cr-laserfiche.acns.colostate.edu

- Colorado State University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 59:c6:78:2d:e5:54:e7:c1:da:f4:04:ac:d7:3f:cf:5a was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Colorado State University

Organization: Colorado State University
Organization unit: CR
Address: Colorado State University
Address: 01 Administration Building
Postal code: 80523
State / Province: Colorado
Locality: Fort Collins
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 59:c6:78:2d:e5:54:e7:c1:da:f4:04:ac:d7:3f:cf:5a
Serial Number (int): 119331803928241871361825971255384199002
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 66:26:e3:c6:5b:8d:51:0a:72:f8:de:ba:c8:d4:f6:10:9a:fb:23:c0
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 6a:5d:b4:8c:fb:eb:02:70:dd:ce:2e:95:4f:37:44:a1:a7:3b:8c:8c
Fingerprint (sha256): 01:c6:0c:dd:ad:36:ef:c9:65:99:1f:8c:4d:95:99:0d:c9:ef:a5:8a:4d:a9:0f:5d:d0:ff:65:ec:6d:31:1f:cb

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate cr-laserfiche.acns.colostate.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cr-laserfiche.acns.colostate.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cr-laserfiche.acns.colostate.edu

Other certificates including the domain name colostate.edu

(limited to 100 certificates)
webcms3.colostate.edu
dsawptest4.colostate.edu
webcms3.colostate.edu
customviewbook.colostate.edu
high-speed-video.colostate.edu
san-7-s11.tlsprovisioning.exacttarget.com
cluster.technolutions.net
cnee.colostate.edu
www.csurecdashboard.colostate.edu
coloradoencyclopedia.org
connect.colostate.edu
cnee.colostate.edu
csal.colostate.edu
san-7-s11.tlsprovisioning.exacttarget.com
apps.cnhp.colostate.edu
tmi.colostate.edu
cloudsat.atmos.colostate.edu
taurus.cnr.colostate.edu
www.todossantos.colostate.edu
nibbler.math.colostate.edu
biz.source.colostate.edu
aresprod19.colostate.edu
secspc.netsec.colostate.edu
advancing.colostate.edu
lawncheck.colostate.edu
police.colostate.edu
securedns1.planmygift.org
securedns1.planmygift.org
northernipm.colostate.edu
it.colostate.edu
cr-laserfiche.acns.colostate.edu
lsccms.colostate.edu
www.diversity.colostate.edu
webcom.colostate.edu
wptest.agsci.colostate.edu
cluster2.technolutions.net
speedtest.colostate.edu
wsnet.colostate.edu
bushewett.BUSINESS.COLOSTATE.EDU
warnercms.colostate.edu
mail.business.colostate.edu
secspc.netsec.colostate.edu
buselab2016gw01.busdom.colostate.edu
www.webcms2.colostate.edu
chunglab.colostate.edu
lsc.colostate.edu
vprwebdev.research.colostate.edu
atmos.colostate.edu
directaccess.chhs.colostate.edu
fsus-23.freshservice.com
filehold.research.colostate.edu
railbender.nrel.colostate.edu
gradadmissions.colostate.edu
fsus-24a.freshservice.com
san-7-s11.tlsprovisioning.exacttarget.com
teams.cvmbs.colostate.edu
coloradoencyclopedia.org
cluster.technolutions.net
vetmedbiosci.colostate.edu
ocl.colostate.edu
webcom.colostate.edu
sccoldfusion.cvmbs.colostate.edu
ramcamps.colostate.edu
commitment.colostate.edu
cluster.technolutions.net
tls.automattic.com
onishlab.colostate.edu
securedns1.planmygift.org
cluster.technolutions.net
*.agsci.colostate.edu
illiad.library.colostate.edu
ob1-p1.advance.colostate.edu
pgrcourse.colostate.edu
coursedev.math.colostate.edu
warnercms.colostate.edu
baacc.colostate.edu
atrc.colostate.edu
www.admissions.colostate.edu
engagement.colostate.edu
www.ascsu.colostate.edu
www.cmb.colostate.edu
agsci.colostate.edu
help.canvas.colostate.edu
apps.natsci.colostate.edu
dsawptest5.colostate.edu
drought-net.colostate.edu
www.admissions.colostate.edu
otp.colostate.edu
san-7-s11.tlsprovisioning.exacttarget.com
agsci.colostate.edu
psm-ns-bda.colostate.edu
helpdesk.appareluae.com
ramcareertools.colostate.edu
studentcasemanagement.colostate.edu
dvmhousing.cvmbs.colostate.edu
southcampus2.cvmbs.colostate.edu
singlesites.dev.colostate.edu
intro.online.colostate.edu
monroe.cnhp2k.colostate.edu
warnercms.colostate.edu

Certificate

The complete raw certificate details for cr-laserfiche.acns.colostate.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtienEgwqCmzOGCuV0Yq5
jH2kWp37iTpW6RIu8xFJ1zBcYerCs5oDbbq/URujUJdc2v9DPfk6zr02F1OLY+/n
9/kBrIex4G1q/FhadMCLRpv1Z8MutKHC0jthUmFlNBa7YhjTZllsE9qvLUjETLdX
xGZEUd6oWpt+Ssqv7z+kbAJhkaYhcy9/rh+ZqS/cvyjBskyBYTOSz3tE7FSjOrw2
HXum0a4m3ZX9K33clHeAAqSRsz3aI8hWPHKCQGYGOLdLg++CEaUNpzPfECpRJRZX
8fBVN2AdKe9k1l04AIC304nD7z2tttzXFHN4xWdgoQ1k9aWn12shU0f0hOlubMYb
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 119331803928241871361825971255384199002
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '80523'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fort Collins'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '01 Administration Building'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cr-laserfiche.acns.colostate.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22994924939083785795988438319767027755937281450263554099323008430420054078733400198000318348541068979651709777859547819423824344538364128024876507994967214269236272999236038807959997603916730394037919053817924207747376320487076446485506588393078412288607333680624581443726138474420168417341559279317574503939083214629098117382642725183266186280836191998388047217229436836243872113060489393884991658851934063250441027485224677355784055793445954347916484391096653677658117037144533317952796876810240718547184885382540222077460116311147283749080152259967866981599283737297225986993930172715346166281016302230465809882067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6626e3c65b8d510a72f8debac8d4f6109afb23c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-laserfiche.acns.colostate.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016413e179d0000004030046304402205caf04c1f6fb0490924735e3ff8cd354e944765710f9740d3353dc8b0270645f02206b6e74067f06d99299732e26b13fbc07b7725c300e4aa382332fb13b2a21cd260076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016413e17a1b0000040300473045022100c89702591db92efe187ae025b5974d4e7f54fb453e09c491e716d85984b89e9502206ed709251bec01f71e973ebe66908c527adf3bf58351e88f694dc1e6242539a20076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016413e179ed0000040300473045022100a110fd262f2cfbd148a3754f693e18bb687b743270d74a85cd0b8f88e95e3461022007b9d7c5c96512e049dad02f868afc705d5077643da9723812c312ceeb6299e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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