ais-web.stern.nyu.edu

- New York University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 37:6b:aa:01:c6:d5:a2:30:a3:27:8d:81:06:29:85:04 was issued on by Internet2.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

New York University

Organization: New York University
State / Province: New York
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 37:6b:aa:01:c6:d5:a2:30:a3:27:8d:81:06:29:85:04
Serial Number (int): 73666563682430681928973261028777886980
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: de:e6:be:df:de:31:60:71:ce:00:d1:12:40:f3:4e:34:07:b8:ad:2e
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 3f:c0:69:d2:9b:82:d7:f3:4c:b7:79:8c:bc:c5:ac:a7:9f:4c:b5:ab
Fingerprint (sha256): 01:e9:77:52:6f:60:10:28:3e:05:f7:92:69:e6:e3:90:b0:b7:fc:89:9f:53:fd:b0:c4:f9:a9:e1:d3:cd:67:db

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate ais-web.stern.nyu.edu

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ais-web.stern.nyu.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ais-web.stern.nyu.edu
ais-dev.stern.nyu.edu
ais-new.stern.nyu.edu
ais-old.stern.nyu.edu
ais-stg.stern.nyu.edu
ais-web-dev-vip.pub.stern.nyu.edu
ais-web-stg-vip.pub.stern.nyu.edu
ais-web-vip.pub.stern.nyu.edu
ais.stern.nyu.edu
aisweb.stern.nyu.edu

Other certificates including the domain name nyu.edu

(limited to 100 certificates)
nyush-nac1.shanghai.nyu.edu
hosting.nyu.edu
rits.hosting.nyu.edu
rebekahrust.hosting.nyu.edu
ssoprod.its.nyu.edu
zora.hosting.nyu.edu
giki.hosting.nyu.edu
diploma.sps.nyu.edu
5648867420798976-fe4.pantheonsite.io
fastmri.med.nyu.edu
fcl.law.nyu.edu
mobileprint.nyu.edu
admissions.emeritus.org
cluster3.technolutions.net
pdsdev.library.nyu.edu
5676582576324608-fe3.pantheonsite.io
cluster3.technolutions.net
applicant.stern.nyu.edu
katejustement.hosting.nyu.edu
heng.hosting.nyu.edu
drkjlancaster.hosting.nyu.edu
klaporta.hosting.nyu.edu
sueannlau.hosting.nyu.edu
recreationregistration.nyu.edu
dcone.hosting.nyu.edu
makerspace.engineering.nyu.edu
shanghai.hosting.nyu.edu
cairoash.hosting.nyu.edu
laurafranklin-hall.hosting.nyu.edu
ssl714081.cloudflaressl.com
tolga.hosting.nyu.edu
greenestuff.hosting.nyu.edu
tisch.nyu.edu
cb.engineering.nyu.edu
5629935204958208-fe2.pantheonsite.io
newborn.hosting.nyu.edu
dslinks.hosting.nyu.edu
holostor.hpc.nyu.edu
cas02pmvwi.shc.sa.nyu.edu
bennyboy.hosting.nyu.edu
drr.cfs.nyu.edu
j3.shared.global.fastly.net
affiliate-snd.albert.its.nyu.edu
webinar.online.engineering.nyu.edu
nyush.hosting.nyu.edu
marl.smusic.nyu.edu
isdm.nyu.edu
sliu.hosting.nyu.edu
shibboleth.nyu.edu
kimmelonestop.nyu.edu
underrights.hosting.nyu.edu
cybersymposium.engineering.nyu.edu
vgc.poly.edu
debrajlevine.hosting.nyu.edu
banking-business-review.com
cga.hosting.nyu.edu
keywords.nyupress.org
sl5298.hosting.nyu.edu
christinexu.hosting.nyu.edu
rh.abudhabi.nyu.edu
shanghai.hosting.nyu.edu
home.nyu.edu
tmsdc02.shc.sa.nyu.edu
osiris.cyber.nyu.edu
jose.hosting.nyu.edu
katejustement.hosting.nyu.edu
violetnetwork.nyu.edu
koh.hosting.nyu.edu
whyb.hosting.nyu.edu
balletcenter.nyu.edu
eatingglobally.heatherruthlee.hosting.nyu.edu
vh-b7-te.law.nyu.edu
spanua3.hosting.nyu.edu
cluster3.technolutions.net
shanghai.hosting.nyu.edu
englishchannel.hosting.nyu.edu
textbooks.shanghai.nyu.edu
engage.its.nyu.edu
cga.hosting.nyu.edu
ais-web.stern.nyu.edu
*.stern.nyu.edu
wormtails.bio.nyu.edu
banking-business-review.com
seungguini.hosting.nyu.edu
laraybabrar.hosting.nyu.edu
learn.gencore.bio.nyu.edu
cluster2.technolutions.net
alicezhao.com
sofie.stern.nyu.edu
isdm.nyu.edu
fasedtech.hosting.nyu.edu
alyazia.hosting.nyu.edu
vgc.poly.edu
5629935204958208-fe2.pantheonsite.io
hockygroup.hosting.nyu.edu
drkjlancaster.hosting.nyu.edu
nyuresearchsites.org
5676582576324608-fe3.pantheonsite.io
fame.nyu.edu
guantanamo.dlib.nyu.edu

