psc03nma.sandia.gov

- Sandia National Laboratories -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number ae:78:76:d8:8f:b9:4e:44:d1:b6:76:3e:8f:63:06:48 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sandia National Laboratories

Organization: Sandia National Laboratories
Organization unit: 10779
Organization unit: Hosted by Sandia National Laboratories
Address: 1515 Eubank Blvd SE
Postal code: 87123
State / Province: NM
Locality: Albuquerque
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): ae:78:76:d8:8f:b9:4e:44:d1:b6:76:3e:8f:63:06:48
Serial Number (int): 231911157371696252474049741709725861448
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ab:3a:a3:2d:9d:f9:a5:e9:bf:31:41:e7:34:46:64:e3:7c:b3:cb:a4
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 94:b0:50:1d:09:96:c3:50:34:39:e1:12:89:5d:58:4e:cc:27:e1:a0
Fingerprint (sha256): 01:d9:e4:2b:e3:2b:22:7f:a1:bd:78:2a:98:ee:13:a9:72:43:f0:98:32:db:e1:7f:e1:8f:f8:c2:50:cd:e8:bb

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate psc03nma.sandia.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for psc03nma.sandia.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

psc03nma.sandia.gov
www.psc03nma.sandia.gov

Other certificates including the domain name sandia.gov

(limited to 100 certificates)
remote.sandia.gov
as1013snllx.sandia.gov
al.sandia.gov
fmdiri1.webdev.sandia.gov
h2zilla.sandia.gov
cchdsupport-son.sandia.gov
as3101snllx.sandia.gov
remote-ca.sandia.gov
ccmelcor.sandia.gov
esheta-dev.sandia.gov
accountpasswords.sandia.gov
ws1682lxz.sandia.gov
xfracas.sandia.gov
rocket.web.sandia.gov
hpcn-www.ca.sandia.gov
ebid-search.sandia.gov
slycat-scn.sandia.gov
rpwmesh-web2.sandia.gov
swas-q.sandia.gov
testing-dev.sandia.gov
kscredrepo.webdev.sandia.gov
msntstsvr.webdev.sandia.gov
accountpasswords.sandia.gov
vast.sandia.gov
primavera.webqual.sandia.gov
xfracas.sandia.gov
isp.sandia.gov
nts.webdev.sandia.gov
psc03nma.sandia.gov
eimsiis.sandia.gov
nagios.gibson.sandia.gov
as3012snllx.sandia.gov
cobrap6jobs.webqual.sandia.gov
as1019snllx.sandia.gov
oud1.webdev.sandia.gov
ebprod.sandia.gov
safer.sandia.gov
wls122emw3.web.sandia.gov
ebwebe2.web.ca.sandia.gov
terminal.web.ca.sandia.gov
catest4.webdev.ca.sandia.gov
foobarmsn.webdev.sandia.gov
cbapce2.webdev.sandia.gov
cert.sandia.gov
wls122emw1.web.sandia.gov
as1008snllx.sandia.gov
radtrain.sandia.gov
gms-webhooks.sandia.gov
*.sandia.gov
datasea-qual.sandia.gov
sregistry.ca.sandia.gov
ebapce2.webdev.ca.sandia.gov
ux-registry.sandia.gov
nwisapiqual.sandia.gov
rtc.sandia.gov
met-eoc.sandia.gov
ick.sandia.gov
vzadmi1.webdev.sandia.gov
tagnsdd.sandia.gov
ws451snlnt.sandia.gov
wildfly27psf.webdev.sandia.gov
*.sandia.gov
ickdev.sandia.gov
msnfoobar.webdev.sandia.gov
wls122emw3.webqual.sandia.gov
moveitmobile-d.sandia.gov
mlserver-dev.sandia.gov
wcvis-q.sandia.gov
pointtest.ca.sandia.gov
rp-linux01.ca.sandia.gov
supplierportal-qual.sandia.gov
dancer.ca.sandia.gov
msntstrostra.webdev.sandia.gov
fmsoai1.webdev.sandia.gov
caf.web.sandia.gov
prodtools.sandia.gov
dhs2.ca.sandia.gov
ebid-role.sandia.gov
eo12333-qual.sandia.gov
sip.sandia.gov
vnge.sandia.gov
foiax.sandia.gov
sccmexternal.sandia.gov
lb-qual-2.sandia.gov
dancer.ca.sandia.gov
getridofit-p.sandia.gov
ebid-help.sandia.gov
range-vpn-1.sandia.gov
hackmd.sandia.gov
lapsmq15.webdev.sandia.gov
ebfrmi2.webdev.ca.sandia.gov
config1.ca.sandia.gov
nexus.web.sandia.gov
ebccmi1.webqual.sandia.gov
map.sandia.gov
supplierportal-dev.sandia.gov
tagnsdd.sandia.gov
fmfnr.webqual.sandia.gov
870dev.sandia.gov
nexus.web.sandia.gov

Certificate

The complete raw certificate details for psc03nma.sandia.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OiMWLbnDCISe4bFfvxB
D+YrjQlf3UdCmAngV2/mHD6ztdhUAmDSaJkb1QWrQtQmhtdVsppzPyirM4/akIVa
eiYtxcR6lmCvcr2G17dQinNjdRe1hxRCqdjCekzmZVaiJgsepjGbWiCS4N/aflk6
6ZX6iid0MmUeQvTnCLG/VHXRj1FR/6OXHQzdwT9qhgLEZG8QEn1j/bUBI1wlZN31
Knz9fzlpRf35lPuo/YxxlG2omUpsAPeplqbhr+w5fw4Qqutb5cDhEz+suvH1ar+r
PNhktN123W7xjOj3XK6/2gFuRUQ8TUIFnEAofq7gT7z+1lr7BCPNJMU4l2OcYchp
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 231911157371696252474049741709725861448
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '87123'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Albuquerque'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1515 Eubank Blvd SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sandia National Laboratories'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10779'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Sandia National Laboratories'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'psc03nma.sandia.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26372241238451234263504915849345287820274332091475546184279092029315330927073184924274268694725085662621719347453432088145440258652433723577380345977051762949887847047458520917976489934089599778057412986841048328225524710190093628064851410882414787337878942827016586374628426801936232639634879363985308021850349030762980427016399612650910356014520266917496972331353311957553488191753815257419796251327845293079411058529996247683924098763328383116888907430269873996675760879327144835408952746066442895885227741925558393610570946148352410884113603590026187293402641062700598926561050834042433750901948862222825318541813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab3aa32d9df9a5e9bf3141e7344664e37cb3cba4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psc03nma.sandia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psc03nma.sandia.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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