bears.unco.edu
- University of Northern Colorado -
Issued by InCommon RSA Server CA 2
About this certificate
This digital certificate with serial number 3e:6f:3a:4b:b8:09:c4:83:f9:56:98:f6:a3:4a:26:1e was issued on by Internet2.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
University of Northern Colorado
Organization:
University of Northern Colorado
State / Province:
Colorado
Country: US
Country: US
Internet2
Organization:
Internet2
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 3e:6f:3a:4b:b8:09:c4:83:f9:56:98:f6:a3:4a:26:1eSerial Number (int): 82989663068788400511337687649150969374
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: a7:37:de:85:25:c1:17:0a:69:f9:a4:af:d0:02:4c:5d:58:8d:44:9c
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9
Fingerprint (sha1): 2b:17:53:44:6b:00:4e:85:e9:f9:15:34:5e:90:f0:2c:94:ab:1f:20
Fingerprint (sha256): 01:97:29:61:2b:fa:01:ee:f7:16:6f:4a:12:b4:9e:8e:2d:e3:2a:59:31:72:cb:8a:5b:35:4a:d5:bb:3f:cd:47
Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl
Check the revocation status for certificate bears.unco.edu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bears.unco.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bears.unco.edu
Other certificates including the domain name unco.edu
(limited to 100 certificates)
itic01.unco.edu
www.unco.edu
uncssbtest.unco.edu
bears.unco.edu
san-6-s10.tlsprovisioning.exacttarget.com
zoom.unco.edu
calendar.unco.edu
studyabroad.unco.edu
analytics.unco.edu
itjss01.unco.edu
libguides.unco.edu
www.unco.edu
webxtender.unco.edu
physics.unco.edu
canvascatalog.unco.edu
cas.unco.edu
libanswers.unco.edu
vpn.unco.edu
dwtest.unco.edu
degree.unco.edu
itef01.unco.edu
degree.unco.edu
digscholarship.unco.edu
edge-uc1.peopleadmin.com
libanswers.unco.edu
give.unco.edu
adfs.unco.edu
cluster.technolutions.net
hss.unco.edu
encore.unco.edu
ursa.unco.edu
rentals.unco.edu
uncssb1.unco.edu
cornerstone.unco.edu
studenthousing.unco.edu
rentals.unco.edu
san-6-s10.tlsprovisioning.exacttarget.com
owa.unco.edu
sfr.unco.edu
digarch.unco.edu
cluster.technolutions.net
remotepc.unco.edu
libguides.unco.edu
share.unco.edu
www.unco.edu
gobears.unco.edu
digarch.unco.edu
digscholarship.unco.edu
barracuda.unco.edu
owa.unco.edu
remotepc.unco.edu
listserv.unco.edu
apply.unco.edu
isss.unco.edu
share.unco.edu
jss.unco.edu
itcewe01.unco.edu
libguides.unco.edu
uncssb9qa.unco.edu
degree.unco.edu
edge-uc1.peopleadmin.com
owa.unco.edu
remote2.unco.edu
give.unco.edu
rentals.unco.edu
mobile-test.unco.edu
www.unco.edu
rentals.unco.edu
san-6-s10.tlsprovisioning.exacttarget.com
edge-uc1.peopleadmin.com
search.unco.edu
itbtinb05.unco.edu
nhsrca01.unco.edu
mathit.unco.edu
digscholarship.unco.edu
share.unco.edu
mathit.unco.edu
learn.unco.edu
testp4p.unco.edu
unc-wireless.unco.edu
unc-guest.unco.edu
libanswers.unco.edu
housing.unco.edu
barracuda.unco.edu
www.arts.unco.edu
remote1.unco.edu
apply.unco.edu
digscholarship.unco.edu
admissions.unco.edu
admissions.unco.edu
remote2.unco.edu
apps.unco.edu
testapps.unco.edu
