nsmaclfw01.mac-internal.ucsf.edu
- University of California, San Francisco -
Issued by InCommon RSA Server CA
About this certificate
This digital certificate with serial number 10:91:c2:2a:fa:d3:da:a0:d6:6b:6c:06:8e:99:90:16 was issued on by Internet2.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
University of California, San Francisco
Organization:
University of California, San Francisco
Organization unit: UCSF-General
Organization unit: UCSF-General
State / Province:
California
Country: US
Country: US
Internet2
Organization:
Internet2
Organization unit: InCommon
Organization unit: InCommon
State / Province:
MI
Locality: Ann Arbor
Country: US
Locality: Ann Arbor
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 10:91:c2:2a:fa:d3:da:a0:d6:6b:6c:06:8e:99:90:16Serial Number (int): 22024469169719506241860092663103590422
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: 83:55:22:e5:c9:e9:b5:3b:d3:0c:25:d9:e6:8f:c7:bd:d8:f6:a1:9f
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38
Fingerprint (sha1): 78:cc:73:c5:42:6c:d9:a5:ab:b5:ce:95:f8:13:4a:00:d4:71:f0:ad
Fingerprint (sha256): 01:90:e1:15:50:da:be:8d:bd:5c:e3:8b:34:db:1a:8e:64:19:23:b4:bd:a4:37:65:dc:30:05:08:12:d0:0a:1c
Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl
Check the revocation status for certificate nsmaclfw01.mac-internal.ucsf.edu
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nsmaclfw01.mac-internal.ucsf.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nsmaclfw01.mac-internal.ucsf.edu
nsmaclfw.mac-internal.ucsf.edu
nsmaclfw02.mac-internal.ucsf.edu
nsmaclfw.mac-internal.ucsf.edu
nsmaclfw02.mac-internal.ucsf.edu
Other certificates including the domain name ucsf.edu
(limited to 100 certificates)
www.suzeelee.ucsf.edu
sni.cloudflaressl.com
*.ucsf.edu
lecturepilot.ucsf.edu
barabanlab.ucsf.edu
sni.cloudflaressl.com
wiki.docking.org
5682617542246400-fe1.pantheonsite.io
alertus.ucsf.edu
ucdc.edu
akamai-san50.exacttarget.com
5720929187397632-fe3.pantheonsite.io
sni.cloudflaressl.com
us.prod.campusgroups.com
sni.cloudflaressl.com
biochem.ucsf.edu
mdadmissions.ucsf.edu
image.serviciokia.com.ec
portfolio.ucsf.edu
5673309542809600-fe1.pantheonsite.io
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.suzeelee.ucsf.edu
modbase.compbio.ucsf.edu
awardverification.ucsf.edu
sni.cloudflaressl.com
uplantest.ucsf.edu
5673309542809600-fe1.pantheonsite.io
menus.library.ucsf.edu
5673309542809600-fe1.pantheonsite.io
test.eis.uw.edu
incapsula.com
image.serviciokia.com.ec
nsmaclfw01.mac-internal.ucsf.edu
sni.cloudflaressl.com
gartnerdata.ucsf.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
5682617542246400-fe1.pantheonsite.io
neuroscape.ucsf.edu
scalefunder.net
gmail.ucsf.edu
iris-pa-dev.ucsf.edu
shiehlab.ucsf.edu
sni.cloudflaressl.com
vx105.ucsf.edu
5673309542809600-fe1.pantheonsite.io
view.our.ucsf.edu
5684453372329984-fe2.pantheonsite.io
jdgmail.ucsf.edu
us.prod.campusgroups.com
bionano.ucsf.edu
hivinsite.ucsf.edu
weinbergerlab.ucsf.edu
sni.cloudflaressl.com
suzeelee.ucsf.edu
prospector.ucsf.edu
remote.ucsf.edu
opengut.ucsf.edu
humangenetics.ucsf.edu
na132-2.cdn.salesforce-communities.com
precisionneuro-radiology.ucsf.edu
5632490240737280-fe4.pantheonsite.io
transcare.ucsf.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
moodle.ucsf.edu
dermpath.ucsf.edu
sni.cloudflaressl.com
clinicaltrials.ucsf.edu
sni.cloudflaressl.com
cwms-admin.infra.ucsf.edu
