sho-prod-web-2.ad.ucsc.edu

- University of California, Santa Cruz -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number c7:29:cd:5b:f3:b9:b5:8b:5d:d8:a3:63:82:14:8d:ab was issued on by Internet2.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of California, Santa Cruz

Organization: University of California, Santa Cruz
Organization unit: APMIOPS
Address: 1156 High Street
Address: Chancellors Office
Postal code: 95064
State / Province: CA
Locality: Santa Cruz
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c7:29:cd:5b:f3:b9:b5:8b:5d:d8:a3:63:82:14:8d:ab
Serial Number (int): 264733420511559090013527703781429775787
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5f:cf:bd:7d:0d:49:4f:05:52:00:d6:19:15:b8:b6:b7:2f:96:2a:b0
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): ce:13:a6:28:7b:71:9b:36:4f:d5:c2:12:23:ce:b8:d0:1e:26:d3:87
Fingerprint (sha256): 01:3a:69:19:8a:4a:9a:ec:6a:a8:14:9e:3f:ab:c8:e0:ff:81:14:f7:ce:9d:d4:a2:4f:64:0a:6a:8c:f9:84:1f

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate sho-prod-web-2.ad.ucsc.edu

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sho-prod-web-2.ad.ucsc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sho-prod-web-2.ad.ucsc.edu
sho-prod-web-2.ucsc.edu
sho-prod.ucsc.edu
studenthousing.ucsc.edu
www.sho-prod.ucsc.edu
www.sho.ucsc.edu
www.studenthousing.ucsc.edu

Other certificates including the domain name ucsc.edu

(limited to 100 certificates)
farmandgardenwiki.ucsc.edu
5631986051842048-fe1.pantheonsite.io
it.uahs.arizona.edu
connect.ucsc.edu
wcms.ucsc.edu
cp-scanner.ucsc.edu
calendar.sdzsafaripark.org
monitor.soe.ucsc.edu
applygrad.ucsc.edu
cscenter.pbsci.ucsc.edu
5707090131681280-fe3.pantheonsite.io
746f6675.ucsc.edu
wordpress.ucsc.edu
sho-prod-web-2.ad.ucsc.edu
banking-business-review.com
undergrad.pbsci.ucsc.edu
hyperion.ucsc.edu
ecommons.ucsc.edu
iacuc.ucsc.edu
stage.cghub.ucsc.edu
dunkin.eeb.ucsc.edu
campusrec.ucsc.edu
5684453372329984-fe2.pantheonsite.io
5638159220080640-fe2.pantheonsite.io
banking-business-review.com
my.prd.ais.aws.ucsc.edu
gradadmissions.ucsc.edu
pleiades.ucsc.edu
scalefunder.net
ugr.ue.ucsc.edu
noc-dev-vise-1.ucsc.edu
ur-tst-nav.ucsc.edu
5754079087165440-fe4.pantheonsite.io
scalefundercert.net
ecommons.ucsc.edu
5631986051842048-fe1.pantheonsite.io
208.lsnc.net
drs.sandbox.dev.singlecell.gi.ucsc.edu
wildlife.ucsc.edu
5679052450955264-fe2.pantheonsite.io
win-sys-mgr-1.lt.ucsc.edu
5682747733442560-fe3.pantheonsite.io
wcms-prod-web-5.ucsc.edu
5156937704407040-fe1.pantheonsite.io
officeofresearchhelp.ucsc.edu
its-prod-www2-2.ucsc.edu
5638159220080640-fe2.pantheonsite.io
5682747733442560-fe3.pantheonsite.io
5156937704407040-fe1.pantheonsite.io
officeofresearchhelp.ucsc.edu
bsg-sandbox.ucsc.edu
drs.sandbox.dev.singlecell.gi.ucsc.edu
service.sandbox.dev.singlecell.gi.ucsc.edu
banking-business-review.com
urlogin.ucsc.edu
shs-prd-bkr1.au.ucsc.edu
genecats.gi.ucsc.edu
5156937704407040-fe1.pantheonsite.io
hyperion.ucsc.edu
5707090131681280-fe3.pantheonsite.io
5156937704407040-fe1.pantheonsite.io
campusrec.ucsc.edu
ad-prod-rdcb-1.ad.ucsc.edu
vi-prod-vpsc-1.au.ucsc.edu
5156937704407040-fe1.pantheonsite.io
gitlab.soe.ucsc.edu
gradlab.ucsc.edu
saturn.ucsc.edu
208.lsnc.net
pisa.tst.ais.aws.ucsc.edu
161511-web1.vilcek.org
*.courses.soe.ucsc.edu
libportal.ucsc.edu
5156937704407040-fe1.pantheonsite.io
scalefundercert.net
griffin.ucsc.edu
shs-prod-app-2.ad.ucsc.edu
hacking4oceans.ucsc.edu
pisa-dev.ucsc.edu
5638159220080640-fe2.pantheonsite.io
cf-prd-app-1.ucsc.edu
research-it.ucsc.edu
5717044213317632-fe3.pantheonsite.io
mmapl.ucsc.edu
*.ue.ucsc.edu
*.ucsc.edu
noc-prod-vise-2.ucsc.edu
hexcalc.gi.ucsc.edu
ppc-webdav.ucsc.edu
5679052450955264-fe2.pantheonsite.io
gradadmissions.ucsc.edu
sctv.ucsc.edu
ais-reports.rds.ucsc.edu
static.ucsc.edu
ccrec.ucsc.edu
gradadmissions.ucsc.edu
liberalarts.ss.pacific.edu
dunkin.eeb.ucsc.edu
scalefunder.net
scalefunder.net

Certificate

The complete raw certificate details for sho-prod-web-2.ad.ucsc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqFAwAAtE/QeqDotdze3
zFKoYsdTOHimO1IUknwgUcIfodYAj9tSb/fkDKKzmuTZzf32/M+Gg1BYr9/u98pA
R/EHiR3QGuQssqt67jp55NHP6k5VmNd9H4KYbVfQWhxhk/NDTng3D50EqOZCXUia
rim51SQPl3tGqbgVf4rZJ9v7z+OXHUYLDzMsAkSJFPadIE+U17BvrWpjqsgh0Vju
cyJXxi0NT9gBpAWv9jk+bXVuoOOdAhtgqrMHIihjGY9KINZTQyanPOC8+888C7OD
sqHxnBwu0lW/wMS960BMDK9Q7OIIZOYxsJ+h68RLZXtZ1lBpe5mu7dtnI3EOFlwZ
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264733420511559090013527703781429775787
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '95064'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Cruz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1156 High Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chancellors Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of California, Santa Cruz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'APMIOPS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sho-prod-web-2.ad.ucsc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19520215748038207401933342225996924750675976167572061499614669499504319004260950231701139911425003273231354472547798030496138582834799226596333898134659305019482418494287556694111548052932482988754013213048043237227833873847224119341644585867070937648325424084914804226881544367641761271413369777076259008080314843116815314900671325183683527071657735970425846902936800869202167347384493605724439002064048034577599810946589413491106156297667950807444365739504188401521642813148557775851052502367586049600658136599368678369677289819606517402462869164523667690101689357174523881467380144976717338499173860423565934598621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5fcfbd7d0d494f055200d61915b8b6b72f962ab0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (170 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sho-prod-web-2.ad.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sho-prod-web-2.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sho-prod.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studenthousing.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sho-prod.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sho.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studenthousing.ucsc.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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