www.sfsu.edu

- San Francisco State University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 22:9c:e1:d2:22:37:cb:b6:a2:02:ab:46:f6:b0:b4:38 was issued on by Internet2.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

San Francisco State University

Organization: San Francisco State University
Organization unit: Information Technology Services
Address: 1600 Holloway Avenue
Postal code: 94132
State / Province: CA
Locality: San Francisco
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 22:9c:e1:d2:22:37:cb:b6:a2:02:ab:46:f6:b0:b4:38
Serial Number (int): 46008330357283465673518542652399727672
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 5d:ce:f9:bb:22:1a:fe:b9:d6:90:d4:bb:ee:cf:7e:f5:30:6a:25:56
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 70:0c:fd:6c:a5:49:e7:a0:75:ca:ae:c4:de:7d:fe:b7:49:7e:b1:c2
Fingerprint (sha256): 01:12:b6:e2:a2:f0:09:3f:d3:d8:7a:ff:00:cd:74:6f:80:cb:1c:7f:c4:1e:3a:09:8e:f3:1f:2b:9c:e2:48:fa

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate www.sfsu.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sfsu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sfsu.edu
sfsu.edu

Other certificates including the domain name sfsu.edu

(limited to 100 certificates)
5638059940904960-fe3.pantheonsite.io
5712793714032640-fe1.pantheonsite.io
5653294995210240-fe3.pantheonsite.io
webapps.sfsu.edu
5769623379116032-fe2.pantheonsite.io
5693048138760192-fe2.pantheonsite.io
5658044692168704-fe3.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
5638059940904960-fe3.pantheonsite.io
counseling.sfsu.edu
5675573259010048-fe3.pantheonsite.io
budget.sfsu.edu
it.uahs.arizona.edu
sfsu.edu
5698125863845888-fe3.pantheonsite.io
5689792285114368-fe2.pantheonsite.io
5712272949248000-fe3.pantheonsite.io
5702351037923328-fe2.pantheonsite.io
5733679603122176-fe4.pantheonsite.io
5727217287954432-fe1.pantheonsite.io
5638059940904960-fe3.pantheonsite.io
5693048138760192-fe2.pantheonsite.io
5638916786880512-fe1.pantheonsite.io
fawebp.sfsu.edu
5691420614590464-fe3.pantheonsite.io
5709068098338816-fe3.pantheonsite.io
nartc.fcm.arizona.edu
5752142325350400-fe1.pantheonsite.io
5730602795925504-fe1.pantheonsite.io
5730774057746432-fe4.pantheonsite.io
5763210187636736-fe2.pantheonsite.io
5700866052980736-fe2.pantheonsite.io
5752142325350400-fe1.pantheonsite.io
5658962204557312-fe4.pantheonsite.io
5736907271045120-fe1.pantheonsite.io
5763210187636736-fe2.pantheonsite.io
5659822271758336-fe3.pantheonsite.io
www.sfsu.edu
5650082896543744-fe3.pantheonsite.io
5769623379116032-fe2.pantheonsite.io
5689792285114368-fe2.pantheonsite.io
site-staging.sfsu.edu
5736907271045120-fe1.pantheonsite.io
5709068098338816-fe3.pantheonsite.io
5731346630574080-fe3.pantheonsite.io
5767409591910400-fe4.pantheonsite.io
5728757302165504-fe2.pantheonsite.io
intranet.chss.sfsu.edu
5751399832879104-fe1.pantheonsite.io
5673309542809600-fe1.pantheonsite.io
facilities.sfsu.edu
5673309542809600-fe1.pantheonsite.io
5650082896543744-fe3.pantheonsite.io
bidal.sfsu.edu
5630239073894400-fe2.pantheonsite.io
5639026912526336-fe4.pantheonsite.io
dart.sfsu.edu
5727517264576512-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5767409591910400-fe4.pantheonsite.io
5727217287954432-fe1.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
5675052494225408-fe2.pantheonsite.io
citeak.multidevcom.uaf.edu
5639026912526336-fe4.pantheonsite.io
5728757302165504-fe2.pantheonsite.io
www.design-engineering.princeton.edu
coursestream.sfsu.edu
web.sfsu.edu
5675573259010048-fe3.pantheonsite.io
5714163003293696-fe1.pantheonsite.io
website-staging.sfsu.edu
nxterra.ucop.edu
5672889575538688-fe1.pantheonsite.io
5709068098338816-fe3.pantheonsite.io
5639026912526336-fe4.pantheonsite.io
5653294995210240-fe3.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5666823336886272-fe4.pantheonsite.io
5754903989321728-fe2.pantheonsite.io
5660765553950720-fe1.pantheonsite.io
5714163003293696-fe1.pantheonsite.io
5754903989321728-fe2.pantheonsite.io
5714163003293696-fe1.pantheonsite.io
creativewriting.sfsu.edu
5712453606309888-fe4.pantheonsite.io
5658044692168704-fe3.pantheonsite.io
5650082896543744-fe3.pantheonsite.io
5754079087165440-fe4.pantheonsite.io
5675573259010048-fe3.pantheonsite.io
5702351037923328-fe2.pantheonsite.io
www.hcii.cs.cmu.edu
chns120.courseresource.yale.edu
oip.sfsu.edu
5696605713858560-fe4.pantheonsite.io
5673309542809600-fe1.pantheonsite.io
5696459148099584-fe4.pantheonsite.io
208.lsnc.net

