ucdenver.edu

- University of Colorado Denver -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number d2:f5:82:31:92:0e:fc:d5:54:5c:22:fb:d4:6b:75:e0 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Colorado Denver

Organization: University of Colorado Denver
State / Province: Colorado
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): d2:f5:82:31:92:0e:fc:d5:54:5c:22:fb:d4:6b:75:e0
Serial Number (int): 280412632485804734361877037240883574240
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: b8:58:9e:3e:4c:52:c7:15:b4:a2:c4:d8:ee:bd:32:c2:88:f4:4d:41
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 4e:85:0d:7c:42:43:ec:b1:08:88:0a:cf:a1:38:84:7e:c8:1f:df:57
Fingerprint (sha256): 01:db:20:ec:8b:e7:bd:ee:0a:41:dc:96:82:a3:af:a3:28:36:fa:09:ff:b3:2f:82:ac:4d:c7:05:f6:e9:07:c1

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate ucdenver.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ucdenver.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ucdenver.edu
www.ucdenver.edu

Other certificates including the domain name ucdenver.edu

(limited to 100 certificates)
profiles.ucdenver.edu
cluster3.technolutions.net
architectureandplanning.ucdenver.edu
skyline.ucdenver.edu
waf2.offcampuspartners.com
tls.automattic.com
myaccount.ucdenver.edu
sehdforms.ucdenver.edu
webapps-int-test.ucdenver.edu
buildinginspections.ucdenver.edu
forms.ucdenver.edu
citeak.multidevcom.uaf.edu
skyline.ucdenver.edu
da-prod.sdm.ucdenver.edu
cluster3.technolutions.net
source.ucdenver.edu
ucdenver.edu
gem.business.ucdenver.edu
chns120.courseresource.yale.edu
profiles.ucdenver.edu
remote.ucdenver.edu
educationsurvey.ucdenver.edu
survey.alumni.ucdenver.edu
tls.automattic.com
dc-acs.ucdenver.edu
dhharedcap.ucdenver.edu
dev.wellness.yale.edu
n002.offcampuspartners.com
n002.offcampuspartners.com
vpn.ucdenver.edu
gp-vpn.ucdenver.edu
cuoform.ucdenver.edu
cuonlineblog.ucdenver.edu
eap.international.ucdenver.edu
offcampushousing.fau.edu
live.ucdavis.edu
ogc.ucdenver.edu
application.admissions.ucdenver.edu
hslibraryguides.ucdenver.edu
chns168.courseresource.yale.edu
dhharedcap.ucdenver.edu
n002.offcampuspartners.com
mycusouth.atelinttest.ucdenver.edu
psoa-ucd.ucdenver.edu
murpjobs.ucdenver.edu
liberalarts.ss.pacific.edu
dev.embody.yale.edu
club.kjzz.org
phenogen.ucdenver.edu
offcampushousing.fau.edu
oncoreval.researchadmin.ucdenver.edu
myaccount-test.ucdenver.edu
dev.wellness.yale.edu
offcampushousing.fau.edu
idfinder.ucdenver.edu
oncorerss.researchadmin.ucdenver.edu
gem.business.ucdenver.edu
connectmeeting.ucdenver.edu
cytometry.som.ucdenver.edu
fe-26.ucdenver.edu
mydesktop.ucdenver.edu
cuonlineblog.ucdenver.edu
v-fe26-2017.ucdenver.edu
mybabymymove.ucdenver.edu
webapps-test.ucdenver.edu
cuonline.edu
ucdenver-wireless.ucdenver.edu
clinicaltrials.ucdenver.edu
cluster3.technolutions.net
208.lsnc.net
remote.ucdenver.edu
ldap-ad.ucdenver.edu
forms.ucdenver.edu
live.bme.cornell.edu
hslibraryguides.ucdenver.edu
n002.offcampuspartners.com
n002.offcampuspartners.com
oitsupport.ucdenver.edu
educationsurvey.ucdenver.edu
onlinelearning.ucdenver.edu
legacy.hq.philabundance.org
banking-business-review.com
som.ucdenver.edu
remote.ucdenver.edu
application.admissions.ucdenver.edu
news.ucdenver.edu
connect.iadb.org
www1.ucdenver.edu
jira.ucdenver.edu
star.ucdenver.edu
hsl-ezproxy.ucdenver.edu
5637869485948928-fe4.pantheonsite.io
n002.offcampuspartners.com
auth-prod.ucdenver.edu
virtue.ucdenver.edu
offcampushousing.fau.edu
som.ucdenver.edu
cophin.ucdenver.edu
impulse.ucdenver.edu
cluster3.technolutions.net

