www5.cscc.unc.edu
- The University of North Carolina at Chapel Hill -
Issued by InCommon RSA Server CA 2
About this certificate
This digital certificate with serial number 40:b5:79:49:4a:e6:f4:73:d6:ee:9d:96:24:09:a1:b9 was issued on by Internet2.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
The University of North Carolina at Chapel Hill
Organization:
The University of North Carolina at Chapel Hill
State / Province:
North Carolina
Country: US
Country: US
Internet2
Organization:
Internet2
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 40:b5:79:49:4a:e6:f4:73:d6:ee:9d:96:24:09:a1:b9Serial Number (int): 86012857440028423119601391542240649657
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 4f:99:ee:e5:44:cc:d4:98:3d:c9:47:93:9d:52:95:07:cb:1a:64:e2
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9
Fingerprint (sha1): 34:b6:3f:75:6a:88:83:de:3f:54:bc:95:ed:ab:ba:b0:02:5f:e7:57
Fingerprint (sha256): 01:b4:2b:40:08:33:3f:28:b8:9c:d4:de:39:18:36:fc:b5:ea:80:23:39:d5:65:8b:46:7d:ad:a8:53:cf:3f:d5
Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl
Check the revocation status for certificate www5.cscc.unc.edu
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www5.cscc.unc.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www5.cscc.unc.edu
aric.cscc.unc.edu
impact.unc.edu
spiromics.com
spiromics.cscc.unc.edu
spiromics.net
spiromics.org
www.spiromics.com
www.spiromics.net
www.spiromics.org
aric.cscc.unc.edu
impact.unc.edu
spiromics.com
spiromics.cscc.unc.edu
spiromics.net
spiromics.org
www.spiromics.com
www.spiromics.net
www.spiromics.org
Other certificates including the domain name unc.edu
(limited to 100 certificates)
rd-staging.tracs.unc.edu
sogar.oasis.unc.edu
*.sog.unc.edu
adamhochberg.com
janchambers.sites.oasis.unc.edu
medialaw.unc.edu
canons.sog.unc.edu
*.onlinemba.unc.edu
image.20210408.094303.s11.et.yellsatcloud.com
symposium.kenan-flagler.unc.edu
kumar.math.unc.edu
5657535201673216-fe3.pantheonsite.io
gala.ovcsa.unc.edu
dev.infoporte.unc.edu
it.uahs.arizona.edu
ISEMMDCPAN.unch.unc.edu
epid-practicum.sph.unc.edu
ib-ipam2.net.unc.edu
www.makeathon.unc.edu
5635093192245248-fe3.pantheonsite.io
cluster3.technolutions.net
hope.haven.sites.oasis.unc.edu
canons.sog.unc.edu
bootcamp.unc.edu
docimage-iie1.unch.unc.edu
apps.hpdp.unc.edu
tbicenter.unc.edu
advice.unch.unc.edu
stories.unc.edu
ALLSCRIPTSHM-JH.unch.unc.edu
cciprinting.unc.edu
streetfilms.org
blogs.kenan-flagler.unc.edu
theancientway.jomc.unc.edu
nccriminallaw.sog.unc.edu
zachboyd.sites.oasis.unc.edu
gelmore.sites.oasis.unc.edu
compgen.unc.edu
campusrec.unc.edu
*.prospectsandbox.oasis.unc.edu
sslvpn.unch.unc.edu
admin.fpc.unc.edu
caoma.unch.unc.edu
contracts.unc.edu
f5m5.net.unc.edu
dining.unc.edu
5659313586569216-fe4.pantheonsite.io
watsona.sites.oasis.unc.edu
bdv.unch.unc.edu
outlook.unc.edu
k2.shared.global.fastly.net
san-13-s10.tlsprovisioning.exacttarget.com
entsysmon.its.unc.edu
watsona.sites.oasis.unc.edu
itsstatus.unc.edu
www5.cscc.unc.edu