aw.unco.edu
uncssb9.unco.edu
degree.unco.edu
san-6-s10.tlsprovisioning.exacttarget.com
mast.unco.edu
admissions.unco.edu
www.unco.edu
uncssbtest.unco.edu
bears.unco.edu
san-6-s10.tlsprovisioning.exacttarget.com
zoom.unco.edu
calendar.unco.edu
studyabroad.unco.edu
analytics.unco.edu
itjss01.unco.edu
libguides.unco.edu
www.unco.edu
webxtender.unco.edu
physics.unco.edu
canvascatalog.unco.edu
cas.unco.edu
libanswers.unco.edu
vpn.unco.edu
dwtest.unco.edu
degree.unco.edu
itef01.unco.edu
degree.unco.edu
digscholarship.unco.edu
edge-uc1.peopleadmin.com
libanswers.unco.edu
give.unco.edu
adfs.unco.edu
cluster.technolutions.net
hss.unco.edu
encore.unco.edu
ursa.unco.edu
rentals.unco.edu
uncssb1.unco.edu
cornerstone.unco.edu
studenthousing.unco.edu
rentals.unco.edu
san-6-s10.tlsprovisioning.exacttarget.com
owa.unco.edu
sfr.unco.edu
digarch.unco.edu
cluster.technolutions.net
remotepc.unco.edu
libguides.unco.edu
share.unco.edu
www.unco.edu
gobears.unco.edu
digarch.unco.edu
digscholarship.unco.edu
barracuda.unco.edu
owa.unco.edu
remotepc.unco.edu
listserv.unco.edu
apply.unco.edu
isss.unco.edu
share.unco.edu
jss.unco.edu
itcewe01.unco.edu
libguides.unco.edu
uncssb9qa.unco.edu
degree.unco.edu
edge-uc1.peopleadmin.com
owa.unco.edu
remote2.unco.edu
give.unco.edu
rentals.unco.edu
mobile-test.unco.edu
www.unco.edu
rentals.unco.edu
san-6-s10.tlsprovisioning.exacttarget.com
edge-uc1.peopleadmin.com
search.unco.edu
itbtinb05.unco.edu
nhsrca01.unco.edu
mathit.unco.edu
digscholarship.unco.edu
share.unco.edu
mathit.unco.edu
learn.unco.edu
testp4p.unco.edu
unc-wireless.unco.edu
unc-guest.unco.edu
libanswers.unco.edu
housing.unco.edu
barracuda.unco.edu
www.arts.unco.edu
remote1.unco.edu
apply.unco.edu
digscholarship.unco.edu
admissions.unco.edu
admissions.unco.edu
remote2.unco.edu
apps.unco.edu
testapps.unco.edu
aw.unco.edu
uncssb9.unco.edu
degree.unco.edu
san-6-s10.tlsprovisioning.exacttarget.com
mast.unco.edu
admissions.unco.edu
Certificate
The complete raw certificate details for bears.unco.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGzjCCBTagAwIBAgIQPm86S7gJxIP5Vpj2o0omHjANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSW50ZXJuZXQyMSEwHwYDVQQDExhJbkNv bW1vbiBSU0EgU2VydmVyIENBIDIwHhcNMjQwMTE4MDAwMDAwWhcNMjUwMTE3MjM1 OTU5WjBjMQswCQYDVQQGEwJVUzERMA8GA1UECBMIQ29sb3JhZG8xKDAmBgNVBAoT H1VuaXZlcnNpdHkgb2YgTm9ydGhlcm4gQ29sb3JhZG8xFzAVBgNVBAMTDmJlYXJz LnVuY28uZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/TFDuV+ s+hDFbGBwq5sD8Lk5ocqc/Dpux1uhM2XZmuFoFO7G51G7u7e+tilAs1EpHpZXgel UCq8HujASMT1N7YKFpo/v1b7zps1kzsYg5sDXd8HfSJj9tvI6FlzZGawfqebwbbu 5jbWonFpz1pDwquLzeTsefaQUdECeE5PHcE6QnvLqXtEibLWOYrYhr5LIFkRoiaK sfVl7XVCKFjJZ8NQypeRFAYOArq1hfPuShwm6kROOg5HbDZ1UWmBtydFKQmXuw9l gqGhgAsIdkOqujpU1+f7PtGPTHpmHE7gk5JbDARZlx2K4vlwbiKUgjInUsJMBGPF krqhEJvzyD5RXQIDAQABo4IDGzCCAxcwHwYDVR0jBBgwFoAU70wAkqb7di5eleLJ X4cbGdVN4tkwHQYDVR0OBBYEFKc33oUlwRcKafmkr9ACTF1YjUScMA4GA1UdDwEB /wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgJnMCUwIwYIKwYBBQUHAgEWF2h0 dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjBABgNVHR8EOTA3MDWgM6Ax hi9odHRwOi8vY3JsLnNlY3RpZ28uY29tL0luQ29tbW9uUlNBU2VydmVyQ0EyLmNy bDBwBggrBgEFBQcBAQRkMGIwOwYIKwYBBQUHMAKGL2h0dHA6Ly9jcnQuc2VjdGln by5jb20vSW5Db21tb25SU0FTZXJ2ZXJDQTIuY3J0MCMGCCsGAQUFBzABhhdodHRw Oi8vb2NzcC5zZWN0aWdvLmNvbTAZBgNVHREEEjAQgg5iZWFycy51bmNvLmVkdTCC AXwGCisGAQQB1nkCBAIEggFsBIIBaAFmAHUAzxFW7tUufK/zh1vZaS6b6RpxZ0qw F+ysAdJbd87MOwgAAAGNHqViIQAABAMARjBEAiA6rJ1HeL7UH8/qwupjW9bXw2N4 uzzHa/27DtHBXc0ydgIgbDSueFfF7JN5R6wHSVTs1wQwZUwHwLxgWkWzeIU8dpAA dgCi4wrkRe+9rZt+OO1HZ3dT14JbhJTXK14bLMS5UKRH5wAAAY0epWKgAAAEAwBH MEUCIQDJEjzS+qZwopGbJB9Q2NiTKET8y9O+QC20xpxNDbn9UgIgUW3q13fppdaO o5kYQaLqXUqmQeXWu82giSzUEFHP51wAdQBOdaMnXJoQwzhbbNTfP1LrHfDgjhuN acCx+mSxYpo53wAAAY0epWH9AAAEAwBGMEQCIBcvRXa/WkyK3WhGKDLIjiOgnq27 Ct9Hb0YpPfmGhN0dAiB6xjtZWhpBjFS5RX20AluRFCqlcnmODoa0mEPcq/KrgjAN BgkqhkiG9w0BAQwFAAOCAYEAaM27vbZoOGMZtE0Ufrvqzvlfi/A0HahMnzMx0nK5 7m53AzwjuX9o2u2he549ZhDQ7y6A5mp9spS+D9g98Ui/tXAu4KOJVWO0zuDVA6f9 pyKo0YUw3xj4bAREbZSZ70uzEyuvBPZgQhT6mwYBtzj0u9qEOlXaw+BpRCgXfz2i r5z/r1mVEen6930FCIpVxrJOcZuBbufZekA62viYIhQe9bsrjj8/g/sefWfb0b5I gqrmRR4MXs4T7RuGvyz79izxjzmNuQxmGVs2tUUVX+6ELIlK+8Kahj+aWmrqJdCR Lul9qR+54d9FkamhGKbs6pEuTbGSa/kfR4n8O4ViNc7uIZfdYcX0RHIBkkWLo0Tr UCV5hn+gxaBUZLLCmHlDsv4J6Z6q/R7Reh1sspbVhTYPakW1w7QXisTuOBt/4P6l jjvvZQqVrTvzAJ9HbptYsJSPNyPJ6KO6EbFyrsA+uIwz/Y5IccY9zMp59PFF2BS6 TQWF9roImctsklQXPeEmsQhY -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/TFDuV+s+hDFbGBwq5s D8Lk5ocqc/Dpux1uhM2XZmuFoFO7G51G7u7e+tilAs1EpHpZXgelUCq8HujASMT1 N7YKFpo/v1b7zps1kzsYg5sDXd8HfSJj9tvI6FlzZGawfqebwbbu5jbWonFpz1pD wquLzeTsefaQUdECeE5PHcE6QnvLqXtEibLWOYrYhr5LIFkRoiaKsfVl7XVCKFjJ Z8NQypeRFAYOArq1hfPuShwm6kROOg5HbDZ1UWmBtydFKQmXuw9lgqGhgAsIdkOq ujpU1+f7PtGPTHpmHE7gk5JbDARZlx2K4vlwbiKUgjInUsJMBGPFkrqhEJvzyD5R XQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 82989663068788400511337687649150969374 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-17 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Northern Colorado' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bears.unco.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24737169934891420704514622874000455395052541279196316870096303477182886988005661797496013248460095592252255340466138350166694924331539137278853804798258934742927404097999165073986049390974885211965762994229114649107233904798736723729831635683909343413857114829027476991093143348626408803612677422916929209946077839958321054299140742569275525748602646568733126501932847635421680662426842129227028554243299897514834944051031267459556882423670199414829680618667228912438563309898497363206776802329530325306873416926013149442219617648499875869154210791155210881061399732832692540109176693626367888949853747070713980670301 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a737de8525c1170a69f9a4afd0024c5d588d449c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bears.unco.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (3072 bits) 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