fate.eng.shibboleth.buffalo.edu
- SUNY, University at Buffalo -
Issued by InCommon RSA Server CA
About this certificate
This digital certificate with serial number 81:fd:cb:a5:be:64:1f:0e:f7:d5:17:6c:a7:72:41:fc was issued on by Internet2.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
SUNY, University at Buffalo
Organization:
SUNY, University at Buffalo
Organization unit: shibboleth
Organization unit: shibboleth
Address:
501 Capen Hall
Postal code: 14260
State / Province: NY
Locality: Buffalo
Country: US
Postal code: 14260
State / Province: NY
Locality: Buffalo
Country: US
Internet2
Organization:
Internet2
Organization unit: InCommon
Organization unit: InCommon
State / Province:
MI
Locality: Ann Arbor
Country: US
Locality: Ann Arbor
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 81:fd:cb:a5:be:64:1f:0e:f7:d5:17:6c:a7:72:41:fcSerial Number (int): 172788193022183006254811708193175126524
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 13:f7:7a:2f:ee:44:38:d8:54:18:cf:fa:71:40:4e:f0:da:ef:70:84
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38
Fingerprint (sha1): c9:c9:2e:a8:ba:cc:65:b2:95:c4:71:3c:99:30:57:1a:21:23:06:76
Fingerprint (sha256): 01:31:c0:cd:58:eb:2a:bb:b3:0f:90:bf:df:c7:a2:f6:ff:b1:a7:d8:b2:61:f1:c7:01:cd:3c:aa:a4:d7:d2:17
Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl
Check the revocation status for certificate fate.eng.shibboleth.buffalo.edu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fate.eng.shibboleth.buffalo.edu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fate.eng.shibboleth.buffalo.edu
Other certificates including the domain name buffalo.edu
(limited to 100 certificates)
law-clinics.law.buffalo.edu
roomview-app1d.acsu.buffalo.edu
timeline.cse.buffalo.edu
vpls.buffalo.edu
geowepp.geog.buffalo.edu
www.caset.buffalo.edu
cse.buffalo.edu
ubfoundation.buffalo.edu
cluster3.technolutions.net
cluster3.technolutions.net
learning.buffalo.edu
blogs.curca.buffalo.edu
xdmod.ccr.buffalo.edu
MAIL4.BUFFALO.EDU
ubithelp.shibboleth.buffalo.edu
gseweb.gse.buffalo.edu
fate.eng.shibboleth.buffalo.edu
ubisss.buffalo.edu
enrollmentmanagement.buffalo.edu
audit-prod1.acsu.buffalo.edu
honors.buffalo.edu
cluster3.technolutions.net
cmprod.shibboleth.buffalo.edu
helpdesk.sdm.buffalo.edu
hlpdsk1.shibboleth.buffalo.edu
parking.buffalo.edu
ubvpn.buffalo.edu
prv-apps.sens.buffalo.edu
www.africanamericanstudies.buffalo.edu
learning.buffalo.edu
insocialwork.ssw.buffalo.edu
expr-c-conn01prod.acsu.buffalo.edu
json.webservices.buffalo.edu
sfunder7cert.net
odin.cse.buffalo.edu
listserv-prd.acsu.buffalo.edu
mgt.buffalo.edu
sfunder18cert.net
healthinsurance.buffalo.edu
blogs.webservices.buffalo.edu
gbcrt.ccr.buffalo.edu
subboard.com
publisher-ec-ms.cit.buffalo.edu
stats.ccr.buffalo.edu
tsmserver-b.acsu.buffalo.edu
psdev-app1.acsu.buffalo.edu
metrics.ccr.buffalo.edu
mailfilters.shibboleth.buffalo.edu
cluster3.technolutions.net
uconnectlabs.com
patientportal.buffalo.edu
invenst.cse.buffalo.edu
stream.buffalo.edu
ubcms-author.buffalo.edu
ubwins.cse.buffalo.edu
wci.med.buffalo.edu
advancement.buffalo.edu
lesami.geog.buffalo.edu
riagate2.ria.buffalo.edu
