secure.identity.ucsb.edu

- University of California, Santa Barbara -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 2c:26:94:4c:f4:15:56:78:f7:7f:ec:7f:c7:df:b4:45 was issued on by Internet2.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of California, Santa Barbara

Organization: University of California, Santa Barbara
Organization unit: SSL Management
Address: 5221 Cheadle Hall
Postal code: 93106
State / Province: California
Locality: Santa Barbara
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2c:26:94:4c:f4:15:56:78:f7:7f:ec:7f:c7:df:b4:45
Serial Number (int): 58686346988662451582545223514494841925
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 31:63:f7:8f:90:4e:41:be:05:75:3a:19:72:e2:0f:af:53:86:a0:f5
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 7e:37:e4:72:09:02:fe:8b:98:ae:6f:24:e3:37:47:44:81:60:29:8f
Fingerprint (sha256): 01:1c:c0:65:96:bd:2f:62:e3:d3:6e:a1:66:5c:4a:ca:1d:7f:d6:81:74:ba:d7:44:f5:18:d0:9e:cb:c9:04:17

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate secure.identity.ucsb.edu

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.identity.ucsb.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.identity.ucsb.edu
identity.ucsb.edu
ticket-submission.identity.ucsb.edu
www.identity.ucsb.edu

Other certificates including the domain name ucsb.edu

(limited to 100 certificates)
flour.ece.ucsb.edu
physics.ucsb.edu
wepawet.cs.ucsb.edu
5665833682468864-fe1.pantheonsite.io
hrsweb-kx.housing.ucsb.edu
bic03.bic.ucsb.edu
carpepm.almonds.com
idm.my.ucsb.edu
ictf.cs.ucsb.edu
us.prod.campusgroups.com
github.nceas.ucsb.edu
5715605172781056-fe1.pantheonsite.io
leadership.sa.ucsb.edu
learning.nceas.ucsb.edu
5719721496281088-fe4.pantheonsite.io
studentvisa.test.sa.ucsb.edu
5729821648748544-fe1.pantheonsite.io
securessl-pst1.tessituranetworkhost.com
www.csmd.ucsb.edu
ucdc.edu
5680534013345792-fe1.pantheonsite.io
us.prod.campusgroups.com
rotabullstatus.com
www.ece.ucsb.edu
nartc.fcm.arizona.edu
5704093720903680-fe2.pantheonsite.io
api-status.360cities.net
5762637883244544-fe3.pantheonsite.io
ucen.ucsb.edu
5661530653720576-fe2.pantheonsite.io
5715605172781056-fe1.pantheonsite.io
api-status.360cities.net
math.ucsb.edu
5703789046661120-fe2.pantheonsite.io
aurora.nceas.ucsb.edu
www.ascidiancenter.ucsb.edu
microscopy.nri.ucsb.edu
5665370564198400-fe2.pantheonsite.io
donelan.faculty.writing.ucsb.edu
history.ucsb.edu
checkrstatus.com
eci.ucsb.edu
support.nceas.ucsb.edu
5755164371714048-fe3.pantheonsite.io
5654961308303360-fe2.pantheonsite.io
housing.ucsb.edu
info.resnet.ucsb.edu
secure.identity.ucsb.edu
www.mcdb.ucsb.edu
aurora.nceas.ucsb.edu
banknorthstatus.mambu.com
gibber.cc
webmail.sa.ucsb.edu
banking-business-review.com
barc.isc.ucsb.edu
paymentsolutions-status.shijicloud.com
cdn-test.battlefields.org
test.eis.uw.edu
dev.nceas.ucsb.edu
admissions.ext-prod.sa.ucsb.edu
5665833682468864-fe1.pantheonsite.io
ucen.ucsb.edu
5636953047302144-fe4.pantheonsite.io
citeak.multidevcom.uaf.edu
5720605454237696-fe1.pantheonsite.io
cowbird.lifesci.ucsb.edu
pathodstest.systems.isc.ucsb.edu
www.cnsi.ucsb.edu
5701569219657728-fe1.pantheonsite.io
web.physics.ucsb.edu
5715605172781056-fe1.pantheonsite.io
5715605172781056-fe1.pantheonsite.io
admin7status.brinkpos.net
graylog.library.ucsb.edu
5762637883244544-fe3.pantheonsite.io
webextracts.test.sa.ucsb.edu
helios.geog.ucsb.edu
studentvisa.test.sa.ucsb.edu
www.arch.cs.ucsb.edu
scl.ece.ucsb.edu
5696605713858560-fe4.pantheonsite.io
philosophy.ucsb.edu
ucen.ucsb.edu
banking-business-review.com
apptcha.seclab.cs.ucsb.edu
anubis.cs.ucsb.edu
5666823336886272-fe4.pantheonsite.io
5715605172781056-fe1.pantheonsite.io
paymentsolutions-status.shijicloud.com
santacruz.nrs.ucsb.edu
scalefundercert.net
chns120.courseresource.yale.edu
5735393697726464-fe2.pantheonsite.io
5738369707409408-fe3.pantheonsite.io
marc.ucsb.edu
5706646944743424-fe4.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
208.lsnc.net
5704093720903680-fe2.pantheonsite.io

