cowbird.lifesci.ucsb.edu

- University of California, Santa Barbara -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number c2:7e:2f:b1:67:db:c7:16:ff:f7:77:78:5c:76:92:63 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of California, Santa Barbara

Organization: University of California, Santa Barbara
Organization unit: SSL Management
Address: 5221 Cheadle Hall
Postal code: 93106
State / Province: California
Locality: Santa Barbara
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c2:7e:2f:b1:67:db:c7:16:ff:f7:77:78:5c:76:92:63
Serial Number (int): 258525427915227855219128040516629205603
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 23:8e:13:37:19:2b:a0:bb:b7:4d:fa:81:16:6c:05:5b:2c:d3:a4:8a
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 51:e1:23:ec:8f:67:3d:4b:51:af:ce:c2:e2:e7:24:70:2e:1b:25:e1
Fingerprint (sha256): 01:9b:86:37:77:54:e4:e2:56:95:53:e8:dd:aa:92:0b:04:6f:97:48:fd:10:1f:bb:8f:e7:01:9a:a5:f2:ed:95

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate cowbird.lifesci.ucsb.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cowbird.lifesci.ucsb.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cowbird.lifesci.ucsb.edu

Other certificates including the domain name ucsb.edu

(limited to 100 certificates)
flour.ece.ucsb.edu
physics.ucsb.edu
wepawet.cs.ucsb.edu
5665833682468864-fe1.pantheonsite.io
hrsweb-kx.housing.ucsb.edu
bic03.bic.ucsb.edu
carpepm.almonds.com
idm.my.ucsb.edu
ictf.cs.ucsb.edu
us.prod.campusgroups.com
github.nceas.ucsb.edu
5715605172781056-fe1.pantheonsite.io
leadership.sa.ucsb.edu
learning.nceas.ucsb.edu
5719721496281088-fe4.pantheonsite.io
studentvisa.test.sa.ucsb.edu
5729821648748544-fe1.pantheonsite.io
securessl-pst1.tessituranetworkhost.com
www.csmd.ucsb.edu
ucdc.edu
5680534013345792-fe1.pantheonsite.io
us.prod.campusgroups.com
rotabullstatus.com
www.ece.ucsb.edu
nartc.fcm.arizona.edu
5704093720903680-fe2.pantheonsite.io
api-status.360cities.net
5762637883244544-fe3.pantheonsite.io
ucen.ucsb.edu
5661530653720576-fe2.pantheonsite.io
5715605172781056-fe1.pantheonsite.io
api-status.360cities.net
math.ucsb.edu
5703789046661120-fe2.pantheonsite.io
aurora.nceas.ucsb.edu
www.ascidiancenter.ucsb.edu
microscopy.nri.ucsb.edu
5665370564198400-fe2.pantheonsite.io
donelan.faculty.writing.ucsb.edu
history.ucsb.edu
checkrstatus.com
eci.ucsb.edu
support.nceas.ucsb.edu
5755164371714048-fe3.pantheonsite.io
5654961308303360-fe2.pantheonsite.io
housing.ucsb.edu
info.resnet.ucsb.edu
secure.identity.ucsb.edu
www.mcdb.ucsb.edu
aurora.nceas.ucsb.edu
banknorthstatus.mambu.com
gibber.cc
webmail.sa.ucsb.edu
banking-business-review.com
barc.isc.ucsb.edu
paymentsolutions-status.shijicloud.com
cdn-test.battlefields.org
daylight-header-293093155.eks.dld.library.ucsb.edu
test.eis.uw.edu
dev.nceas.ucsb.edu
admissions.ext-prod.sa.ucsb.edu
5665833682468864-fe1.pantheonsite.io
ucen.ucsb.edu
5636953047302144-fe4.pantheonsite.io
citeak.multidevcom.uaf.edu
5720605454237696-fe1.pantheonsite.io
cowbird.lifesci.ucsb.edu
pathodstest.systems.isc.ucsb.edu
www.cnsi.ucsb.edu
5701569219657728-fe1.pantheonsite.io
web.physics.ucsb.edu
5715605172781056-fe1.pantheonsite.io
5715605172781056-fe1.pantheonsite.io
admin7status.brinkpos.net
graylog.library.ucsb.edu
5762637883244544-fe3.pantheonsite.io
webextracts.test.sa.ucsb.edu
helios.geog.ucsb.edu
studentvisa.test.sa.ucsb.edu
www.arch.cs.ucsb.edu
scl.ece.ucsb.edu
5696605713858560-fe4.pantheonsite.io
philosophy.ucsb.edu
ucen.ucsb.edu
banking-business-review.com
apptcha.seclab.cs.ucsb.edu
anubis.cs.ucsb.edu
5666823336886272-fe4.pantheonsite.io
5715605172781056-fe1.pantheonsite.io
paymentsolutions-status.shijicloud.com
santacruz.nrs.ucsb.edu
scalefundercert.net
chns120.courseresource.yale.edu
5735393697726464-fe2.pantheonsite.io
5738369707409408-fe3.pantheonsite.io
marc.ucsb.edu
5706646944743424-fe4.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
208.lsnc.net

Certificate

The complete raw certificate details for cowbird.lifesci.ucsb.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 258525427915227855219128040516629205603
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '93106'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Barbara'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5221 Cheadle Hall'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of California, Santa Barbara'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSL Management'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cowbird.lifesci.ucsb.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 854469192112968048933561214807966698580770965695465255127617672479592233657078801200998689557579528453056255279206655175113935632678382827337488934607205878508034325628192352701696232075051626647206318582894379790891053619259524907341774416027707295518723207075645950498119151791102965832395350086045875930657317931577090032665807965523096888447828963233081832627970836528645429498737564117295314428700697413800648974001791048505619732994414204649175865593320407646128864594436943784616067041736860358806487312553477421700574710148160700348787667580530547638510070637192394942502956856812869555163631715055511892793782864507522653629127833830349714541523935919365527574518566709545674518826156350257953928634105198310841363178625799108617793093358657749930523890471607287599894722180928054795933203839696457325526872433092066937027031309758844191342143070122302648828137032180505764101018071769359977157246578144325744572160026829892796099605601828106980771972858398055359220230250335014838060491452719678923569160696534128070299834695352141727850815440962333467077025955863981238500343210531057722236647721429658616404768214655486340752613737538088566006936878083004571144719632651522075257169057492549193825335174330547851338494069
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							238e1337192ba0bbb74dfa81166c055b2cd3a48a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cowbird.lifesci.ucsb.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00043fa7f0b81d323083603f2f8cd98d30b2f8b81a7d8c35985bbb0be7aadb07ed498439912b35adef9029c7eed0deffc9a118516bb3511d0a35646c64e8b7d26236c54c436945892a8ad2f013f3cf20fb7fbb35743e49fccdebac1b650b5672ecf5decd73db4dc5ad8d299388fa0e5d89e005fcbdcb85b41cbe4ac9e912a3025a9d9f8ff7294e7482ca06ecb46733fd2afc5aff2dcbecc8ab15df1046663a5cabffbba8d1a781c4ea8eae81409bf09daad16bb56ae26dc4f844c887536c37c57e08a7390309266e7000d182421e06ef5b693ffe4e06c600318904ef62f25fdf7af3049d219d733df3671c9a8f1644ad4df7c976dbd1d98c54cd5316863bbcdb02