nlp-ssl.cs.unc.edu
cluster3.technolutions.net
chancellorsawards.unc.edu
cfk.unc.edu
*.web.unc.edu
fpgservicedesk.ad.unc.edu
epss.unch.unc.edu
cluster2.technolutions.net
demo-dataverse.odum.unc.edu
advise.alumni.unc.edu
*.fpg.unc.edu
miforms.bioinf.unc.edu
webmail.campus-services.unc.edu
loyola.sites.oasis.unc.edu
emch.sites.oasis.unc.edu
impsci.tracs.unc.edu
gaa.dev.unc.edu
paintrials.unc.edu
adamhochberg.com
epicreport2.unch.unc.edu
p2c.police.unc.edu
itsstatus.unc.edu
applynow.kenan-flagler.unc.edu
apps.fo.unc.edu
5709198289534976-fe4.pantheonsite.io
mobile.uncaa.unc.edu
fms.fammed.unc.edu
dataverse-test.irss.unc.edu
cah.fammed.unc.edu
courses.sph.unc.edu
pml.unc.edu
bomgar.unc.edu
beingthere.cs.unc.edu
*.onlinemph.unc.edu
devservices.unc.edu
portaltest.chs.unc.edu
oisvcse.med.unc.edu
jmhcallmgrpub.unch.unc.edu
dare-idrac.unlisted.med.unc.edu
san-13-s11.tlsprovisioning.exacttarget.com
unc.edu
carolinawomenlead.unc.edu
emch.sites.oasis.unc.edu
mycarolina.unc.edu
sogar.oasis.unc.edu
*.sog.unc.edu
adamhochberg.com
janchambers.sites.oasis.unc.edu
medialaw.unc.edu
canons.sog.unc.edu
*.onlinemba.unc.edu
image.20210408.094303.s11.et.yellsatcloud.com
symposium.kenan-flagler.unc.edu
kumar.math.unc.edu
5657535201673216-fe3.pantheonsite.io
gala.ovcsa.unc.edu
dev.infoporte.unc.edu
it.uahs.arizona.edu
ISEMMDCPAN.unch.unc.edu
epid-practicum.sph.unc.edu
ib-ipam2.net.unc.edu
www.makeathon.unc.edu
5635093192245248-fe3.pantheonsite.io
cluster3.technolutions.net
hope.haven.sites.oasis.unc.edu
canons.sog.unc.edu
bootcamp.unc.edu
docimage-iie1.unch.unc.edu
apps.hpdp.unc.edu
tbicenter.unc.edu
advice.unch.unc.edu
stories.unc.edu
ALLSCRIPTSHM-JH.unch.unc.edu
cciprinting.unc.edu
streetfilms.org
blogs.kenan-flagler.unc.edu
theancientway.jomc.unc.edu
nccriminallaw.sog.unc.edu
zachboyd.sites.oasis.unc.edu
gelmore.sites.oasis.unc.edu
compgen.unc.edu
campusrec.unc.edu
*.prospectsandbox.oasis.unc.edu
sslvpn.unch.unc.edu
admin.fpc.unc.edu
caoma.unch.unc.edu
contracts.unc.edu
f5m5.net.unc.edu
dining.unc.edu
5659313586569216-fe4.pantheonsite.io
watsona.sites.oasis.unc.edu
bdv.unch.unc.edu
outlook.unc.edu
k2.shared.global.fastly.net
san-13-s10.tlsprovisioning.exacttarget.com
entsysmon.its.unc.edu
watsona.sites.oasis.unc.edu
itsstatus.unc.edu
www5.cscc.unc.edu
nlp-ssl.cs.unc.edu
cluster3.technolutions.net
chancellorsawards.unc.edu
cfk.unc.edu
*.web.unc.edu
fpgservicedesk.ad.unc.edu
epss.unch.unc.edu
cluster2.technolutions.net
demo-dataverse.odum.unc.edu
advise.alumni.unc.edu
*.fpg.unc.edu
miforms.bioinf.unc.edu
webmail.campus-services.unc.edu
loyola.sites.oasis.unc.edu
emch.sites.oasis.unc.edu
impsci.tracs.unc.edu
gaa.dev.unc.edu
paintrials.unc.edu
adamhochberg.com
epicreport2.unch.unc.edu
p2c.police.unc.edu
itsstatus.unc.edu
applynow.kenan-flagler.unc.edu
apps.fo.unc.edu
5709198289534976-fe4.pantheonsite.io
mobile.uncaa.unc.edu
fms.fammed.unc.edu
dataverse-test.irss.unc.edu
cah.fammed.unc.edu
courses.sph.unc.edu
pml.unc.edu
bomgar.unc.edu
beingthere.cs.unc.edu