dermpath.ucsf.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
champagne.ucsf.edu
mydocs.ucsf.edu
sni.cloudflaressl.com
www.dermpath.ucsf.edu
sni.cloudflaressl.com
fredchanglab.ucsf.edu
sni.cloudflaressl.com
weinbergerlab.ucsf.edu
tls.automattic.com
sni.cloudflaressl.com
dermatopathology.ucsf.edu
parngti.radiology.ucsf.edu
5706316634914816-fe1.pantheonsite.io
dermatology.ucsf.edu
makeagift.ucsf.edu
prevention.ucsf.edu
sni.cloudflaressl.com
wiki.docking.org
sni.cloudflaressl.com
sni.cloudflaressl.com
wiki.wynton.ucsf.edu
rtemis.mac-internal.ucsf.edu
5682617542246400-fe1.pantheonsite.io
sni.cloudflaressl.com
sni.cloudflaressl.com
*.ucsf.edu
lecturepilot.ucsf.edu
barabanlab.ucsf.edu
sni.cloudflaressl.com
wiki.docking.org
5682617542246400-fe1.pantheonsite.io
alertus.ucsf.edu
ucdc.edu
akamai-san50.exacttarget.com
5720929187397632-fe3.pantheonsite.io
sni.cloudflaressl.com
us.prod.campusgroups.com
sni.cloudflaressl.com
biochem.ucsf.edu
mdadmissions.ucsf.edu
image.serviciokia.com.ec
portfolio.ucsf.edu
5673309542809600-fe1.pantheonsite.io
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.suzeelee.ucsf.edu
modbase.compbio.ucsf.edu
awardverification.ucsf.edu
sni.cloudflaressl.com
uplantest.ucsf.edu
5673309542809600-fe1.pantheonsite.io
menus.library.ucsf.edu
5673309542809600-fe1.pantheonsite.io
test.eis.uw.edu
incapsula.com
image.serviciokia.com.ec
nsmaclfw01.mac-internal.ucsf.edu
sni.cloudflaressl.com
gartnerdata.ucsf.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
5682617542246400-fe1.pantheonsite.io
neuroscape.ucsf.edu
scalefunder.net
gmail.ucsf.edu
iris-pa-dev.ucsf.edu
shiehlab.ucsf.edu
sni.cloudflaressl.com
vx105.ucsf.edu
5673309542809600-fe1.pantheonsite.io
view.our.ucsf.edu
5684453372329984-fe2.pantheonsite.io
jdgmail.ucsf.edu
us.prod.campusgroups.com
bionano.ucsf.edu
hivinsite.ucsf.edu
weinbergerlab.ucsf.edu
sni.cloudflaressl.com
suzeelee.ucsf.edu
prospector.ucsf.edu
remote.ucsf.edu
opengut.ucsf.edu
humangenetics.ucsf.edu
na132-2.cdn.salesforce-communities.com
precisionneuro-radiology.ucsf.edu
5632490240737280-fe4.pantheonsite.io
transcare.ucsf.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
moodle.ucsf.edu
dermpath.ucsf.edu
sni.cloudflaressl.com
clinicaltrials.ucsf.edu
sni.cloudflaressl.com
cwms-admin.infra.ucsf.edu
dermpath.ucsf.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
champagne.ucsf.edu
mydocs.ucsf.edu
sni.cloudflaressl.com
www.dermpath.ucsf.edu
sni.cloudflaressl.com
fredchanglab.ucsf.edu
sni.cloudflaressl.com
weinbergerlab.ucsf.edu
tls.automattic.com
sni.cloudflaressl.com
dermatopathology.ucsf.edu
parngti.radiology.ucsf.edu
5706316634914816-fe1.pantheonsite.io
dermatology.ucsf.edu
makeagift.ucsf.edu
prevention.ucsf.edu
sni.cloudflaressl.com
wiki.docking.org
sni.cloudflaressl.com
sni.cloudflaressl.com
wiki.wynton.ucsf.edu
rtemis.mac-internal.ucsf.edu
5682617542246400-fe1.pantheonsite.io
sni.cloudflaressl.com
Certificate
The complete raw certificate details for nsmaclfw01.mac-internal.ucsf.