gallery.kellogg.northwestern.edu

- Northwestern University -

Issued by InCommon Server CA

About this certificate

This digital certificate with serial number 43:12:26:7f:c4:3f:46:7b:a8:b9:ff:69:da:ff:09:05 was issued on by Internet2.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Northwestern University

Organization: Northwestern University
Organization unit: NU - Kellogg
Address: 2001 Sheridan Rd
Postal code: 60208
State / Province: IL
Locality: Evanston
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 43:12:26:7f:c4:3f:46:7b:a8:b9:ff:69:da:ff:09:05
Serial Number (int): 89152517915320125555296312897017153797
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ef:f2:5a:b6:d9:b7:40:81:25:fc:0e:23:59:80:f5:06:15:f8:a8:d7
AuthorityKeyId: 48:4f:5a:fa:2f:4a:9a:5e:e0:50:f3:6b:7b:55:a5:de:f5:be:34:5d

Fingerprint (sha1): 89:13:63:e8:60:6d:bf:07:8c:b8:d7:49:38:14:7e:61:2f:55:00:f2
Fingerprint (sha256): 00:c6:0d:1e:ca:37:08:ab:ba:a7:c0:09:04:a6:c7:df:bc:25:fc:42:31:24:9b:67:27:2c:a8:13:f0:cd:fb:72

Issuing Certificate URL: http://cert.incommon.org/InCommonServerCA.crt

Revocation information

OCSP Server: http://ocsp.incommon.org
CRL Distribution Point: http://crl.incommon.org/InCommonServerCA.crl

Check the revocation status for certificate gallery.kellogg.northwestern.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gallery.kellogg.northwestern.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gallery.kellogg.northwestern.edu
ksmb34.kellogg.northwestern.edu

Other certificates including the domain name northwestern.edu

(limited to 100 certificates)
evcasper.ci.northwestern.edu
zfsmweb02.fsm.northwestern.edu
*.soc.northwestern.edu
hub.mmlc.northwestern.edu
idmspqa5.ci.northwestern.edu
degree.ai.northwestern.edu
askplrc.law.northwestern.edu
faoadmin-dev.api.fsm.northwestern.edu
carpepm.almonds.com
catalyst-sync-gateway.fsm.northwestern.edu
account-inventory-dev.entapp.northwestern.edu
ssl6901.cloudflare.com
ct-stem.northwestern.edu
cps.northwestern.edu
secure.ard.northwestern.edu
boshercollection.northwestern.edu
5707931811053568-fe1.pantheonsite.io
osep.northwestern.edu
web.madstudio.northwestern.edu
degree.robotics.northwestern.edu
www.alumni.northwestern.edu
tls.automattic.com
sesdlab.northwestern.edu
fed.it.northwestern.edu
admissions.emeritus.org
badges.gmac.com
websso.it.northwestern.edu
teenshealth.qatar.northwestern.edu
cluster.technolutions.net
lingwebx.ci.northwestern.edu
lyncedge.northwestern.edu
medillwatchdog.medill.northwestern.edu
buddhist-art.arthistory.northwestern.edu
nubio.northwestern.edu
nextcloud.sesp.northwestern.edu
scientificpractices.sesp.northwestern.edu
gallery.kellogg.northwestern.edu
dev-websso.it.northwestern.edu
calendar.sdzsafaripark.org
sec-pagely.at.northwestern.edu
ishi.earth.northwestern.edu
lcanresearch.northwestern.edu
dialects.soc.northwestern.edu
evcsdskypse1.adsdev.northwestern.edu
cspac.eecs.northwestern.edu
catracks-dev.northwestern.edu
www.nsis-train.northwestern.edu
childlab.northwestern.edu
tls.automattic.com
labmail.misitlab.northwestern.edu
features.qatar.northwestern.edu
abct.ebbp.northwestern.edu
nuplansqa.northwestern.edu
ssl371003.cloudflaressl.com
lfeev.adsdev.northwestern.edu
apply.music.northwestern.edu
5693200475881472-fe2.pantheonsite.io
nuqcsptmg.qatar.northwestern.edu
tqn.sesp.northwestern.edu
slpd.northwestern.edu
sesp.northwestern.edu
www6.kellogg.northwestern.edu
ansys.mccormick.northwestern.edu
obprodrest.ci.northwestern.edu
ldapqa1.ci.northwestern.edu
ecocasting.northwestern.edu
cms7test2012.kellogg.northwestern.edu
sec-pagely.at.northwestern.edu
cdn-test.battlefields.org
zfsmweb01.fsm.northwestern.edu
ozzie.traffic.northwestern.edu
nuhr.northwestern.edu
vmath.northwestern.edu
ilabcentral.sesp.northwestern.edu
eecs211.cs.northwestern.edu
liszt.northwestern.edu
parisprogram.northwestern.edu
www.mccormick.northwestern.edu
citeak.multidevcom.uaf.edu
illinoisjudges.law.northwestern.edu
compphotolab.northwestern.edu
kisb21a.kellogg.northwestern.edu
securedns1.planmygift.org
securedns1.planmygift.org
chhr92uatibweb1.ci.northwestern.edu
orfa.northwestern.edu
webssodev-vip.ci.northwestern.edu
bora.cs.northwestern.edu
badges.gmac.com
argallab.northwestern.edu
gabrielse.physics.northwestern.edu
allancollins.northwestern.edu
biology.northwestern.edu
ecstest.entapp.northwestern.edu
uec.adea-cloud.northwestern.edu
courses1.northwestern.edu
www.cfp.physics.northwestern.edu
crs-dev.fsm.northwestern.edu
musictherapy.soc.northwestern.edu
www.jlsp.law.northwestern.edu

Certificate

The complete raw certificate details for gallery.kellogg.northwestern.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+YkKMuf/aGcSKqg0ENn
kxI3GYLWBTwvrTAjYLsPF2ZfEmoYRrj5zI/93NmLcrMFHqj1qxhJ3NQmwgbzWruZ
TVIyY6tqRvyfE4/yKiDg5hhAlG9mPO2VU9A7cp/cYETLk/lIkzL+ct1em37zQuJh
JJo965L2xTz83Gmo++d1s49T4uM2I3CZLK3H36gp8dkyp86tYK50PbMA6lyZLfuF
icMaND2Qa4fkSwl9RZYKEKSgHuGl4+G4uDU/pGCp9wu8ij94xOnPiCveaaLlS+ng
vqO8n3anqF9472OlM/PMvjaFPket2UOdNA1MfD7GDSFogfelnCpGj5TthGBvqwK1
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 89152517915320125555296312897017153797
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '60208'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Evanston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2001 Sheridan Rd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Northwestern University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NU - Kellogg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gallery.kellogg.northwestern.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21195283808182295867081532093040116166390753890676665174998313618157214529801399354303816283536952306950649599001139970002939824708115684584413900115757306847730577494363090608548935612726002608764315348570158999905343900979535282524398857608463248118850266369044909242180717711131377771573180413133061138465759155185003130241354218972642167424360426396986006047273484371047746076586759032128095713144478437111392541006915628556881298020771577838951316337806259333901304258659427376456399762759569521367871349897195096044323508688851919945125422596802523823018114785910421720619880740890715739753703848139307771671909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 484f5afa2f4a9a5ee050f36b7b55a5def5be345d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eff25ab6d9b7408125fc0e235980f50615f8a8d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon.org/InCommonServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.incommon.org/InCommonServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.incommon.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallery.kellogg.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksmb34.kellogg.northwestern.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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