*.onlinemph.unc.edu
devservices.unc.edu
portaltest.chs.unc.edu
oisvcse.med.unc.edu
jmhcallmgrpub.unch.unc.edu
dare-idrac.unlisted.med.unc.edu
san-13-s11.tlsprovisioning.exacttarget.com
unc.edu
carolinawomenlead.unc.edu
emch.sites.oasis.unc.edu
mycarolina.unc.edu
Certificate
The complete raw certificate details for www5.cscc.unc.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHjzCCBfegAwIBAgIQQLV5SUrm9HPW7p2WJAmhuTANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSW50ZXJuZXQyMSEwHwYDVQQDExhJbkNv bW1vbiBSU0EgU2VydmVyIENBIDIwHhcNMjQwNTMwMDAwMDAwWhcNMjUwNTMwMjM1 OTU5WjB8MQswCQYDVQQGEwJVUzEXMBUGA1UECBMOTm9ydGggQ2Fyb2xpbmExODA2 BgNVBAoTL1RoZSBVbml2ZXJzaXR5IG9mIE5vcnRoIENhcm9saW5hIGF0IENoYXBl bCBIaWxsMRowGAYDVQQDExF3d3c1LmNzY2MudW5jLmVkdTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMxbZNmWapLJcv360loHjoexjt5WwnyghMkninVj khMpcIMUPCxv4+uhDQNNOwLSdqhHowKbOS33vY7BxNYHeLOxnIwt1Y+kptWYkcR3 c+OHiJALcW9X09hnpffCD7jJo27oLrM8m5R987kd7CHRGiW5JpdlTmGSvm0UC97e oZSnWY1zTVQiJExRvNw8URufWuyElkbT9CvYZqQzAAYd0em1gCdEYkVhlTNQSuaw B094+oBilWD/l8c9Wfs9aZShUhCCYx5UGDiq+eUIob0z3eP6vdXmgOwif226b107 DDW5u5mtJHydkR9+Nc3yaHZmuc71EKYK2a1123SDtjSI7xkCAwEAAaOCA8MwggO/ MB8GA1UdIwQYMBaAFO9MAJKm+3YuXpXiyV+HGxnVTeLZMB0GA1UdDgQWBBRPme7l RMzUmD3JR5OdUpUHyxpk4jAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEE AbIxAQICZzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAI BgZngQwBAgIwQAYDVR0fBDkwNzA1oDOgMYYvaHR0cDovL2NybC5zZWN0aWdvLmNv bS9JbkNvbW1vblJTQVNlcnZlckNBMi5jcmwwcAYIKwYBBQUHAQEEZDBiMDsGCCsG AQUFBzAChi9odHRwOi8vY3J0LnNlY3RpZ28uY29tL0luQ29tbW9uUlNBU2VydmVy Q0EyLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wggF9 BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AM8RVu7VLnyv84db2Wkum+kacWdKsBfs rAHSW3fOzDsIAAABj8qz2z0AAAQDAEYwRAIgOpifOvtwULZzS/HqhMMeKuHfl1+J 0osCDYz/TO60urkCIGyq/B0iRWAH0FKZDyy4hb/UVoFRmeDR4e8zHstnr3HpAHYA ouMK5EXvva2bfjjtR2d3U9eCW4SU1yteGyzEuVCkR+cAAAGPyrPbHAAABAMARzBF AiB8GfLspF9+Zo3jUp3IjvOWnmeMee7chWO8ZvQ2yNxpgAIhAIBm+bh74Zl5Y1kz sYfI3r4oyF9QTVzqCMu87xQ8XEzOAHYATnWjJ1yaEMM4W2zU3z9S6x3w4I4bjWnA sfpksWKaOd8AAAGPyrPbGwAABAMARzBFAiEA+ppWQ8GAHscUEMqt/WYq2izmzaLH AyYYu9MBwMy6CYACIEqCNlbNhxwX6Pk1Yh1hd1nS9iG+WhX2vrknb5EcW4WMMIG/ BgNVHREEgbcwgbSCEXd3dzUuY3NjYy51bmMuZWR1ghFhcmljLmNzY2MudW5jLmVk dYIOaW1wYWN0LnVuYy5lZHWCDXNwaXJvbWljcy5jb22CFnNwaXJvbWljcy5jc2Nj LnVuYy5lZHWCDXNwaXJvbWljcy5uZXSCDXNwaXJvbWljcy5vcmeCEXd3dy5zcGly b21pY3MuY29tghF3d3cuc3Bpcm9taWNzLm5ldIIRd3d3LnNwaXJvbWljcy5vcmcw DQYJKoZIhvcNAQEMBQADggGBAF+R3n3oyZFaJiR3G4VAYni0MTpoTocJR4U/aBNX SiPMs3SpcAM7f6CjJkiKkTu0IaBY51LkMqwv+5oNAB11pfCI9xhy3l5kfCwTrs22 F3PYOleDO06NUfLGT97gt++ZJYi2R30QojRj1LBuOjW4leUndQ3pPYDXQ7p65t0L yHFi72AGTRvGQBJL9XchHrRg+osrXy4zE+U33zBwgzmCvl7ZPWvzjD/O8XwyNmcU C7fqKY9hzwYxYtZ7I1DwL8yQh0hKoJ86qoOAT0T4F/4rT0D8EJcn3VlKUh9AP4F2 L9OZqp2mOE+9+NT0QpBGvl1q6iBgL7A7QototY7pMFwQai3XG60Gw3es2jmC6FjD VlpVonj0d9W4MmPRs9o0CbikxYZ6rW0E0iOzNaovdp+mJPV4c49YpyCCdHi0RjQP UmDN3/oK6hsHyqEVW3Gv9qYzkzyr+U+G5PhkhWgNQ7M2Ju7cWpyTCax4VqPzLFCN