noble-web.gs.washington.edu

- University of Washington -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 7f:33:1e:85:c3:cf:01:1a:07:50:64:97:cb:32:be:88 was issued on by Internet2.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Washington

Organization: University of Washington
Organization unit: UW-IT
Address: 4545 15th Ave NE
Postal code: 98195
State / Province: WA
Locality: Seattle
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7f:33:1e:85:c3:cf:01:1a:07:50:64:97:cb:32:be:88
Serial Number (int): 169077381674703145777439547513382289032
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 3a:9f:1b:5b:83:2c:81:38:67:74:da:39:7d:a0:a4:ec:fe:30:b0:da
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 68:21:df:a4:21:f9:f2:14:9a:20:a8:49:9b:3b:c6:1c:f9:8d:ab:1a
Fingerprint (sha256): 00:fd:05:b6:68:34:c8:42:e7:b9:bc:f8:5b:55:5a:82:d3:e3:a8:2b:f1:39:94:73:5b:98:58:1a:e5:b8:bc:04

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate noble-web.gs.washington.edu

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for noble-web.gs.washington.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

noble-web.gs.washington.edu
clic1.gs.washington.edu
noble.gs.washington.edu
rankprop.gs.washington.edu

Other certificates including the domain name washington.edu

(limited to 100 certificates)
isntsis-lb.cac.washington.edu
omiist3.dom.washington.edu
*.pages.cs.washington.edu
test-web-lws.edu.help
gsoutreach.gs.washington.edu
mail.radonc.washington.edu
www7.bookstore.washington.edu
vpn11.netid.washington.edu
practicum.sphcm.washington.edu
uwpndesktop.medical.washington.edu
dev.edgh.washington.edu
orca-test.medical.washington.edu
cmms.admin.washington.edu
myuw.washington.edu
transfer.radonc.washington.edu
a.davinci.cs.washington.edu
ucdc.edu
epic-careev-p1.medical.washington.edu
nartc.fcm.arizona.edu
v-devsp2016-00.hfs.washington.edu
hs-infmon-svr01.hsa.washington.edu
misl.cs.washington.edu
uwir.org
noble-web.gs.washington.edu
dedip.filesanywhere.com
pfinder.apl.uw.edu
dedip.filesanywhere.com
cspc.admin.washington.edu
burkemuseum.org
uwcf-atg-2.infra.washington.edu
bioengineering.uw.edu
uconnectlabs.com
suinlee.cs.washington.edu
rumba.admin.washington.edu
test.eis.uw.edu
secure.medical.washington.edu
tcmrrc.rad.washington.edu
portal.cfr.washington.edu
5687539843203072-fe2.pantheonsite.io
5687539843203072-fe2.pantheonsite.io
uwnetid.washington.edu
uconnectlabs.com
offcampus.lib.washington.edu
uwws-wgb-01.infra.washington.edu
dev.uwhires.washington.edu
dev.healthdata.org
stagelaps.bschool.washington.edu
team.sphcm.washington.edu
vostok.deohs.washington.edu
mailman1.u.washington.edu
epic-hsw-prod.medical.washington.edu
stream.radonc.washington.edu
www.dental.washington.edu
mailmandev1.u.washington.edu
tango.admin.washington.edu
uwmconcall.medical.washington.edu
alumni.globalhealth.washington.edu
test-webservices.medical.washington.edu
wish.washington.edu
dedip.filesanywhere.com
*.event.uw.edu
prod.1.slot.cdn.salesforce-communities.com
wiki.ee.washington.edu
clime.washington.edu
orca-njb-element.mcis.washington.edu
oarstest.ehs.washington.edu
deeprl.cs.washington.edu
olio.cs.washington.edu
www.hfs.washington.edu
abc.washington.edu
asa-is-web-01.asa.uw.edu
*.rpxnow.com
208.lsnc.net
*.mail.cs.washington.edu
*.stat.washington.edu
engage3.campuslabs.com
uwpctc.org
uwt-epic-test1-tst.medical.washington.edu
acws-wgb-01.infra.washington.edu
5687539843203072-fe2.pantheonsite.io
wish.washington.edu
fs2k.ciso.washington.edu
wikisrv.gs.washington.edu
www2.bookstore.washington.edu
wario.s.uw.edu
www.alz.washington.edu
www.com.washington.edu
development.moodlerooms.com
memory.ocean.washington.edu
development.ooica.net
davinci.cs.washington.edu
sdb.admin.washington.edu
virtual2.unlv.edu
waldo.deohs.washington.edu
research-pp.stonybrook.edu
primus.gs.washington.edu
himcac-test.medical.washington.edu
resource.gifts.washington.edu
salsa1.u.washington.edu
wish.washington.edu

Certificate

The complete raw certificate details for noble-web.gs.washington.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50iR10xa+OszlYgNDXiB
pQ7/maDZRxOLU9602T1w4yAvL+V9cEaOEOvYI5PKeTqEE0wAZx0p4m5RBnQKuHpS
BPPontLIcHSq0bOkpJ/mClFD0heCqNwXqkK+Fyhop5QS9YiL61WvXy6f0uT+cYgT
fC6DklC6zvwGADWKXif7gYYUaJmeVXaxyvk+X+F7gFYMpHgWyikj9NF1G1lwYSK5
NsjZIlAj8ih3NEj3wfoxwhCggkG6AArViz6D0llSEQ4TE8jcbLzUReVMsTNJufY1
0jtAvyXaDcf69JmSZkCLWf0HgVjKM/2GdcGgp58fEZqNtjyNpcVU1eeH2Q4PCKXG
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 169077381674703145777439547513382289032
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '98195'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seattle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4545 15th Ave NE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UW-IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'noble-web.gs.washington.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29196833895750925675861472245329162577611478810086714011089590560722253975558089606667905172236258887228142338304099498040932983735103852248675326970612079426620842750150952119988456038623172572497463094475358152019104840057767026112520961763847534022235834517278437754480626344457369561244103288638419103046827346568037640102962107438028707451183072685515494144244559911912156468301195498379372913606187375253176996358885766381778782516704898290928196622028777184568349689424687617126938754233471108295901681142027056705770040422415118279614916708274265510031318071391474683156822083916941649792103908948142205552309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a9f1b5b832c81386774da397da0a4ecfe30b0da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noble-web.gs.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clic1.gs.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noble.gs.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rankprop.gs.washington.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001f3c10a6652b1c5185d36aa313b6a0974273a8502f3f0c53c21739d51a003be6d1d23842d42aec089377e43b853722d27b759c4d06ae684bd22d2a17fe894b3cc29248b749f21982acc083ea8c4e746c32324df055cc5bef065c04500c717d85ad10a363d82659e0b12b94f9d0427716276cfc5c5c65b63e7a6122bd69ce60dbe84f2d0dbd2aaba415123a8fc1e8cf5fbe4c4c483b2dc6a5180478031370a4488ef28dc37f0ba53153fd8e6579e02d8d4cc8678cf73030b2838fb4fa8d5a36200907db22a14d82b03a347fabe83d22da8d716d1f36444ef85836ec8d9caf62a9b8afaf959d9472dbbbf8af1280573787973cdeda2b0554ec4dc50eeb8a32db82