bdv.unch.unc.edu

- UNC Health Care -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 39:06:8c:fd:51:e4:01:fa:4b:c2:43:ff:ea:b1:e8:60 was issued on by Entrust, Inc..

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

UNC Health Care

Organization: UNC Health Care
State / Province: North Carolina
Locality: Chapel Hill
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 39:06:8c:fd:51:e4:01:fa:4b:c2:43:ff:ea:b1:e8:60
Serial Number (int): 75800009148304971285937536976087541856
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: dd:cb:bf:73:86:cd:98:e6:47:59:3c:4f:83:76:c7:8c:9b:f7:d3:cb
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): a4:d4:f1:e8:39:a8:28:c4:1b:52:63:34:50:08:ba:df:73:42:f3:51
Fingerprint (sha256): 01:71:4f:e9:f7:5c:e2:f2:46:d7:b4:7f:d4:bb:b8:6a:71:c6:4a:aa:9e:9a:32:a1:56:f2:41:c3:b6:41:46:08

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate bdv.unch.unc.edu

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bdv.unch.unc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bdv.unch.unc.edu
bdvHVC.unch.unc.edu
bdvHVCtest.unch.unc.edu
bdvclar-un1-p01.unch.unc.edu
bdvclar-un1-t01.unch.unc.edu
bdvHillsGen3.unch.unc.edu
bdvHillsGen4.unch.unc.edu
bdvHillsGen5.unch.unc.edu
bdvHillsGen6.unch.unc.edu
bdvHollyGen1.unch.unc.edu
bdvHollyGen2.unch.unc.edu
bdvHollyGen3.unch.unc.edu
bdvHollyGen4.unch.unc.edu
bdvHollyCsection.unch.unc.edu
bdvCaldwellGen1.unch.unc.edu
bdvCaldwellGen2.unch.unc.edu
bdvCaldwellGen3.unch.unc.edu
bdvwygen1.unch.unc.edu
bdvwygen2.unch.unc.edu
bdvwyrobo3.unch.unc.edu
bdvwygen4.unch.unc.edu
bdvwygen5.unch.unc.edu
bdvwyurology6.unch.unc.edu
bdvwyvasc7.unch.unc.edu
bdvwyneuro8.unch.unc.edu
bdvwygen9.unch.unc.edu
bdvwygen10.unch.unc.edu
bdvwyent-eye11.unch.unc.edu
bdvwyneuro12.unch.unc.edu
bdvwyent-eye13.unch.unc.edu
bdvwygen14.unch.unc.edu
BDVRXHAV5.unch.unc.edu
bdvor14.unch.unc.edu
BDVRXHAV24.unch.unc.edu
BDVRXCVOR15.unch.unc.edu