v0v/xSwBOvF/eSb/d7FxdASDQg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFtk2ZZqksly/frSWgeO h7GO3lbCfKCEySeKdWOSEylwgxQ8LG/j66ENA007AtJ2qEejAps5Lfe9jsHE1gd4 s7GcjC3Vj6Sm1ZiRxHdz44eIkAtxb1fT2Gel98IPuMmjbuguszyblH3zuR3sIdEa Jbkml2VOYZK+bRQL3t6hlKdZjXNNVCIkTFG83DxRG59a7ISWRtP0K9hmpDMABh3R 6bWAJ0RiRWGVM1BK5rAHT3j6gGKVYP+Xxz1Z+z1plKFSEIJjHlQYOKr55QihvTPd 4/q91eaA7CJ/bbpvXTsMNbm7ma0kfJ2RH341zfJodma5zvUQpgrZrXXbdIO2NIjv GQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 86012857440028423119601391542240649657 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-30 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of North Carolina at Chapel Hill' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www5.cscc.unc.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25797682247124612371797765606244761668565048330417895647553879802310943677292402793704860069745742991004956866274039621718159751132572833652008003160938867005191744891320039757060164162305337011630143203013748086356940919006097787485290536164858749896953261000767846247050812306799153910646020277422753099047864605975240217025500769366240827068968291869207559302767545906261170650127688928290775611505637949099435850603718828800840298223533072641799962132888407453243580790921907684843712012147134130860781536572425330968595272138376025811167653634368840761667790461114068140296290553370274233647725855185941280911129 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4f99eee544ccd4983dc947939d529507cb1a64e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007500cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018fcab3db3d000004030046304402203a989f3afb7050b6734bf1ea84c31e2ae1df975f89d28b020d8cff4ceeb4bab902206caafc1d22456007d052990f2cb885bfd456815199e0d1e1ef331ecb67af71e9007600a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018fcab3db1c000004030047304502207c19f2eca45f7e668de3529dc88ef3969e678c79eedc8563bc66f436c8dc69800221008066f9b87be19979635933b187c8debe28c85f504d5cea08cbbcef143c5c4cce0076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018fcab3db1b0000040300473045022100fa9a5643c1801ec71410caadfd662ada2ce6cda2c7032618bbd301c0ccba098002204a823656cd871c17e8f935621d617759d2f621be5a15f6beb9276f911c5b858c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (183 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www5.cscc.unc.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aric.cscc.unc.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.unc.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiromics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiromics.cscc.unc.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiromics.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiromics.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiromics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiromics.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiromics.org' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (3072 bits) 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