*.gsm.ucdavis.edu

- University of California, Davis -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 1c:bc:42:1d:5a:3a:6e:01:17:9f:5e:35:05:4c:9f:85 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of California, Davis

Organization: University of California, Davis
Organization unit: GSM
Address: One Shields Ave
Postal code: 95616
State / Province: CA
Locality: Davis
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:bc:42:1d:5a:3a:6e:01:17:9f:5e:35:05:4c:9f:85
Serial Number (int): 38195876655957034021304848907133296517
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 16:b4:d1:ba:84:84:d9:5d:a5:5e:86:49:9e:fe:ad:b8:1a:95:b6:be
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 72:95:25:72:f0:3e:ea:20:8c:57:e0:86:75:65:0b:71:fb:06:19:8e
Fingerprint (sha256): 00:bf:72:ed:0e:c3:82:e4:bf:ca:fa:02:f6:b9:3f:b9:9a:46:bf:d7:eb:5a:4c:92:7b:77:fc:3d:d2:fd:56:2a

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate *.gsm.ucdavis.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.gsm.ucdavis.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.gsm.ucdavis.edu

Other certificates including the domain name ucdavis.edu

(limited to 100 certificates)
mytravel-apps.ucdavis.edu
health-stage.ucdavis.edu
bml.ucdavis.edu
cwec.ucdavis.edu
renfe.ucdavis.edu
test-web-lws.edu.help
payweb-dev.ucdavis.edu
axiomepm.ucdmc.ucdavis.edu
status.acquia.com
saintly.zeck.net
5719238044024832-fe2.pantheonsite.io
carpepm.almonds.com
developers.dss.ucdavis.edu
us.prod.campusgroups.com
bluefoxstatus.com
secure.vetmed.ucdavis.edu
staging.gifford.ucdavis.edu
numbernine.ucdavis.edu
it.uahs.arizona.edu
5719238044024832-fe2.pantheonsite.io
status.itsnationwide.com
org.ucdavis.edu
wcec.ucdavis.edu
breeze.ucdavis.edu
5733679603122176-fe4.pantheonsite.io
ucdc.edu
dev.cas.ucdavis.edu
status.takemepay.com
5644101080842240-fe2.pantheonsite.io
mobile.ucdavis.edu
5655869022797824-fe2.pantheonsite.io
5648161435549696-fe2.pantheonsite.io
smtp.lib.ucdavis.edu
chertok.physics.ucdavis.edu
ais.ucdavis.edu
5648161435549696-fe2.pantheonsite.io
dual.ucdavis.edu
listings.ucdavis.edu
csiflabs.cs.ucdavis.edu
vidi.cs.ucdavis.edu
www.superfund.ucdavis.edu
*.gsm.ucdavis.edu
cmsi.ucdavis.edu
cntrics.ucdavis.edu
adxstatus.com
linlab.ucdavis.edu
igg.ucdavis.edu
davt-0703-x3-a.ucdmc.ucdavis.edu
5727950116749312-fe4.pantheonsite.io
5756292874371072-fe1.pantheonsite.io
tle.ucdavis.edu
pczt-win-lbk-a1.primate.ucdavis.edu
psa.ucdavis.edu
anthromuseum.ucdavis.edu
5655869022797824-fe2.pantheonsite.io
asucd.ucdavis.edu
vpn.larry.ucdavis.edu
virtuallab.ucdavis.edu
5756292874371072-fe1.pantheonsite.io
scilhsapp01.ucdmc.ucdavis.edu
ces.ucdavis.edu
sfunder9cert.net
streetfilms.org
banner-api.gs.ucdavis.edu
stata.ucdavis.edu
horus.ucdavis.edu
gawsmith.ucdavis.edu
sfunder9cert.net
ceprod.ucdmc.ucdavis.edu
scdev03.ucdavis.edu
tls.automattic.com
banking-business-review.com
5747976207073280-fe2.pantheonsite.io
ionenterprise.ucdavis.edu
forensicscience.ucdavis.edu
cdn-test.battlefields.org
orcid.library.ucdavis.edu
virchow.ucdavis.edu
test.eis.uw.edu
pioneeringpunjabis.ucdavis.edu
linlab.ucdavis.edu
5742636757417984-fe1.pantheonsite.io
cnprc.ucdavis.edu
gap.ucdavis.edu
support.ucdavis.edu
citeak.multidevcom.uaf.edu
www.design-engineering.princeton.edu
bob.cs.ucdavis.edu
placemaking.ucdavis.edu
aphid.ucdavis.edu
securedns.planmygift.org
5699257587728384-fe4.pantheonsite.io
messenger.dss.ucdavis.edu
moraleslab.ucdavis.edu
eu-status.walkme.com
5666083260334080-fe3.pantheonsite.io
wiki.cse.ucdavis.edu
sapep.api.cloud.ucdavis.edu
5666083260334080-fe3.pantheonsite.io
pb2.extensiononline.ucdavis.edu

Certificate

The complete raw certificate details for *.gsm.ucdavis.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeGHU5MHHJGOw7PNdeAF
sYyDfzF06rKjWjPZREiscbrQKFhiLi2MimtVsy0Rz1VXGqbDrbLqHjO3RV2Vr/5G
U3JvZySZ1taT93kLsurhwcPBcdzaPWJwsU2LxgpetvYaPDie/iGTr0dJm87zBUwv
bP3W/z3IIufppXtmYkqL8ZpNu/svry4GENQYzoTFuowxAqhONRBI13YZdtMSR2So
LvVBAq2GOifWwz9qfjJJpIu3VbzwkuL9bJe4kjm5CzooOmG1BbhMRlS/KVHqmjtj
2e5EGDYUAJMQH2S5WPCQtWjArXxQSPNjmyZ9m1iA8RaWAK7VrSuoapUzjH+h4Pzy
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38195876655957034021304848907133296517
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '95616'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Davis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'One Shields Ave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of California, Davis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GSM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gsm.ucdavis.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19425672966771876467958147364124884127183015604172026464849862268159468353009113656217208358505922856139057056329594058415153561882935632191990811354115041365470295311859311890851714559649643671655794658894704226634753028962505348580582089867756441652986285798352329080175896740272329908059478306601474791706413147399620044298549637730528340942938172741213397556188928051432586709607092113068761176946159381411278458127043912571487384235607917104074903187345841020718936993925064879879129470276850256093542847710500320942484885564246773078790489556312745209604840200039745055280430568556827079498352599154429588730503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							16b4d1ba8484d95da55e86499efeadb81a95b6be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsm.ucdavis.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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