Certificate

The complete raw certificate details for ucdenver.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH5jCCBs6gAwIBAgIRANL1gjGSDvzVVFwi+9RrdeAwDQYJKoZIhvcNAQELBQAw
gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE
AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl
cnZlciBDQTAeFw0yMjAzMjEwMDAwMDBaFw0yMzAzMjEyMzU5NTlaMF8xCzAJBgNV
BAYTAlVTMREwDwYDVQQIEwhDb2xvcmFkbzEmMCQGA1UEChMdVW5pdmVyc2l0eSBv
ZiBDb2xvcmFkbyBEZW52ZXIxFTATBgNVBAMTDHVjZGVudmVyLmVkdTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBALIn/mRWiteeJFMx3MO03Cyaf3RNjGTJ
GzEQS4sHXo0NheRXWeNbi1XG61+pfrI02uOYm5wi0z2LrAb9gJe3+086lRP8TLQ5
OvgS2Hhdffko0l6Ar7XX5vdiJezXpzHM/LKBZdm7sKnx16Lw8nJ+WCXAyxIhgN7D
7ZuLuu2I0eDkO4XHpuBi5lN6fBdshOVO+bn7GCFOVLiWZsYN2RhKJ3g4/7SV2DLQ
+eD42S/tDxaG8khTb3gjfJsQ/beVuJdJrlcksdV1pbMtGlI3o3jM+5cG64Z49kdJ
U3+Z0sKjqH0ApVD9jUuvx6ZyPxxYY8qj6mXoTfy8F+19djp65IOIfxIHojNnFcVX
RFQRXzASPq6Ojm5K2BwU0PkyvtgoirFMH3IcsOHgwDc9fYcEpnSUjzJRozWKFTm/
uDD/GKP3rsW9Zo5gxZU3piDBiXNYM5ApyD1zcAhN2/TM9P8OgirnsqGURbOVaAPj
GtdLciuTWb6el8mfkz8cZiLapONbqIMUbSXKQsiVvVhcrQZPbi7rFpP0PakMgHdC
JJlGx+usHDixst/YgvzEQmb+nckp2DzKVVTpgjdI3PChGNBU1UUKjoRHaB5pnNtw
zk5WC7tBrkCvUsFPXplVTABXuYOamA5fTo5xzBmDrsnG7yDGZM6lIT2iaEjC6iSg
BbN5e3hnfqPVAgMBAAGjggNkMIIDYDAfBgNVHSMEGDAWgBQX2dYlJ2f5McJJQ9kw
NkSMbKlP6zAdBgNVHQ4EFgQUuFiePkxSxxW0osTY7r0ywoj0TUEwDgYDVR0PAQH/
BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMEoGA1UdIARDMEEwNQYMKwYBBAGyMQECAQMEMCUwIwYIKwYBBQUHAgEWF2h0
dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjBaBgNVHR8EUzBRME+gTaBL
hklodHRwOi8vY3JsLnNlY3RpZ28uY29tL1NlY3RpZ29SU0FPcmdhbml6YXRpb25W
YWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3JsMIGKBggrBgEFBQcBAQR+MHwwVQYI
KwYBBQUHMAKGSWh0dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9yZ2Fu
aXphdGlvblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwIwYIKwYBBQUHMAGG
F2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFr
AWkAdwCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAX+uOIHzAAAE
AwBIMEYCIQD0qkfhG7174B2OWLbPIq6Ie96V7if5aPzeVAEXClN3dQIhAMTDnk8r
Wv7mRhZSnPsE2ZeI0yZ6mpHzWhRwcLFEBOnkAHYAejKMVNi3LbYg6jjgUh7phBZw
MhOFTTvSK8E6V6NS61IAAAF/rjiB3gAABAMARzBFAiEArQOkg/JMIA5PmuTGsTfa
vTeBML5aATpobiCw+q6N2UgCIGfHqBFvyEsm8gvrILUh8gxJtX67a2RMP3TH4YqV
qR/tAHYA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAF/rjiBrgAA
BAMARzBFAiEAnrErtipuYp+6meBUSSFz3/W6lHpM0DCQXcLMXX2ecjgCIHC8T2e3
tnrDgMgfPIhlHPsYZyXLBvZq9vHRpnwSbaheMCkGA1UdEQQiMCCCDHVjZGVudmVy
LmVkdYIQd3d3LnVjZGVudmVyLmVkdTANBgkqhkiG9w0BAQsFAAOCAQEAbrLC7BCE
T1WOIEot2k8v9+dh8Y7JzeLIY+ItO1HnXfNBHaa8fwzbjALfxG2PSrJ5yVDDRuFH
nQFs/WG+v0+fk2tw2zN6rkc56FONbdvWfMzjM135mRD8zZ1PWvR1X+CbfdDZqOxp
GPfKRsI6Rsv9O0WywgHMUAGsWXsMWy1xgESE7fcrWaUOAuuhXuBi3gsBjW8Nl4g2