Certificate

The complete raw certificate details for www.sfsu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoil6/JIJq1UGHcob9oYq
qFEfUuv0J4J96iMBAwnkzSi+IU8Tr0jNTqyo73qRBiA6v4KQJYU7y6otfNfFWRcd
fd0ZtGtkgOvCPRIGgVYbRTsUxYgmP0OMsKs5gT2+F9C6yxzEhk3dx3AUkcR5e7UN
YyTksIUsLcaq5SK130i/ZE4ngrd1uYeslAh43yqbGNCimqSTjgA3CFXUNjRGHogB
4nIOn8bQ/ZIMYCbhSFEdB0xHr5fSluDwwY9IyPVkXzyzPLJ9ZLDv18ryT/CmJCOi
0s1RPcaVMhJ8b5bfndsWASFx5Id1yVJixeS2GoQRWzoDKK0WZX0l9o/tVpL0xdhB
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 46008330357283465673518542652399727672
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '94132'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1600 Holloway Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sfsu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20471060160197074690361221262798789126953506520840284065128137869601155078748350520440347237578167297047761390399753323328420014486677892988071701097149986404684521107876517618425815077407908512008205722152293017906338874451099015923730886163451604075752304286920653361771132863068341374702011289723611889005054903854720566797901910210270873629053963738252820759604353077919148179413763993565616458130862450980042307965439113710783299031112523331165964364186748944249844337762550408515771254639449083071522445675449850249807860078999646331632197262483986513391557483775306117969547819053543969497532224783761851040111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5dcef9bb221afeb9d690d4bbeecf7ef5306a2556
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfsu.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0053cd5f53a72a7c5dd0790d628b24284ae86b023f5c7944f6ce5bda05b11fedad8314cf02c1374da4163e535c629622e9a5279e07d0eb595b2ec29b0aa616f3b103ba0549d4bef6b2e9b81c32d0256d0246d898bd88d9088066b3324fb76ce0add9c34ea5911f1fef7e8f3af25e5df4be81de7781461e069c00c99aefbaacb7d8e89d6aa7548cb1fc3f5a90e7accb83a1bbfa9d3792938a0c8139522755a8870bf9ee543a0522c4f3c7b222421f098dd663639a2f7345ff42bfa017da38f6f305f4a2c411cce59c60bdf91b4551b1327c8ef8e1644d774ab00f49942b0c10b3574cf457b7b3f341e0e6c56cef0b4869cba344bb71053c70931eb4310c6cb8e1e0