healthlab.urmc.rochester.edu

- University of Rochester -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 90:1f:b0:e0:85:95:b7:ed:73:f5:db:cf:36:6c:80:b0 was issued on by Internet2.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Rochester

Organization: University of Rochester
Organization unit: URMC
Address: 500 Joseph C. Wilson Blvd
Postal code: 14627
State / Province: NY
Locality: Rochester
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 90:1f:b0:e0:85:95:b7:ed:73:f5:db:cf:36:6c:80:b0
Serial Number (int): 191573380088183616070500908604985213104
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: de:89:62:12:dc:59:da:dd:2e:e9:89:0e:48:b6:de:8d:89:f9:1c:1c
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 9f:5a:3b:83:bb:da:e9:8a:21:a7:ed:2a:41:a6:54:69:50:91:aa:f9
Fingerprint (sha256): 01:be:4d:84:fd:df:94:95:d6:1f:61:0a:3e:40:92:b7:1f:8c:1b:b2:1f:56:e0:9d:88:0f:17:63:e1:c8:c7:09

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate healthlab.urmc.rochester.edu

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for healthlab.urmc.rochester.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

healthlab.urmc.rochester.edu
ccinet.urmc.rochester.edu
ccineta.urmc.rochester.edu
ccinetb.urmc.rochester.edu
ccinetc.urmc.rochester.edu
ccinetd.urmc.rochester.edu
innovation.urmc.rochester.edu

Other certificates including the domain name rochester.edu

(limited to 100 certificates)
ertest-mctrain.urmc-sh.rochester.edu
sjelderk.digitalscholar.rochester.edu
*.givegab.com
us.prod.campusgroups.com
ercprd3-dr.urmc-sh.rochester.edu
lists.rochester.edu
mmolchan.digitalscholar.rochester.edu
sjelderk.digitalscholar.rochester.edu
caponech.dslab.digitalscholar.rochester.edu
cluster.technolutions.net
*.mc.rochester.edu
cluster3.technolutions.net
admissionwebdev.urmc.rochester.edu
tstuber.digitalscholar.rochester.edu
us.prod.campusgroups.com
fertilegroundroc.org
myidentity.rochester.edu
rna.urmc.rochester.edu
simonadm.rochester.edu
bis.urmc.rochester.edu
filemaker.ur.rochester.edu
corona-dmc-3.its.rochester.edu
rclomeka2.lib.rochester.edu
*.givegab.com
digitalelmina.org
msrl-gw.circ.rochester.edu
cvsnas4.cvs.rochester.edu
test.mcdonough.digitalscholar.rochester.edu
public-art.dslab.digitalscholar.rochester.edu
its-cyhy-up01.its.rochester.edu
swang.digitalscholar.rochester.edu
fogbugz.lle.rochester.edu
its-bblmap-ud02.its.rochester.edu
its-fmsweb-wp01.ur.rochester.edu
info.circ.rochester.edu
*.givegab.com
urspace.ur.rochester.edu
www.cse.rochester.edu
spoons.digitalscholar.rochester.edu
studentservices.ur.rochester.edu
healthlab.urmc.rochester.edu
cluster3.technolutions.net
*.givegab.com
khuskin.digitalscholar.rochester.edu
tstuber.digitalscholar.rochester.edu
tracker.ctcc.rochester.edu
dslab.digitalscholar.rochester.edu
itgovernance.ur.rochester.edu
s.patricksullivan.digitalscholar.rochester.edu
research.son.rochester.edu
wchui.digitalscholar.rochester.edu
illiad.lib.rochester.edu
its-uceapp-wq1.ur.rochester.edu
*.lle.rochester.edu
us.prod.campusgroups.com
son.rochester.edu
rochesteraliaspages-dev.ur.rochester.edu
ercd-epcs.urmc-sh.rochester.edu
wchui.digitalscholar.rochester.edu
arcgis.ur.rochester.edu
brainlabweb.urmc-sh.rochester.edu
yourhealth.rochester.edu
mulberry.lle.rochester.edu
cluster.technolutions.net
urwell.rochester.edu
aths.digitalscholar.rochester.edu
its-uceapp-wt1.ur.rochester.edu
brainlabweb.urmc-sh.rochester.edu
voltage-pp-0000.ur.rochester.edu
cluster.technolutions.net
carolenasra.digitalscholar.rochester.edu
sbarrett.digitalscholar.rochester.edu
i2b2.urmc-sh.rochester.edu
helendavies.digitalscholar.rochester.edu
trials.ctcc.rochester.edu
tarmin2.circ.rochester.edu
uconnectlabs.com
pstestcont.acs.rochester.edu
cluster.technolutions.net
orbit.urmc.rochester.edu
sp-expcore01.urmc-sh.rochester.edu
connect.son.rochester.edu
its-cylancehybrid-ut1.ur.rochester.edu
lasso.rochester.edu
ucisarts.sa.digitalscholar.rochester.edu
idp.rochester.edu
*.givegab.com
*.givegab.com
rochestermd.urmc.rochester.edu
admissionsstage.urmc-sh.rochester.edu
www.cvs.rochester.edu
uofr.rochester.edu
urtransfer.ur.rochester.edu
totleben.digitalscholar.rochester.edu
its-bblmap-ud01.its.rochester.edu
spoons.digitalscholar.rochester.edu
tdzuba.digitalscholar.rochester.edu
us.prod.campusgroups.com
dev.lasso.rochester.edu
medsis.urmc.rochester.edu

Certificate

The complete raw certificate details for healthlab.urmc.rochester.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t8FOFAxoEbg+TgbnlWG
pFA6XaHd4WR75Eba98Pc7V5Kcge7MH2fO1sgBfJbAV0v5y3cC1yMKrTnoK8Df5eO
bp9+PlgwYybh04M4kzW+mM1v0CCd+5TfbyN2uX+LBstC63puUnXIEs1iMglJDGpj
5c7Ii0tFtDYwWeG8QumN4kZIfmFYGR5Nu4zoPPHLIRoaA49TkKenbRGQ7PbRevYn
Q6vsUrtIOSywl3TUo4e0y+hCmMRY0aPr9B6GZwlR6x+gb2LCU/6VU5sjiSbq0WuX
pw1jusYQ3bLje8x4GDQuZXCUpzPkWWq97TiqDaKfxiJNKdLAhzyLhsh6baX9VrjR
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 191573380088183616070500908604985213104
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '14627'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rochester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '500 Joseph C. Wilson Blvd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Rochester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'URMC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'healthlab.urmc.rochester.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27124972716144279778040659150494051862496029662707901127609008361703651510079045689463503807453508989476778367227109971231620081743912814575892510287856041040079953880285840599209208458331543899577695420249487849043490301739661006896507637023056340882143902984432660248214127926707985932653656243403268817957554362378895172588645471038650106282575739584356177866706834188544600637834651011038575712939908961473759109959772818645016504911887341017262467997165901038811664123168078963620200637576313152527134971112668584335287571553135707091550247825845094457573539287218514794917298738490089242928851476208791886287247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de896212dc59dadd2ee9890e48b6de8d89f91c1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (203 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthlab.urmc.rochester.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccinet.urmc.rochester.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccineta.urmc.rochester.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccinetb.urmc.rochester.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccinetc.urmc.rochester.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccinetd.urmc.rochester.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovation.urmc.rochester.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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