN6sHxGz3Gv2z2/DNvqgGiSwEKk/Ywr
ol0D8lr0vngj3mI+sjfiwC2f6G1PS0jEtEjcdeHqZlABeSQ5t0GbK+LuESVSm4x8
xVTFs9e0l+VVr5fud5xc8sFOrBoqOKpyTcNpSZrOZKJlLCfyMKqu+ftR8H3lcsgl
6kj/341SHZvOBomQ82d3wZRFxMgZorBKOS54GDTr+rgZWOS4xSAMGgO/Q1pHg/eC
+XrIIr/Nvd1KLYF+Md5PVp6BHR7gBCkNfoVNIdYrP+Fr83ybz1UKrXLXCePF6NyF
DcgbaxrwbfUljt2mR3nERDMqYvz1L8z4975Nd6TdbJ7oXHOrVYvv
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eMd6VH6+wiz7L2/shIe
2v9hBxy67LeSkGzY1bUIjj+cFq96y38oZXQOateikTKNaOu9bpDahSApuE9eXueW
fgg7UV83FFePcf/2L4uirOGYC17Usr9vJ2VDOZug74XGbXDrsiEyVLg6LV9TcvhS
aph37dziLr3NbddpBi3qHCdoZmwVG8f3eMw8SD/K++RFdU1P0RlkKaKMZQMoxV9J
JDKm7sj+te/teq/jbjA8aA6nfoS4qc36SbqFsRj55WjUuZyXjqtAvAgs9L+OhE9L
scXDwZgtFiq1bYslM2mh1fEObuXrJrIDgT5Ut9AMJVoIjddNNZ2R877g4+r5j/Cw
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36890218192260131343941299237351274251
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02139'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambridge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '77 Massachusetts Ave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Information Services & Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ceepr.mit.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28515614106003450041741408465549402455702739401118922729761475515014768761148780191701227979106040350082518419942152142723921974474494087665792178391403754532059379522922980313618943812334758001316278475368942859200068724822133892247690481899103304019584885167718847419151257255787492572480417370501026084536883884792554957985037688541471542879564991228988320252094630215105198503864631116245773038650175580662883295434592513619440033062142539689002097076057486973071124531734757235749753024954894631722316339169699333279792968905270878044157163016935223545954441680590244603449568858414996816165797124390368777908293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 484f5afa2f4a9a5ee050f36b7b55a5def5be345d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b42493cc55ee6a24bdc11fad88aafa9c2af2ab6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon.org/InCommonServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.incommon.org/InCommonServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.incommon.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceepr.mit.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008d66037ab07c46cf71afdb3dbf0cdbea806892c042a4fd8c2ba25d03f25af4be7823de623eb237e2c02d9fe86d4f4b48c4b448dc75e1ea665001792439b7419b2be2ee1125529b8c7cc554c5b3d7b497e555af97ee779c5cf2c14eac1a2a38aa724dc369499ace64a2652c27f230aaaef9fb51f07de572c825ea48ffdf8d521d9bce068990f36777c19445c4c819a2b04a392e781834ebfab81958e4b8c5200c1a03bf435a4783f782f97ac822bfcdbddd4a2d817e31de4f569e811d1ee004290d7e854d21d62b3fe16bf37c9bcf550aad72d709e3c5e8dc850dc81b6b1af06df5258edda64779c444332a62fcf52fccf8f7be4d77a4dd6c9ee85c73ab558bef