Certificate

The complete raw certificate details for secure.identity.ucsb.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1UW1oJkBHLDQ2k2YCXq9
DOjimvCrZdqccY9sgPrRY6Ewm1KfDptLbD5mZYyIC7vfLJbRVU6SHa7YLI1eJWK8
yR0t+RtopvGnMRlyRlH+dRgMx7IUOBsQO6kS6BM7G33AudZG7PjZQtLMJCGgKeBN
A95pFQsaYLOiNC+T/2dZLG+X+bp8CxkQDZj0V212Vq+VLvW1qWyk/YfgATp7Q3g1
1rXHKFZS4klj9wBFK/YxOmkEumTIRXkhxi2OiFBu26VHq/U/3g66wa+AOrsoxXTB
oCEiIWitZjnGmNy//EQzRIerL6iunE29h3EZoUaaNt4VYGGE30kYxouThnG6+oVe
lMNc2DNX6/yDe/KvT0Uf8yOK8gyT3BjMYU4ikHudbSP/hpoXt7SP2jCiXfz+yXqQ
6jfs0VuikXv590jFX9TwRZwzBvmPBqME4VkUquYJ1p84RXoO66KleCYJGNqQQJTS
XGFJQkFfRyolYowgRnpgYbTxeuCR3ZUyDqcZY1GJHsUbs24XfQnh/VQa24o1nn2V
ie31iFYl+2cf7TQ1CSTRclHOPxghuGDLYO3lw13lCwtyA7IYOQFDXwaiNGrdR/jv
PLMotXxfS383u7mIySeGog0iYBH7wItHrlfsjOuJzSOC3xfKS9xkSgaOPNvBeoqq
PPbb8I4eMeQOdpoRghpaUicCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 58686346988662451582545223514494841925
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '93106'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Barbara'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5221 Cheadle Hall'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of California, Santa Barbara'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSL Management'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.identity.ucsb.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 870075084432866325514402170629740054145084531692390788039542109608795405536923985163977582046300060731612622944176179831370026914604176493517968203488564964743026171381898198508169759777242313128540676410979686619850129607448626209101679096861779964940602731744797984090314000294815400348190664229251409737214593716012472277505558113427521146086907507307172141506321978895583392480340472167405914021882594978874590615758918648345141554018884571535097055189607324445045521808491967539740389769970975545393067904655972050444950535895855733910506078387995843196087468495894110771919782574853999260185951341503771107390291157764444487583529349633440390188711460206261943847260334733580952353488713630595427330114497013189594844013333458403235344379777222389549643404451024377481725091815312020989775225272871095525216889395303110960185569487532765097375534827084481961068033014516262703748713796770991826144246548121375615721476474156135010319203476492681861257592344469792556678764369818697234543649571732968126967961316463222902665823970538732541051077039555378092645871721895080700412125303391861035155638958513573288906015330963615491837709075406499983087852781422432415732314701321616864388448772598976074797534121583171897698964007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3163f78f904e41be05753a1972e20faf5386a0f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.identity.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket-submission.identity.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.identity.ucsb.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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