mercury.urh.buffalo.edu
smbswebs.med.buffalo.edu
cluster3.technolutions.net
www.globalgenderstudies.buffalo.edu
cloudmed.med.buffalo.edu
tracker.cbi.buffalo.edu
ccwebdev1.acsu.buffalo.edu
tesserae.caset.buffalo.edu
ubconnect.buffalo.edu
studentaccounts.buffalo.edu
tickets.sa.buffalo.edu
cluster3.technolutions.net
blogs.curca.buffalo.edu
prv-web.eng.buffalo.edu
gdw.ccr.buffalo.edu
psych174a.psy.buffalo.edu
ipeer.caset.buffalo.edu
ctms-trn.acsu.buffalo.edu
ubseasconnect.buffalo.edu
ubstream-upload.buffalo.edu
wiki.cse.buffalo.edu
owa.hwi.buffalo.edu
zinc.cse.buffalo.edu
helpdesk.sdm.buffalo.edu
ja01.chem.buffalo.edu
prv-web.eng.buffalo.edu
prv-apps.sens.buffalo.edu
dooracc-dev.acsu.buffalo.edu
www.acsu.buffalo.edu
exploratory-advising.buffalo.edu
wise.buffalo.edu
cluster3.technolutions.net
mobility.card.buffalo.edu
autosys-prd.acsu.buffalo.edu
www.vpls.buffalo.edu
tesserae.caset.buffalo.edu
dirtydeeds.cse.buffalo.edu
dirtydeeds.cse.buffalo.edu
www.ccr.buffalo.edu
smbssyn2.med.buffalo.edu
rt.caset.buffalo.edu
roomview-app1d.acsu.buffalo.edu
timeline.cse.buffalo.edu
vpls.buffalo.edu
geowepp.geog.buffalo.edu
www.caset.buffalo.edu
cse.buffalo.edu
ubfoundation.buffalo.edu
cluster3.technolutions.net
cluster3.technolutions.net
learning.buffalo.edu
blogs.curca.buffalo.edu
xdmod.ccr.buffalo.edu
MAIL4.BUFFALO.EDU
ubithelp.shibboleth.buffalo.edu
gseweb.gse.buffalo.edu
fate.eng.shibboleth.buffalo.edu
ubisss.buffalo.edu
enrollmentmanagement.buffalo.edu
audit-prod1.acsu.buffalo.edu
honors.buffalo.edu
cluster3.technolutions.net
cmprod.shibboleth.buffalo.edu
helpdesk.sdm.buffalo.edu
hlpdsk1.shibboleth.buffalo.edu
parking.buffalo.edu
ubvpn.buffalo.edu
prv-apps.sens.buffalo.edu
www.africanamericanstudies.buffalo.edu
learning.buffalo.edu
insocialwork.ssw.buffalo.edu
expr-c-conn01prod.acsu.buffalo.edu
json.webservices.buffalo.edu
sfunder7cert.net
odin.cse.buffalo.edu
listserv-prd.acsu.buffalo.edu
mgt.buffalo.edu
sfunder18cert.net
healthinsurance.buffalo.edu
blogs.webservices.buffalo.edu
gbcrt.ccr.buffalo.edu
subboard.com
publisher-ec-ms.cit.buffalo.edu
stats.ccr.buffalo.edu
tsmserver-b.acsu.buffalo.edu
psdev-app1.acsu.buffalo.edu
metrics.ccr.buffalo.edu
mailfilters.shibboleth.buffalo.edu
cluster3.technolutions.net
uconnectlabs.com
patientportal.buffalo.edu
invenst.cse.buffalo.edu
stream.buffalo.edu
ubcms-author.buffalo.edu
ubwins.cse.buffalo.edu
wci.med.buffalo.edu
advancement.buffalo.edu
lesami.geog.buffalo.edu
riagate2.ria.buffalo.edu
mercury.urh.buffalo.edu
smbswebs.med.buffalo.edu
cluster3.technolutions.net
www.globalgenderstudies.buffalo.edu
cloudmed.med.buffalo.edu
tracker.cbi.buffalo.edu
ccwebdev1.acsu.buffalo.edu
tesserae.caset.buffalo.edu
ubconnect.buffalo.edu
studentaccounts.buffalo.edu
tickets.sa.buffalo.edu
cluster3.technolutions.net
blogs.curca.buffalo.edu
prv-web.eng.buffalo.edu
gdw.ccr.buffalo.edu
psych174a.psy.buffalo.edu
ipeer.caset.buffalo.edu
ctms-trn.acsu.buffalo.edu
ubseasconnect.buffalo.edu
ubstream-upload.buffalo.edu
wiki.cse.buffalo.edu
owa.hwi.buffalo.edu
zinc.cse.buffalo.edu
helpdesk.sdm.buffalo.edu
ja01.chem.buffalo.edu
prv-web.eng.buffalo.edu
prv-apps.sens.buffalo.edu
dooracc-dev.acsu.buffalo.edu
