mail.campusad.msu.edu

- Michigan State University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 21:3b:5a:de:e1:f6:2c:53:72:02:47:8e:19:7b:44:4c was issued on by Internet2.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Michigan State University

Organization: Michigan State University
State / Province: Michigan
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 21:3b:5a:de:e1:f6:2c:53:72:02:47:8e:19:7b:44:4c
Serial Number (int): 44172712451003917737778084260299359308
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 59:97:15:53:46:0d:66:12:51:0b:13:6c:30:09:f7:fb:09:dd:c5:29
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 9f:1e:2b:f6:e7:2c:f3:88:cc:57:b1:33:f3:92:a1:4c:a3:fc:ec:df
Fingerprint (sha256): 01:68:af:82:03:1b:04:69:3b:e6:32:c0:20:db:30:6b:10:7b:82:97:f5:0a:14:02:de:85:72:08:71:2a:d7:7c

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate mail.campusad.msu.edu

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.campusad.msu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.campusad.msu.edu
ath.msu.edu
autodiscover.ath.msu.edu
autodiscover.cabs.msu.edu
autodiscover.campusad.msu.edu
autodiscover.econ.msu.edu
autodiscover.law.msu.edu
autodiscover.msu.edu
cabs.msu.edu
cad-ex16-01.campusad.msu.edu
cad-ex16-02.campusad.msu.edu
cad-ex16-03.campusad.msu.edu
cad-ex16-04.campusad.msu.edu
cad-ex19-01.campusad.msu.edu
cad-ex19-02.campusad.msu.edu
cad-ex19-03.campusad.msu.edu
cad-ex19-04.campusad.msu.edu
econ.msu.edu
hybrid.campusad.msu.edu
law.msu.edu
mail.msu.edu
smtp.campusad.msu.edu

Other certificates including the domain name msu.edu

(limited to 100 certificates)
paw.itservices.msu.edu
shiny.stt.msu.edu
vdi.msu.edu
intranet.nscl.msu.edu
tls.automattic.com
www.licensing.msu.edu
cosmetic.msu.edu
5651276360581120-fe3.pantheonsite.io
dinglab.natsci.msu.edu
addrarch.ais.msu.edu
imperva.com
ooialt.qual.ebsp.msu.edu
dev.labeldat.vudat.msu.edu
www2.pa.msu.edu
mystuinfodirectdeposit.msu.edu
neurology.msu.edu
cj.msu.edu
eamcweb3.usfs.msu.edu
sw.msu.edu
tls.automattic.com
it.uahs.arizona.edu
civilrights.msu.edu
mystuinfo.test.itservices.msu.edu
soviethistory.msu.edu
5651276360581120-fe3.pantheonsite.io
unifier.msu.edu
share.rhs.msu.edu
imperva.com
www.h-net.msu.edu
web.cal.msu.edu
mistt.msu.edu
africanactivist.msu.edu
crm.test.itservices.msu.edu
www.collegelifeel.msu.edu
panorama0.itservices.msu.edu
edassist.hr.msu.edu
nartc.fcm.arizona.edu
nowlin.qual.psm.msu.edu
research.chm.msu.edu
rice-alt.test.ebsp.msu.edu
vdi-b-cs1.campusad.msu.edu
exchange.pa.msu.edu
imperva.com
dev.undergrad.msu.edu
animalhealth.msu.edu
5651276360581120-fe3.pantheonsite.io
5746985747349504-fe1.pantheonsite.io
wwdev2l.math.msu.edu
dmat.msu.edu
imperva.com
www.effs.msu.edu
incapsula.com
incapsula.com
plantbiology.natsci.msu.edu
uconnectlabs.com
dmat.msu.edu
5639955095224320-fe3.pantheonsite.io
reporting.anr.msu.edu
incapsula.com
news.jrn.msu.edu
systempassword.test.itservices.msu.edu
web.natsci.msu.edu
lms.advancement.msu.edu
ww2.math.msu.edu
mcfscholars.msu.edu
5658638538506240-fe4.pantheonsite.io
vita.msu.edu
mail.campusad.msu.edu
imperva.com
vegetable.ent.msu.edu
web5.cal.msu.edu
rdgateway.ipf.msu.edu
burgueno.egr.msu.edu
vp.research.msu.edu
glg.msu.edu
oauth2.qual.itservices.msu.edu
asset.itservicedesk.test.itservices.msu.edu
actsciclub.natsci.msu.edu
wwl6.math.msu.edu
cstat.research.msu.edu
search.msu.edu
bps.broad.msu.edu
rose.canr.msu.edu
imanage.itservices.msu.edu
wwl2.math.msu.edu
sgp.msu.edu
scholendow2.dev.ais.msu.edu
chems.msu.edu
rio.msu.edu
help.anr.msu.edu
jira.test.itservices.msu.edu
varietytrials.msu.edu
msu-water.msu.edu
epri-trac.egr.msu.edu
5651276360581120-fe3.pantheonsite.io
confrooms.pa.msu.edu
marcom.cal.msu.edu
oemi.msu.edu
netprint.msu.edu
5651276360581120-fe3.pantheonsite.io

Certificate

The complete raw certificate details for mail.campusad.msu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH5kZxCOY1tAdsRbXa/c
hMJuJ3YEGwDSsWVRZ1AJgGurDCyM73+nFagL/SMN88b+FVw96jh0Plr1SPxXVUQi
EUOGrdHhqnNk7nvZ6Pp/VzmhES5v0spKXeLnOmICN+HWqLaB1IqycEWLMLLOJvgk
qqmfjSYjhODm0nXhYUHqvLvfaGcpOkq7S+nC4fyvbS6UZv+JiEzE4DTloMCrZXA6
5WANjSxDE/K82oMzX+wlAFglH8ZbY+SVBHd54COhkHvxvPdAE3guNvurrW729ph2
Srg5GvuCidetMTLU3rxGcGJ7iiphzbkXEO5EEKbo4k4qhbHYNnicAGf/4lFNgj9V
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 44172712451003917737778084260299359308
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.campusad.msu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24300080869074168694630100541207428826891291701947431951578911205362267548453173200571519310046024236269234603992639652652273644744922530557868351089168962031387757345451557153632430567748742298762223077161563157019263420163280095323572141038216967701267027505398890056716801470946688807896623893665706276215657462276818890733873586099962527521393761408019547971031618624698231485248551670870724928164395252002576286933529070524795250043985408053683424852849539656895068744432751170282665761306249532371542612995126095521313923848406424546290162653468415042369400831848751916436176477179093798771085306544325211936061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59971553460d6612510b136c3009f7fb09ddc529
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (542 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.campusad.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ath.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ath.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cabs.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.campusad.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.econ.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.law.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabs.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cad-ex16-01.campusad.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cad-ex16-02.campusad.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cad-ex16-03.campusad.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cad-ex16-04.campusad.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cad-ex19-01.campusad.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cad-ex19-02.campusad.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cad-ex19-03.campusad.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cad-ex19-04.campusad.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'econ.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid.campusad.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.campusad.msu.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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