Other certificates including the domain name unc.edu

(limited to 100 certificates)
rd-staging.tracs.unc.edu
sogar.oasis.unc.edu
*.sog.unc.edu
janchambers.sites.oasis.unc.edu
medialaw.unc.edu
canons.sog.unc.edu
*.onlinemba.unc.edu
image.20210408.094303.s11.et.yellsatcloud.com
symposium.kenan-flagler.unc.edu
5657535201673216-fe3.pantheonsite.io
gala.ovcsa.unc.edu
dev.infoporte.unc.edu
it.uahs.arizona.edu
ISEMMDCPAN.unch.unc.edu
epid-practicum.sph.unc.edu
ib-ipam2.net.unc.edu
www.makeathon.unc.edu
5635093192245248-fe3.pantheonsite.io
cluster3.technolutions.net
hope.haven.sites.oasis.unc.edu
canons.sog.unc.edu
bootcamp.unc.edu
docimage-iie1.unch.unc.edu
apps.hpdp.unc.edu
tbicenter.unc.edu
advice.unch.unc.edu
stories.unc.edu
ALLSCRIPTSHM-JH.unch.unc.edu
cciprinting.unc.edu
streetfilms.org
blogs.kenan-flagler.unc.edu
theancientway.jomc.unc.edu
nccriminallaw.sog.unc.edu
zachboyd.sites.oasis.unc.edu
gelmore.sites.oasis.unc.edu
compgen.unc.edu
campusrec.unc.edu
*.prospectsandbox.oasis.unc.edu
sslvpn.unch.unc.edu
admin.fpc.unc.edu
caoma.unch.unc.edu
contracts.unc.edu
f5m5.net.unc.edu
5659313586569216-fe4.pantheonsite.io
watsona.sites.oasis.unc.edu
bdv.unch.unc.edu
outlook.unc.edu
k2.shared.global.fastly.net
san-13-s10.tlsprovisioning.exacttarget.com
entsysmon.its.unc.edu
watsona.sites.oasis.unc.edu
itsstatus.unc.edu
nlp-ssl.cs.unc.edu
cluster3.technolutions.net
chancellorsawards.unc.edu
cfk.unc.edu
*.web.unc.edu
fpgservicedesk.ad.unc.edu
epss.unch.unc.edu
cluster2.technolutions.net
advise.alumni.unc.edu
*.fpg.unc.edu
miforms.bioinf.unc.edu
webmail.campus-services.unc.edu
loyola.sites.oasis.unc.edu
emch.sites.oasis.unc.edu
impsci.tracs.unc.edu
gaa.dev.unc.edu
paintrials.unc.edu
adamhochberg.com
epicreport2.unch.unc.edu
p2c.police.unc.edu
itsstatus.unc.edu
applynow.kenan-flagler.unc.edu
apps.fo.unc.edu
5709198289534976-fe4.pantheonsite.io
mobile.uncaa.unc.edu
fms.fammed.unc.edu
dataverse-test.irss.unc.edu
cah.fammed.unc.edu
courses.sph.unc.edu
pml.unc.edu
bomgar.unc.edu
beingthere.cs.unc.edu
*.onlinemph.unc.edu
devservices.unc.edu
portaltest.chs.unc.edu
oisvcse.med.unc.edu
dare-idrac.unlisted.med.unc.edu
san-13-s11.tlsprovisioning.exacttarget.com
unc.edu
carolinawomenlead.unc.edu
emch.sites.oasis.unc.edu
mycarolina.unc.edu
spotsdev.unc.edu
helpme.unch.unc.edu
cryoweb-test.med.unc.edu
kfbs.dev.unc.edu
abl.bme.unc.edu
connect.eship.unc.edu

Certificate

The complete raw certificate details for bdv.unch.unc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3G0YQGMm2yz6h+NbcmyF
mXDg6CuCLiH2IBdI1jRjt6n+YTsMjTDZwU8W+l976uD/qbEi4iC4aGIQGzJILmCN
O9BsSyYGXdx8mhw6zs9jziEv4uJAroU5WruzC2VIIGZkFCD6xIrGUUCB/KXS0TQt
0sqx7UcSLoVpOj/xLh/1h3jmA8J2eANQJGrnp4+0SBLXlJrseUZ69jNTf2gLuN9w
rnaUBdGyhL1egpJcu0bVLq+0DMkrJOhw+89Tdmp5bhCdv5K65poHE+V1bGqCu4Yw
fwcOqhfE+cggGDmShtpE5AKxjqMtbWza5kY74SPX5+L1uP1JqeTvbhZvNcpKV4kn
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 75800009148304971285937536976087541856
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 20:10:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-10 20:10:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chapel Hill'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UNC Health Care'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bdv.unch.unc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27826223710142436977743633223980317577321713909256902883957247960133649867159667089351365964143444550258297801440758354997129976035093272870615796672210179681211133770079771127492104567374908502960856689310594140703593672080967833462622636915433024787073038130266542887124827564318365607026046144729218356485690354737679045224506376963794018295042206590458519386121846556301581975908498379569811827504475036760668182034708078984373812082493721886343352226788364606185831225983518950476572717060548989249804751973792861552676259706189575746782969113958937238437725930670695425301504913754789054815994970960409712469861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ddcbbf7386cd98e647593c4f8376c78c9bf7d3cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (921 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdv.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvHVC.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvHVCtest.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvclar-un1-p01.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvclar-un1-t01.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvHillsGen3.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvHillsGen4.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvHillsGen5.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvHillsGen6.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvHollyGen1.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvHollyGen2.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvHollyGen3.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvHollyGen4.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvHollyCsection.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvCaldwellGen1.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvCaldwellGen2.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvCaldwellGen3.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvwygen1.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvwygen2.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvwyrobo3.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvwygen4.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvwygen5.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvwyurology6.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvwyvasc7.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvwyneuro8.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvwygen9.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvwygen10.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvwyent-eye11.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvwyneuro12.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvwyent-eye13.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvwygen14.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'BDVRXHAV5.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdvor14.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'BDVRXHAV24.unch.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'BDVRXCVOR15.unch.unc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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