ishi.earth.northwestern.edu

- Northwestern University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 05:49:00:b7:ba:fa:6f:cd:f2:a7:eb:26:21:cb:1b:3a was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Northwestern University

Organization: Northwestern University
Organization unit: NU - WCAS
Address: 633 Clark Street
Postal code: 60208
State / Province: Illinois
Locality: Evanston
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:49:00:b7:ba:fa:6f:cd:f2:a7:eb:26:21:cb:1b:3a
Serial Number (int): 7025192206218333155196717496837806906
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 17:97:ab:81:f8:43:88:d4:dd:1a:2c:59:31:6e:53:d7:0c:3c:71:7f
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 54:b7:46:bf:87:40:ac:29:c6:48:a5:cf:5b:76:3f:a3:e8:da:be:93
Fingerprint (sha256): 00:cc:bd:2c:6e:ef:1e:66:5c:11:51:b7:17:86:5a:f7:c2:36:de:40:4b:c0:b4:9c:1f:73:91:80:67:97:e0:a4

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate ishi.earth.northwestern.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ishi.earth.northwestern.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ishi.earth.northwestern.edu

Other certificates including the domain name northwestern.edu

(limited to 100 certificates)
evcasper.ci.northwestern.edu
zfsmweb02.fsm.northwestern.edu
*.soc.northwestern.edu
hub.mmlc.northwestern.edu
idmspqa5.ci.northwestern.edu
degree.ai.northwestern.edu
askplrc.law.northwestern.edu
faoadmin-dev.api.fsm.northwestern.edu
carpepm.almonds.com
catalyst-sync-gateway.fsm.northwestern.edu
account-inventory-dev.entapp.northwestern.edu
ssl6901.cloudflare.com
ct-stem.northwestern.edu
cps.northwestern.edu
secure.ard.northwestern.edu
boshercollection.northwestern.edu
5707931811053568-fe1.pantheonsite.io
osep.northwestern.edu
web.madstudio.northwestern.edu
degree.robotics.northwestern.edu
www.alumni.northwestern.edu
tls.automattic.com
sesdlab.northwestern.edu
fed.it.northwestern.edu
admissions.emeritus.org
badges.gmac.com
websso.it.northwestern.edu
teenshealth.qatar.northwestern.edu
cluster.technolutions.net
lingwebx.ci.northwestern.edu
lyncedge.northwestern.edu
medillwatchdog.medill.northwestern.edu
buddhist-art.arthistory.northwestern.edu
nubio.northwestern.edu
nextcloud.sesp.northwestern.edu
scientificpractices.sesp.northwestern.edu
gallery.kellogg.northwestern.edu
dev-websso.it.northwestern.edu
calendar.sdzsafaripark.org
sec-pagely.at.northwestern.edu
ishi.earth.northwestern.edu
lcanresearch.northwestern.edu
dialects.soc.northwestern.edu
evcsdskypse1.adsdev.northwestern.edu
cspac.eecs.northwestern.edu
catracks-dev.northwestern.edu
www.nsis-train.northwestern.edu
childlab.northwestern.edu
tls.automattic.com
labmail.misitlab.northwestern.edu
features.qatar.northwestern.edu
abct.ebbp.northwestern.edu
nuplansqa.northwestern.edu
ssl371003.cloudflaressl.com
lfeev.adsdev.northwestern.edu
apply.music.northwestern.edu
5693200475881472-fe2.pantheonsite.io
nuqcsptmg.qatar.northwestern.edu
tqn.sesp.northwestern.edu
slpd.northwestern.edu
sesp.northwestern.edu
www6.kellogg.northwestern.edu
ansys.mccormick.northwestern.edu
obprodrest.ci.northwestern.edu
ldapqa1.ci.northwestern.edu
ecocasting.northwestern.edu
cms7test2012.kellogg.northwestern.edu
sec-pagely.at.northwestern.edu
cdn-test.battlefields.org
zfsmweb01.fsm.northwestern.edu
ozzie.traffic.northwestern.edu
nuhr.northwestern.edu
vmath.northwestern.edu
ilabcentral.sesp.northwestern.edu
eecs211.cs.northwestern.edu
liszt.northwestern.edu
parisprogram.northwestern.edu
www.mccormick.northwestern.edu
citeak.multidevcom.uaf.edu
illinoisjudges.law.northwestern.edu
compphotolab.northwestern.edu
kisb21a.kellogg.northwestern.edu
securedns1.planmygift.org
securedns1.planmygift.org
chhr92uatibweb1.ci.northwestern.edu
orfa.northwestern.edu
webssodev-vip.ci.northwestern.edu
bora.cs.northwestern.edu
badges.gmac.com
argallab.northwestern.edu
gabrielse.physics.northwestern.edu
allancollins.northwestern.edu
biology.northwestern.edu
ecstest.entapp.northwestern.edu
uec.adea-cloud.northwestern.edu
courses1.northwestern.edu
www.cfp.physics.northwestern.edu
crs-dev.fsm.northwestern.edu
musictherapy.soc.northwestern.edu
www.jlsp.law.northwestern.edu

Certificate

The complete raw certificate details for ishi.earth.northwestern.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh2jwg1jpBtcdigT3TXP
gokw0z3QspAlMf7+j+lA8Oz2qPDPYynNyrA9WzYkPDHEcLs+VunRkonT+2aKSSPB
G1AyPav7HM5XokjZiNDiMAc7DIGfVt58ueGTk4uDlnH9yLJaHbiH83xxDPaTyoEj
8Es62MMct4mDCdLi9+3qY9Ga99/Xcip7LFzR29YMRUOO+bJ355axdennLgOZlOcG
KAKGhA0VNjBmGZNQ5w5iMLqoVXagvIiWvJIJEhaJA7UVgbZt+IlUJhPjrznNyxzm
mcHJUC/VVxNckGOx7v01TnqIsEQaJm1zwjfvDXpcOn7LZf/kWV7qtOad2c9aMd8a
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7025192206218333155196717496837806906
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '60208'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Evanston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '633 Clark Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Northwestern University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NU - WCAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ishi.earth.northwestern.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25009800254106845284815190758454993754500145825309741280708961835215249529943355759371597729051504706246593776244984042609564799385743882173553986146970753368294401150705010147260385234163958701795887742714528585047261527816911464454183599663509822895863938403659805416813000039405026004754336516055926761896951876717692659879035454857634835154209617141450789800759022624345322679332366735861339769443849631538846137930766193326229877905479253903594324762047217069987064782018303601076755772801487081131353169846363188574907358733635600573534621543193826406091708278771096768690365637948980337272631925397553416182481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1797ab81f84388d4dd1a2c59316e53d70c3c717f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ishi.earth.northwestern.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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