ais324l.princeton.edu

- The Trustees of Princeton University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 0f:ef:ce:50:e7:e1:b5:de:1b:58:90:a6:e4:7e:8b:84 was issued on by Internet2.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Trustees of Princeton University

Organization: The Trustees of Princeton University
Organization unit: OIT
Address: 1 Nassau Hall
Postal code: 08544
State / Province: NJ
Locality: Princeton
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:ef:ce:50:e7:e1:b5:de:1b:58:90:a6:e4:7e:8b:84
Serial Number (int): 21183563472358819705655305236654230404
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6f:01:7e:8b:80:73:4e:6f:88:ea:10:64:bd:9e:da:f0:a4:4f:1b:42
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 4d:1a:cd:fd:22:24:6e:37:fa:93:dd:f0:a0:7d:42:a0:c7:31:a0:8d
Fingerprint (sha256): 01:98:71:94:85:3a:f4:7c:e9:0f:c8:18:cc:ab:93:9f:65:85:d8:91:17:25:19:ff:fb:24:2b:c7:b8:25:a5:18

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate ais324l.princeton.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ais324l.princeton.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ais324l.princeton.edu
wso2ei-dev.princeton.edu

Other certificates including the domain name princeton.edu

(limited to 100 certificates)
libimages.princeton.edu
webspace.princeton.edu
5648269346603008-fe1.pantheonsite.io
svn.princeton.edu
msl.cs.princeton.edu
test-web-lws.edu.help
5729327995944960-fe3.pantheonsite.io
unsupervised.cs.princeton.edu
filmstudies.princeton.edu
dss.cs.princeton.edu
aisob113w.princeton.edu
pemm.cdh.princeton.edu
us.prod.campusgroups.com
5739407210446848-fe1.pantheonsite.io
5701241594183680-fe4.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
securesendqa.princeton.edu
proteomics-r.princeton.edu
deepcompletion.cs.princeton.edu
5739407210446848-fe1.pantheonsite.io
cluster3.technolutions.net
6328556195938304-fe4.pantheonsite.io
5769720821186560-fe3.pantheonsite.io
5648269346603008-fe1.pantheonsite.io
5757334940811264-fe4.pantheonsite.io
cluster3.technolutions.net
scholar.princeton.edu
5764144745676800-fe3.pantheonsite.io
5679413765079040-fe4.pantheonsite.io
interacdome.princeton.edu
us.prod.campusgroups.com
5691420614590464-fe3.pantheonsite.io
5664902681198592-fe4.pantheonsite.io
etc2.princeton.edu
nartc.fcm.arizona.edu
5685057352105984-fe4.pantheonsite.io
5730602795925504-fe1.pantheonsite.io
nphoto.cs.princeton.edu
5648269346603008-fe1.pantheonsite.io
dss.cs.princeton.edu
middleagesforeducators.princeton.edu
faces.cs.princeton.edu
5707324073181184-fe2.pantheonsite.io
eos.cs.princeton.edu
5665370564198400-fe2.pantheonsite.io
5675267779461120-fe4.pantheonsite.io
patents.princeton.edu
5761253830033408-fe3.pantheonsite.io
lizard.princeton.edu
5764144745676800-fe3.pantheonsite.io
swebapps.princeton.edu
pac.cs.princeton.edu
das101w.princeton.edu
banking-business-review.com
5729327995944960-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5747976207073280-fe2.pantheonsite.io
class1985.tigernet.princeton.edu
5750031617359872-fe4.pantheonsite.io
tigernet.princeton.edu
uaps2007.princeton.edu
faces.cs.princeton.edu
5659313586569216-fe4.pantheonsite.io
gea.princeton.edu
5645784439586816-fe4.pantheonsite.io
*.ezproxy.princeton.edu
phubqa-vip2.princeton.edu
5163657986048000-fe4.pantheonsite.io
5631639635886080-fe4.pantheonsite.io
vst.cs.princeton.edu
gradfutures.princeton.edu
citeak.multidevcom.uaf.edu
psrc.princeton.edu
ais324l.princeton.edu
www.design-engineering.princeton.edu
5699257587728384-fe4.pantheonsite.io
5691420614590464-fe3.pantheonsite.io
5761253830033408-fe3.pantheonsite.io
smirk.cs.princeton.edu
5739407210446848-fe1.pantheonsite.io
cchri.princeton.edu
cluster3.technolutions.net
5739407210446848-fe1.pantheonsite.io
nxterra.ucop.edu
5769720821186560-fe3.pantheonsite.io
tableaud.princeton.edu
obj-manip.cs.princeton.edu
lineshape.cs.princeton.edu
nyao.princeton.edu
dpd.cs.princeton.edu
deepcompletion.cs.princeton.edu
banking-business-review.com
5761253830033408-fe3.pantheonsite.io
5761253830033408-fe3.pantheonsite.io
5724313353191424-fe4.pantheonsite.io
opr.princeton.edu
5769720821186560-fe3.pantheonsite.io
5685057352105984-fe4.pantheonsite.io
inspector.cs.princeton.edu
6328556195938304-fe4.pantheonsite.io

Certificate

The complete raw certificate details for ais324l.princeton.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21183563472358819705655305236654230404
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '08544'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NJ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Princeton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1 Nassau Hall'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Trustees of Princeton University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OIT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ais324l.princeton.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 701353809909026264010592930279555844456871633140986922382994037533776768015947036958608260566258612747772807651179196226485059789530418577780874701843350498114064191152701203098847596987385649038897664077926873293636405684301025430591340101240608639430709906774088905122331432524597948363611762376783733165941181660529107618642377868501815150340688167775919351595638615309790243583709639582069768651799560391138352638273568508834596284056786536375755998182210435700379580637649046256100532099563925068871860692458484669941632216866655126766464992321375418333699821555807971503051914393160997639347075043381470031423763532028085234214927820253333143364690549460658169603462714631419120731337872558064165013399125895370968414015841411196657879839899886774829817370803353796964296697911454088267550833446209663360826935612377762182952673819089478031253582473024611309066420201615048677182804844329382539949773024756148541194488988343896547004459354602448077546117767428558103214548212158153055534547488265765342577303389439996723082197502636298689753989117007950232725116078873041295321032803914500884894813264258753550273776644842909525830526337158550351917810455327000526422044249003036685677973736626272100485920639285997457261923927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f017e8b80734e6f88ea1064bd9edaf0a44f1b42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ais324l.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wso2ei-dev.princeton.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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