www.acsu.buffalo.edu
exploratory-advising.buffalo.edu
wise.buffalo.edu
cluster3.technolutions.net
mobility.card.buffalo.edu
autosys-prd.acsu.buffalo.edu
www.vpls.buffalo.edu
tesserae.caset.buffalo.edu
dirtydeeds.cse.buffalo.edu
dirtydeeds.cse.buffalo.edu
www.ccr.buffalo.edu
smbssyn2.med.buffalo.edu
rt.caset.buffalo.edu
Certificate
The complete raw certificate details for fate.eng.shibboleth.buffalo.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHlzCCBn+gAwIBAgIRAIH9y6W+ZB8O99UXbKdyQfwwDQYJKoZIhvcNAQELBQAw djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMTgwNTAzMDAwMDAwWhcNMTkwNTAz MjM1OTU5WjCBujELMAkGA1UEBhMCVVMxDjAMBgNVBBETBTE0MjYwMQswCQYDVQQI EwJOWTEQMA4GA1UEBxMHQnVmZmFsbzEXMBUGA1UECRMONTAxIENhcGVuIEhhbGwx JDAiBgNVBAoTG1NVTlksIFVuaXZlcnNpdHkgYXQgQnVmZmFsbzETMBEGA1UECxMK c2hpYmJvbGV0aDEoMCYGA1UEAxMfZmF0ZS5lbmcuc2hpYmJvbGV0aC5idWZmYWxv LmVkdTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALs1+7fOv1QMGQkY tEuNmGoXpKGAvSzrHhyqoztTB0M/qjWs7YcAnlpiQXMddLnd/SDiCkswemRKlPW5 lH3ORnM6etmXt7F9B7p7ph4xI5lF4pDC+aqKYO+1tgqh/PLBRWbiaWTryIaS3TMF hUpkZQR1w19/XzsVZj+wHMnI9Yn4+3AbwUxyd91AoW7VauFYd8b2QYANK5ZGBCb/ 40cHgb7NtQfBjRT4IeYEpyUxiqn/VLtrOBRkRU/lWY648ZQZtzXTXH9PYhQSk5cx mmsi2uF1tdvDqyCVTBjb5AGn9wuJRVJdGbKugI7hVWVctYr1RHV0BaLF+d3zmQww kedGzJqpY7UPstdkSv4EjpXgFYYNR3+hWAYqpeWGuPuF/E/9dz5Er7isBOF3Xm2Q vX0RPtSbU5iirqBBqJ2aDrll9euQSD9EyNBtUHVs6L64Li9GHp0iFbZg8doKNt0F HMMN4saaac3OPxOKz3IQEj/Xiac3M9ZHrOuB3Pm/TxB0wPW8aWWVrDC4n12CRiJ5 T0FjZVMJan3HOeIs9O0T3Iqmu1T3dOymjcuAQMnKmDsYk3ZlIHmjXpJIWl9lPEyB F+GMprjOl2btMs/I4U5QlXUcaGPHz1WNWqCnn7/chty9ZlwKnMvq96tZedFhZ4uM lpw6nGVJ+cWOps+JpRDXH+pe+0CZAgMBAAGjggLZMIIC1TAfBgNVHSMEGDAWgBQe BaN3j2yW4luHS6a0hqxxAAznODAdBgNVHQ4EFgQUE/d6L+5EONhUGM/6cUBO8Nrv cIQwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMGcGA1UdIARgMF4wUgYMKwYBBAGuIwEEAwEBMEIwQAYI KwYBBQUHAgEWNGh0dHBzOi8vd3d3LmluY29tbW9uLm9yZy9jZXJ0L3JlcG9zaXRv cnkvY3BzX3NzbC5wZGYwCAYGZ4EMAQICMEQGA1UdHwQ9MDswOaA3oDWGM2h0dHA6 Ly9jcmwuaW5jb21tb24tcnNhLm9yZy9JbkNvbW1vblJTQVNlcnZlckNBLmNybDB1 BggrBgEFBQcBAQRpMGcwPgYIKwYBBQUHMAKGMmh0dHA6Ly9jcnQudXNlcnRydXN0 LmNvbS9JbkNvbW1vblJTQVNlcnZlckNBXzIuY3J0MCUGCCsGAQUFBzABhhlodHRw Oi8vb2NzcC51c2VydHJ1c3QuY29tMCoGA1UdEQQjMCGCH2ZhdGUuZW5nLnNoaWJi b2xldGguYnVmZmFsby5lZHUwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQDuS723 dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWMmZJErAAAEAwBGMEQCICzy cWO3Me5eflWAGB/8sL0UCoySL0FRPb6rgVR/9VVbAiA8HQC7jecXcHvJvIsB3tzq SAhprFl1SNhlR/jcmLzpHQB1AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQ e8xWAAABYyZkkEsAAAQDAEYwRAIgBNnx3clnNDv4Ae9NoLpTebcj+yUeS3lb/GMx 5MWY+GwCID9NXryb/11ISiBljIjRa/ahXsSHIHGw/IU0ZQKemlztMA0GCSqGSIb3 DQEBCwUAA4IBAQBmWycFVKtdCX7X+7OCWngUEyRYb8O2zqHA/pZkqsEswuosNOrj jv5SNWjIhieTkDBgTIfSjhTlPvRPowU/9c8uyx0qsVPnMReeVTmTtRXjwX5OAzsK +6EjqsUhENvkc7SNBTp/AUbv2Xr+NMeV9qkrKvJdwdSR/9w9TyXEDbturGuc8i6R PmkVLjwZ0ahIPRpfHBZtUcNZKyhWAwnvg+9t9jWCW5k+iGFzN3Nx5fGo6x5mkQ+T oUaZ7azNK5ZYMpTdZSg4ASHoJj5JzOqVfqZrN/Jz7DQUzz+eG4TIWcPi/0/Ao+to ONH55/WHg13ftYxIaFWx/abbeyI7/9Rl9TIP -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuzX7t86/VAwZCRi0S42Y ahekoYC9LOseHKqjO1MHQz+qNazthwCeWmJBcx10ud39IOIKSzB6ZEqU9bmUfc5G