Certificate

The complete raw certificate details for ais-web.stern.nyu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 73666563682430681928973261028777886980
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ais-web.stern.nyu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 982000793020329390906623057888213824798998825407285136185907005135684241081516543582934511893783511093882758204606150002616052863833834350802914328234434723854619776465381009613411546516184598745672668930662588821801014091722684690383264471473946219682672180392552499782594301421889204909494614634852055724649710252108767086001997428398387211984299526715001354454300906511440713897313337848539814669734891316004958658470244623286619863531309579306048157149275915056740867563392321150414686617154826354180160987341613010643769410136442589137787564512600929387653003543098668310488543115095229238662605158709695880269390606536821590470266622552435860110216405305217542035688484285239032174607832632024420380975243483910070621886066374852400880116808816636495321507714380955985876184076484003962973053161777307783092211708714212508952820545872972804587760115940360412553661630618096171016405503990785188778406924716130878175895823847453992599057039969500548248007177287512240895997957326815930952879756494060835321208655348168216959164485752068570295031803617659703474770257476938343235003821521336312403239439917370672429233601273543975291597202010387301165517525567922383425118351997118019688290818476755876395446648668720533658741021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dee6bedfde316071ce00d11240f34e3407b8ad2e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (261 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ais-web.stern.nyu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ais-dev.stern.nyu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ais-new.stern.nyu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ais-old.stern.nyu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ais-stg.stern.nyu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ais-web-dev-vip.pub.stern.nyu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ais-web-stg-vip.pub.stern.nyu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ais-web-vip.pub.stern.nyu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ais.stern.nyu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aisweb.stern.nyu.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00752be54cfed78761985cc3b187c6bb6c6fe875c190bff8b06425068f61e5d7e69e9728c6b4e304f6e39c65b0337dd9ef3e70bdc2283b5bdefb40339006e412bb58b3753246b657a499bfbe028b575ebe3bb298ef5ca36aca5d74373f233e64b49351b9bc9a52f1706df30730c22f0230f98012093f2bd39c3948a6895896e2af45ca78ba51d0e913b4d20b6144ac9f7e98f0253335d8f531712192d0c13584ef1ee22586cac63b7d1ac84e2e18bf08e6f21d326188d9b9bcdbb28682c59aa820c6a97bba42590e510722ddc54804c0a1f1b374210ffb82bf585a2d81a87d3f8ce7f70c03b3a638f9258cb380b508c40cec9e51edcba88046be6350fba830f143