physics.indiana.edu

- Indiana University-Bloomington -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 18:dc:bb:3c:83:c5:79:dd:68:04:ac:36:21:32:ac:4a was issued on by Internet2.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Indiana University-Bloomington

Organization: Indiana University-Bloomington
Organization unit: University Information Technology Services
Address: 107 South Indiana Ave
Postal code: 47405
State / Province: Indiana
Locality: Bloomington
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 18:dc:bb:3c:83:c5:79:dd:68:04:ac:36:21:32:ac:4a
Serial Number (int): 33047574812782546909828070883365923914
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: a7:04:98:1b:eb:08:fc:89:51:ce:87:0a:24:dc:01:aa:cc:a0:dc:bf
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): f3:f4:82:6d:4e:50:4b:92:f4:ef:4f:98:2b:ef:20:63:e3:56:77:d3
Fingerprint (sha256): 00:d9:a1:7b:1d:94:43:60:07:d8:d0:12:90:ba:de:47:0e:fb:f7:eb:7f:3c:72:7a:de:96:94:15:7f:91:f4:45

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate physics.indiana.edu

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for physics.indiana.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

physics.indiana.edu
honors.physics.indiana.edu
www.honors.physics.indiana.edu
www.physics.indiana.edu

Other certificates including the domain name indiana.edu

(limited to 100 certificates)
floorplans.service.indiana.edu
bl-s4b-dirpool.ads.iu.edu
cid.indiana.edu
alumni.indiana.edu
patshih.sice.indiana.edu
opera.imu.indiana.edu
info.educ.indiana.edu
owa.exchange.iu.edu
iuware-test.uits.indiana.edu
sgis.indiana.edu
www.vpfaa.indiana.edu
test.fims.indiana.edu
vole.luddy.indiana.edu
storefront.document.indiana.edu
physics.indiana.edu
mfodev.music.indiana.edu
iuhssis.indiana.edu
kemprd.iuf.indiana.edu
franklin.chem.indiana.edu
list.indiana.edu
iufedocs.iuf.indiana.edu
nwb.slis.indiana.edu
www.cs.indiana.edu
mysite.sp.indiana.edu
uconnectlabs.com
rps.indiana.edu
maps.indiana.edu
sustain.iu.edu
vdi.ait.indiana.edu
www.iumj.indiana.edu
apps.indiana.edu
uconnectlabs.com
read.indiana.edu
iujur.iu.edu
unitedway.indiana.edu
munger.indiana.edu
www.informatics.indiana.edu
iubshutdown.indiana.edu
utilities-dev.registrar.indiana.edu
chemical.inventory.indiana.edu
apps3.indiana.edu
test.pe.registrar.indiana.edu
ccsrv1.psych.indiana.edu
earm.registrar.indiana.edu
fatalii.uits.indiana.edu
ucso.indiana.edu
alumni.indiana.edu
holtzlab.psych.indiana.edu
dev.citl.indiana.edu
iontrap.physics.indiana.edu
ella.ils.indiana.edu
iu-cv-xa7psf-02.uits.indiana.edu
external-relay.indiana.edu
housing.indiana.edu
college.indiana.edu
residency-test.indiana.edu
dev1.igs.indiana.edu
datainnovation.soic.indiana.edu
robotclothes.luddy.indiana.edu
projectdox.vpad.indiana.edu
uconnectlabs.com
josotl.indiana.edu
carina.indiana.edu
kb.indiana.edu
batch.iuf.indiana.edu
test.histdegr.indiana.edu
fast.oem.indiana.edu
uconnectlabs.com
grades.indiana.edu
wsa001.uits.indiana.edu
provost.indiana.edu
echo.uits.indiana.edu
snowy.luddy.indiana.edu
partnership.publichealth.indiana.edu
websurv.indiana.edu
www.document.indiana.edu
rt-spam.uits.indiana.edu
uconnectlabs.com
iumusiclive.jsom.indiana.edu
www.dailyrental.motorpool.indiana.edu
api.insite.indiana.edu
lisa.luddy.indiana.edu
www.repository.law.indiana.edu
alumni.indiana.edu
oemservices.indiana.edu
soco.sice.indiana.edu
key-qa.jsom.indiana.edu
calmweb.chem.indiana.edu
hydrogeochem.earth.indiana.edu
engagedlearning.indiana.edu
bksan2.bus.indiana.edu
monitor1.soic.indiana.edu
lmicdata.bio.indiana.edu
rosvall.lab.indiana.edu
fims.indiana.edu
wiki.dlib.indiana.edu
blog.provost.indiana.edu
dgrc-chris.bio.indiana.edu
bugs.dlib.indiana.edu
drugs.indiana.edu

Certificate

The complete raw certificate details for physics.indiana.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9ICJ4MVGvz2yyLgFVZc
vrDzXBNpsHTXvKYYnRW/5xLQx+uDi/+yMzW2QFC65x/39I5Js4hnS+SoM2HJVjJh
rYS+0a/VuguQtS+N9GbyZmMU+kdcZ+Py35CgYiURlyP2J26U1gvpr5ROUqzKuJtk
8DREcSY8a65V8+GybJN/lyCsjvMrm3Um+PQqeArv9R7oN3hnIMdzoDpP6IM78BnW
ghJD+ocnIIEwelm0owxpzfIhJeTvrCzqHurgmh40G2sHMIIB07ioZZ5BmgYLQkvX
o5rZK91a2UuD26oIULUYhN8IlcXcdryX+Co9RPICcTAQJMfRhF2JaZty+x549jXO
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33047574812782546909828070883365923914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '47405'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '107 South Indiana Ave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana University-Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University Information Technology Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'physics.indiana.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20680402718801337498029927282934683601709924624565918710513429471707795299440975598268107983599407699480376737079832855306487474228769434854452923477186299901934219062567771415793587336421007834719065825244101043344565393504956983367005282970401792472946040632534722548318014500030429442437555143123577435535715353817007266503812778014639119501247117527885978177859112536134292072465285631246290092515821437248744748341121713324637872636853766598824419092661737917254924703332469795628669710362011030870623377781825166105496315139182482499738957081624349876118687342316148102485819971887326853634801332767976787922491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a704981beb08fc8951ce870a24dc01aacca0dcbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physics.indiana.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honors.physics.indiana.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honors.physics.indiana.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.physics.indiana.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004ea1ee09259c570156c76c60c7f474225adf688eefdb413a1341f3b3db3c7ea4cbfd98799b065c8ab659bd4446cc564b682e643334f7b2ffd719c6ae7112c7752fb8c43aa40066703488d7676eba6375bb5bbb4448978bca59bcb9c06a9bcf1e35911db6bdd3fcf0135dd08f5f8c0b7995f75adc6077b7e4f28e6eb183d542bf07782368394a3a57985df83e4a48dd1df3463826a9874e57580ed21dc47b39d22336e9947d7652dfe1587b846a37c28879c7af6dfacf3457fc935bf4c38147378c3411c0bc4d3d8987e0bfa5e947b3fb51e18fa49df244d56de271803f65357e14fdcc93248694c6617d4db98af85f7c2ecc5c2d6bcc6316d4a27a789cc5cd84