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIQEJHCKvrT2qDWa2wGjpmQFjANBgkqhkiG9w0BAQsFADB2 MQswCQYDVQQGEwJVUzELMAkGA1UECBMCTUkxEjAQBgNVBAcTCUFubiBBcmJvcjES MBAGA1UEChMJSW50ZXJuZXQyMREwDwYDVQQLEwhJbkNvbW1vbjEfMB0GA1UEAxMW SW5Db21tb24gUlNBIFNlcnZlciBDQTAeFw0yMTEyMjAwMDAwMDBaFw0yMzAxMjAy MzU5NTlaMIGWMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEwMC4G A1UEChMnVW5pdmVyc2l0eSBvZiBDYWxpZm9ybmlhLCBTYW4gRnJhbmNpc2NvMRUw EwYDVQQLEwxVQ1NGLUdlbmVyYWwxKTAnBgNVBAMTIG5zbWFjbGZ3MDEubWFjLWlu dGVybmFsLnVjc2YuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA 03dAnH5CTaOP8QBLpYuHth9Udx1wRYqTMZip5IPLWCoQ5cnx+L24RLbJjKFmudKT WAxM68GhCSCXOMeNVfzrQHykURLWPdwklfjCoUYi6nV9gAeeOskL0HTNLV7L8KrC wyLIV29CdLuOFP8/SOUUp3iGyeYcDKNq98hClU8qNWu1/50jmodRCqJl2iI6ZQjC CU+8Zb6OjSuiQ9o4Ybdcm8Ix0bKKAps/vr5JT8fSvbRaGJQxeKeTRn7RKUsiR4Yo EZVmw2esz3eXurbkGh/nqpk/bC+NCbeCtWfHByrHnDXjVmvPps/wYJKEDPnfoMIv +qEHSey3J47/DdTarZ+p/wIDAQABo4ICKzCCAicwHwYDVR0jBBgwFoAUHgWjd49s luJbh0umtIascQAM5zgwHQYDVR0OBBYEFINVIuXJ6bU70wwl2eaPx73Y9qGfMA4G A1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjBnBgNVHSAEYDBeMFIGDCsGAQQBriMBBAMBATBCMEAGCCsGAQUF BwIBFjRodHRwczovL3d3dy5pbmNvbW1vbi5vcmcvY2VydC9yZXBvc2l0b3J5L2Nw c19zc2wucGRmMAgGBmeBDAECAjBEBgNVHR8EPTA7MDmgN6A1hjNodHRwOi8vY3Js LmluY29tbW9uLXJzYS5vcmcvSW5Db21tb25SU0FTZXJ2ZXJDQS5jcmwwdQYIKwYB BQUHAQEEaTBnMD4GCCsGAQUFBzAChjJodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20v SW5Db21tb25SU0FTZXJ2ZXJDQV8yLmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29j c3AudXNlcnRydXN0LmNvbTATBgorBgEEAdZ5AgQDAQH/BAIFADBtBgNVHREEZjBk giBuc21hY2xmdzAxLm1hYy1pbnRlcm5hbC51Y3NmLmVkdYIebnNtYWNsZncubWFj LWludGVybmFsLnVjc2YuZWR1giBuc21hY2xmdzAyLm1hYy1pbnRlcm5hbC51Y3Nm LmVkdTANBgkqhkiG9w0BAQsFAAOCAQEABHHx9mzEn0i8lLufflo9eqW4/5bwFOjp 3e0372eXkmTWqQAyaB6g2yJQGBdp+Faae8rlMfBAe+S2fX+LhELHGxwlhzZHSPba 5HB8uO791/JPs1LhFOT37lVF0GyWhpqpCjwP1SXreXqHIUwKFjsOhVxb6MCfwgvN D06L2cCzvQm96aWqYw8Ch9lsYgCr1NC4mkfCfaKGdfAHKnIUtOq9zU6HkH5FwAG6 iDVzd9ry/LQg2fGrTq+IG7nSclAtGVXunuT/sP96LkgrTcKW2pAiArrYpKt5z9Vr qCdcoY/+XL1PbGRLzH/VpOi8G8D2M47yVq4iTgphPTZ13oQzFJ1W8w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03dAnH5CTaOP8QBLpYuH th9Udx1wRYqTMZip5IPLWCoQ5cnx+L24RLbJjKFmudKTWAxM68GhCSCXOMeNVfzr QHykURLWPdwklfjCoUYi6nV9gAeeOskL0HTNLV7L8KrCwyLIV29CdLuOFP8/SOUU p3iGyeYcDKNq98hClU8qNWu1/50jmodRCqJl2iI6ZQjCCU+8Zb6OjSuiQ9o4Ybdc m8Ix0bKKAps/vr5JT8fSvbRaGJQxeKeTRn7RKUsiR4YoEZVmw2esz3eXurbkGh/n qpk/bC+NCbeCtWfHByrHnDXjVmvPps/wYJKEDPnfoMIv+qEHSey3J47/DdTarZ+p /wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 22024469169719506241860092663103590422 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of California, San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UCSF-General' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nsmaclfw01.mac-internal.ucsf.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26695087892022886511083910220285200200492297729890178500110553741435932128850451514600262261735955382363158601264057824684415456272237014161407847745668208885165002740155788335945984058751626189536187882891260247732245174913333432803017112031310401975939618085326864234591154151924347002626625857869755485867756839299604551971146583025948965578603730332712393615666091592050238678538249538590058125997656158498275759211805008039323705982188904839236886020900517673623541109074327219815972324199725527731795604039505229505074315890032666369430368316734324077316418128407703702170365133615984030606779957836328808196607 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 835522e5c9e9b53bd30c25d9e68fc7bdd8f6a19f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsmaclfw01.mac-internal.ucsf.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsmaclfw.mac-internal.ucsf.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsmaclfw02.mac-internal.ucsf.edu' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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