czp62Ze3sX0HunumHjEjmUXikML5qopg77W2CqH88sFFZuJpZOvIhpLdMwWFSmRl BHXDX39fOxVmP7Acycj1ifj7cBvBTHJ33UChbtVq4Vh3xvZBgA0rlkYEJv/jRweB vs21B8GNFPgh5gSnJTGKqf9Uu2s4FGRFT+VZjrjxlBm3NdNcf09iFBKTlzGaayLa 4XW128OrIJVMGNvkAaf3C4lFUl0Zsq6AjuFVZVy1ivVEdXQFosX53fOZDDCR50bM mqljtQ+y12RK/gSOleAVhg1Hf6FYBiql5Ya4+4X8T/13PkSvuKwE4XdebZC9fRE+ 1JtTmKKuoEGonZoOuWX165BIP0TI0G1QdWzovrguL0YenSIVtmDx2go23QUcww3i xpppzc4/E4rPchASP9eJpzcz1kes64Hc+b9PEHTA9bxpZZWsMLifXYJGInlPQWNl Uwlqfcc54iz07RPciqa7VPd07KaNy4BAycqYOxiTdmUgeaNekkhaX2U8TIEX4Yym uM6XZu0yz8jhTlCVdRxoY8fPVY1aoKefv9yG3L1mXAqcy+r3q1l50WFni4yWnDqc ZUn5xY6mz4mlENcf6l77QJkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 172788193022183006254811708193175126524 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '14260' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Buffalo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '501 Capen Hall' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SUNY, University at Buffalo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shibboleth' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fate.eng.shibboleth.buffalo.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763753724083932249442484908453968903518196730717537185061043706037530260696834540890469964019436601387904682340385298647307564600110289372780830669178775722874849313280259771766327887298661561711697364644727790255756275477513106881526621073452554112358471301555513093671663842946882032013474668776145346374990547254608868693886008358946509203417859571200373948657949684405021362367253972490495278224075158472729601387036269348420826339171909988367033117435664127760151653321199512440127585138040086613925359206259208529569004699248504659424769053830799600606978999731349293822122876356803913344730342986653775132298753768405314649408033110156855176628621544972964438019511615679873968136577229951942378964818694131775164164919625034651526500645468252042405460790246196639084661286111383309322326752021445768846445251984944639525861651031198392128496669363431043054678583654081769665440705035933166977304400723331878039804605708321635283831759938646312226907484963699793658025469860061667620788180207287675650815248558610377568361454087041921377880216592825059642920493010060623554723429453975157048989463804540853294189358686789668189916718309627177797423542546352978659109173898826827532014863709397895542063484801899858995682427033 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 13f77a2fee4438d85418cffa71404ef0daef7084 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fate.eng.shibboleth.buffalo.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001632664912b000004030046304402202cf27163b731ee5e7e5580181ffcb0bd140a8c922f41513dbeab81547ff5555b02203c1d00bb8de717707bc9bc8b01dedcea480869ac597548d86547f8dc98bce91d007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001632664904b0000040300463044022004d9f1ddc967343bf801ef4da0ba5379b723fb251e4b795bfc6331e4c598f86c02203f4d5ebc9bff5d484a20658c88d16bf6a15ec4872071b0fc853465029e9a5ced . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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