rwz+l+lwA+PMmqG8TZXGuVD2BkM0rCAMSRlzS/ThlOOX0/pUGL/lyl7E34S9iQy0
dxgzdnhYkYetcXazTO6Q+Hfzs5cvQ9aB6OaZn/ScT8/+437W40cZh4cKTidzz9FG
VbhlDOHPdmBBfg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsif+ZFaK154kUzHcw7Tc
LJp/dE2MZMkbMRBLiwdejQ2F5FdZ41uLVcbrX6l+sjTa45ibnCLTPYusBv2Al7f7
TzqVE/xMtDk6+BLYeF19+SjSXoCvtdfm92Il7NenMcz8soFl2buwqfHXovDycn5Y
JcDLEiGA3sPtm4u67YjR4OQ7hcem4GLmU3p8F2yE5U75ufsYIU5UuJZmxg3ZGEon
eDj/tJXYMtD54PjZL+0PFobySFNveCN8mxD9t5W4l0muVySx1XWlsy0aUjejeMz7
lwbrhnj2R0lTf5nSwqOofQClUP2NS6/HpnI/HFhjyqPqZehN/LwX7X12Onrkg4h/
EgeiM2cVxVdEVBFfMBI+ro6ObkrYHBTQ+TK+2CiKsUwfchyw4eDANz19hwSmdJSP
MlGjNYoVOb+4MP8Yo/euxb1mjmDFlTemIMGJc1gzkCnIPXNwCE3b9Mz0/w6CKuey
oZRFs5VoA+Ma10tyK5NZvp6XyZ+TPxxmItqk41uogxRtJcpCyJW9WFytBk9uLusW
k/Q9qQyAd0IkmUbH66wcOLGy39iC/MRCZv6dySnYPMpVVOmCN0jc8KEY0FTVRQqO
hEdoHmmc23DOTlYLu0GuQK9SwU9emVVMAFe5g5qYDl9OjnHMGYOuycbvIMZkzqUh
PaJoSMLqJKAFs3l7eGd+o9UCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280412632485804734361877037240883574240
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Colorado Denver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ucdenver.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 726813988391131379199546524569184979867889872615187226579195772046514084257674364609067526229897623411269967496943807028662243750959291132563026923786930530017629760825866611284124579607853714042011505657196191683805366265826440469960359687377692800919860151852155315490448338956747406287583682607635403187406859557210688959405179164720645963366085061053162314979463701685457035498898014626044022361529562082738748985974756285683583158515257239454117722251718895833777147894778240111913320684763274336840854394120233811951375544552346696296440105114385613409534684281341684341818651675224659836312964639459924150121155622592691679472326141082138189295534822886596371811622574160030729994605166608454320798055785918211332271879683876806910426596005362976370133888384517981832076387233706436037388273278387549947736627389634466326714236563369534354815443831833170218747943723878091308288897721489254208706690030030587739547054503966184504491879024023790427318730687691093388679851451336040026596578603575030762792423046675508648956578189823005629721031193265221544835414804558482700560206778930543522701464519549313166943779080674522733905993786458363482708079637455671588809805652426480135135748963062715931252677536629398686266205141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8589e3e4c52c715b4a2c4d8eebd32c288f44d41
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucdenver.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucdenver.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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