zhoulab.cass.idre.ucla.edu

- University of California, Los Angeles -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number c1:af:08:c4:8f:4f:3e:a3:5f:5d:4d:56:6d:21:f2:99 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of California, Los Angeles

Organization: University of California, Los Angeles
Organization unit: Office of Information Technology
Address: 405 Hilgard Avenue
Postal code: 90095
State / Province: CA
Locality: Los Angeles
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c1:af:08:c4:8f:4f:3e:a3:5f:5d:4d:56:6d:21:f2:99
Serial Number (int): 257449832969081197659216015509480927897
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9a:84:95:e7:2d:ee:11:34:40:f8:03:34:98:8b:fd:f6:80:aa:c5:dc
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): e2:9c:ca:4e:fd:15:06:ef:20:2a:e0:b2:3a:d8:7e:05:65:1f:3c:8d
Fingerprint (sha256): 01:27:df:51:42:6a:65:b4:2b:2a:6d:eb:93:fe:ea:c9:32:6e:c6:3b:7c:25:65:b1:a6:32:4e:b5:66:60:17:35

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate zhoulab.cass.idre.ucla.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zhoulab.cass.idre.ucla.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zhoulab.cass.idre.ucla.edu

Other certificates including the domain name ucla.edu

(limited to 100 certificates)
iuc.publicaffairs.ucla.edu
luskin.cmfe-asm-01.noc.ucla.edu
scandinavian.ucla.edu
pcard.finance.ucla.edu
pods5-stage.mednet.ucla.edu
lasr.cs.ucla.edu
archivematica.library.ucla.edu
cryoem.ucla.edu
*.genetics.ucla.edu
www.ampersand.gseis.ucla.edu
sait-api-qaa.uclanet.ucla.edu
bruinpost.ucla.edu
giving.ucla.edu
trs.it.ucla.edu
test.int.maximo.ucla.edu
stage4.my.ucla.edu
collie.ats.ucla.edu
gpsslvpn.mednet.ucla.edu
greenfieldlab.psych.ucla.edu
5690449683546112-fe3.pantheonsite.io
www.cal.cs.ucla.edu
npc.cnsi.ucla.edu
patstest.research.ucla.edu
sites.anderson.ucla.edu
sni.cloudflaressl.com
tls.automattic.com
lsdapimdb01.medctr.ucla.edu
info-smtp-asm-01.noc.ucla.edu
cluster3.technolutions.net
mbi.ucla.edu
www.biolchem.ucla.edu
portal.research.ucla.edu
www.predictiontechnology.ucla.edu
intercampus.genetics.ucla.edu
cores.ee.ucla.edu
5729623769874432-fe3.pantheonsite.io
velosws1.ad.medctr.ucla.edu
buddhistbodies.humspace.ucla.edu
ergonomics.ucla.edu
epss.ucla.edu
sni.cloudflaressl.com
*.sistat.ucla.edu
labschool.ucla.edu
accounts-test.iam.ucla.edu
webapps.ccnet.ucla.edu
fsus-6.freshservice.com
osf.ucla.edu
www.botgard.ucla.edu
fspos.asucla.ucla.edu
npc.cnsi.ucla.edu
hss.semel.ucla.edu
voteview.polisci.ucla.edu
risksciences.ucla.edu
lucian.humspace.ucla.edu
laes.neurology.ucla.edu
webmail2.seas.ucla.edu
milken.music.ucla.edu
pams.research.ucla.edu
vmw-asm-04.noc.ucla.edu
sinai.library.ucla.edu
hue.humspace.ucla.edu
drugdiscovery.neurology.ucla.edu
anthro.ucla.edu
zhoulab.cass.idre.ucla.edu
giveto.ucla.edu
gseis.ucla.edu
fsapi.it.ucla.edu
channel.hammer.ucla.edu
video.law.ucla.edu
transitwiki.org
5735088218177536-fe1.pantheonsite.io
orisapps.research.ucla.edu
www.interactions.gseis.ucla.edu
barbernas.eeb.ucla.edu
nospam9.ad.ucla.edu
alb-p05.medschool.ucla.edu
ids.mednet.ucla.edu
colossus.cdh.ucla.edu
transportation.ucla.edu
pats.resadmin.ucla.edu
alumni.anderson.ucla.edu
partnershipschools.gseis.ucla.edu
server99b.dent.ucla.edu
nano.ucla.edu
lasik.ucla.edu
gsc1.bisp.ucla.edu
scai.cs.ucla.edu
www.bol.ucla.edu
ecr.idre.ucla.edu
deblab.med.ucla.edu
president.usac.ucla.edu
www.botgard.ucla.edu
5659974608879616-fe3.pantheonsite.io
www.admission.ucla.edu
hci.ucla.edu
lbmp.anthro.ucla.edu
digital.library.ucla.edu
intercampus.genetics.ucla.edu
whitmania.ucla.edu
secure5.ha.ucla.edu

Certificate

The complete raw certificate details for zhoulab.cass.idre.ucla.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 257449832969081197659216015509480927897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '90095'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Los Angeles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '405 Hilgard Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of California, Los Angeles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Office of Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zhoulab.cass.idre.ucla.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771625091926322897974378504541509004189089586327424562729725623949197747947660587409530488708593434251486161969281240378033408500297883795257497875733471880275752981758832154669295127649463785204620098619263455597488572833112019111442650172390409101476278239352141812856379402470345762356121276487843734636994733532080799865522256147306958334656992646270716431413269676600121984095422728244140979154638892379700274461220825681018530592508671103193646025316471310408944289902237679637228260600727054149236683918460642944202074888645177850861617554174816737861621494997424985910700385739142200256035327093347073428773068499057285048175529802124970296848195710260736624488004639627301915111579938594365753892886222620614506708904538848763044260166036715483486775925156019924137057205240836620224472024149553492176445050089690958864419758395313096149452332016451588435289349977245459472081942485886989193907211398610299924230982822315689009822306517514300738845857080750773574486173648517423830880747674106127854731814004330818379769108285968583335989165779302690149464603145866271857664613363467311894383685835084304297002321888296661470992689510754069926089509622035087776141798893364970045956815534775459690011256801109159236355971711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a8495e72dee113440f80334988bfdf680aac5dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhoulab.cass.idre.ucla.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000163db7b22740000040300463044022071d508a6c709ca6b733d03206f5a3fa533a806914713486e702e18d5b1f9c38702205cd3ac93376e784faf96a118524239a17424263c33029d8b02074f26489c315b007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000163db7b22b80000040300473045022100a67208c3d4abed810f70635f3921489a01aac4ce23ddebe7e00af76ba3e1d94a022020925e361aad60f856dec411a074e3059a4358252166b258d6a064c4474ec294
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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