bsal.osu.edu

- The Ohio State University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 5f:ae:16:fc:a4:ae:36:95:c9:0f:cf:f4:b9:23:b1:d6 was issued on by Internet2.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Ohio State University

Organization: The Ohio State University
Organization unit: CFAES
Address: 154 W 12th Avenue
Postal code: 43210
State / Province: OH
Locality: Columbus
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5f:ae:16:fc:a4:ae:36:95:c9:0f:cf:f4:b9:23:b1:d6
Serial Number (int): 127180585482426454338744883367607775702
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 9a:2d:12:d4:94:7d:32:96:d7:30:f7:03:05:49:aa:86:25:e2:5b:34
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 3b:b9:5c:3e:12:4c:75:e8:89:57:20:db:ed:31:0d:aa:b2:c5:03:67
Fingerprint (sha256): 00:ec:1d:da:c1:35:49:f0:00:3e:57:98:75:a7:dd:55:cd:b6:9d:c7:13:8c:40:65:97:11:ba:92:7f:92:e4:80

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate bsal.osu.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bsal.osu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bsal.osu.edu
www.bsal.osu.edu

Other certificates including the domain name osu.edu

(limited to 100 certificates)
5757715179634688-fe2.pantheonsite.io
5674248798470144-fe1.pantheonsite.io
ksa-mrbs.webapps.engineering.osu.edu
adams.osu.edu
test-web-lws.edu.help
5719238044024832-fe2.pantheonsite.io
offer.osu.edu
5767917874446336-fe1.pantheonsite.io
5757715179634688-fe2.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
5631986051842048-fe1.pantheonsite.io
acarology.osu.edu
opensource.osu.edu
5719238044024832-fe2.pantheonsite.io
5674248798470144-fe1.pantheonsite.io
5660980839186432-fe2.pantheonsite.io
5646874153320448-fe4.pantheonsite.io
5698125863845888-fe3.pantheonsite.io
5769720821186560-fe3.pantheonsite.io
ucdc.edu
history.osu.edu
5644101080842240-fe2.pantheonsite.io
5687379545292800-fe2.pantheonsite.io
5722152447770624-fe1.pantheonsite.io
nartc.fcm.arizona.edu
ksa-mrbs.webapps.engineering.osu.edu
5732910535540736-fe1.pantheonsite.io
5722152447770624-fe1.pantheonsite.io
socrates.osu.edu
costume.osu.edu
5676201666412544-fe3.pantheonsite.io
bsal.osu.edu
*.webtest.osu.edu
5672591746400256-fe3.pantheonsite.io
ksa-mrbs.webapps.engineering.osu.edu
5662543133540352-fe4.pantheonsite.io
cse.engineering.osu.edu
5722152447770624-fe1.pantheonsite.io
tbi.osu.edu
5690257819303936-fe4.pantheonsite.io
alkireproject.osu.edu
skullbase.osu.edu
5740745361195008-fe4.pantheonsite.io
insight.tk20.ehe.osu.edu
ksa-mrbs.webapps.engineering.osu.edu
5696381570252800-fe2.pantheonsite.io
5668753656250368-fe1.pantheonsite.io
5741031244955648-fe4.pantheonsite.io
preble.osu.edu
5676201666412544-fe3.pantheonsite.io
5707725409353728-fe2.pantheonsite.io
test.eis.uw.edu
5734743547052032-fe3.pantheonsite.io
legacypaydocs.osu.edu
chembio.osu.edu
heroesproject.osu.edu
tas.osu.edu
ksa-mrbs.webapps.engineering.osu.edu
www.design-engineering.princeton.edu
5677751478517760-fe2.pantheonsite.io
intranet.odee.osu.edu
heartlung.osu.edu
cfaes.osu.edu
5672591746400256-fe3.pantheonsite.io
5666083260334080-fe3.pantheonsite.io
iam-pamprd-db01.bcd.it.osu.edu
internalmedicine.osu.edu
5696381570252800-fe2.pantheonsite.io
nxterra.ucop.edu
5769720821186560-fe3.pantheonsite.io
buckeyelink3.osu.edu
5676982813589504-fe1.pantheonsite.io
5757715179634688-fe2.pantheonsite.io
5182915545661440-fe2.pantheonsite.io
5676201666412544-fe3.pantheonsite.io
ehe.osu.edu
tk20.ehe.osu.edu
ksa-mrbs.webapps.engineering.osu.edu
5726348362383360-fe3.pantheonsite.io
bme.osu.edu
5711637696741376-fe4.pantheonsite.io
mae.osu.edu
5665925286068224-fe2.pantheonsite.io
api.agg-qa.webtest.osu.edu
buckeyeturf.osu.edu
ehistory.osu.edu
akips01.coeit.osu.edu
5668753656250368-fe1.pantheonsite.io
www.hcii.cs.cmu.edu
5631986051842048-fe1.pantheonsite.io
tk20.ehe.osu.edu
advancementintranet.osu.edu
5662543133540352-fe4.pantheonsite.io
www.blogs.earthjustice.org
gisprtprd01.bcd.it.osu.edu
5722152447770624-fe1.pantheonsite.io
artsandsciences.osu.edu
bpte.osu.edu
*.nursing.osu.edu
suicideprevention.osu.edu

Certificate

The complete raw certificate details for bsal.osu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uCHPE4nzezQxi664V3D
wS1yv73yq8PfFidm8pMvl4WH/K+V+3qiBrB42iFABuwrbDt38211ieNJ1PdeUxaw
1XnrS5jy0ee+4NSkdlBqR0SQ6Kj5q+0PX8OIBaD9un3zMNF9V9B0zuPNNQa3/aGP
M7teS9v+mXOekD5CVqYb6AAX8TWlW35HS1GiZStc5YFv6r1Q+0BsRq4kEzhgPJTM
c3pVaroMS/dqcGe6bICYVpRpuGb5+SWY9Pwumfe2CVB5BY7CDW7fsepMwxVh1PPc
1XLM2wn1H5EoIDSgeuzsq8w2fooiLnOuD2Ly/hwEBHwqIVCVwnD8pRepMxDQ3YaJ
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 127180585482426454338744883367607775702
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '43210'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbus'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '154 W 12th Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Ohio State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CFAES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bsal.osu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27125716276237419795644908543409029961282182787424616300153027881971223626174926676286177479030108767039943616739159210765785887924434582014640918789018201685418639753831539885021635632716042103146687987424729114766147926814277452156276926644462007459681995066443098902732280981962451713254179234295658564806332806462591532672338171561400085978769920662991248166606064037701841971005287885378326859433130542671083074792111701760535882443762528412174924635234094106120897216753476215663589446125436438997841240891168488378718815676683633029222178889877671147794058010322360487815278685797680254276633392335206708840791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a2d12d4947d3296d730f7030549aa8625e25b34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsal.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsal.osu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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