my.prd.ais.aws.ucsc.edu

- University of California, Santa Cruz -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 21:83:c2:df:56:ef:13:a4:8b:c1:f1:1e:45:0d:a6:d7 was issued on by Internet2.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of California, Santa Cruz

Organization: University of California, Santa Cruz
Organization unit: APMAA
Address: 1156 High Street
Address: Chancellors Office
Postal code: 95064
State / Province: CA
Locality: Santa Cruz
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 21:83:c2:df:56:ef:13:a4:8b:c1:f1:1e:45:0d:a6:d7
Serial Number (int): 44548667231618372205996027384228062935
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: e8:11:84:45:79:77:59:7d:ad:da:91:82:8a:0b:70:07:30:ca:b9:74
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): ec:15:57:e7:c4:d1:77:07:64:1d:b7:f9:ad:36:3e:b1:c3:77:4f:8b
Fingerprint (sha256): 02:03:61:42:2f:47:8c:cf:36:a8:4a:d6:88:2c:f8:da:b9:09:6a:24:7f:e4:43:96:76:cf:78:ee:49:38:2a:39

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate my.prd.ais.aws.ucsc.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for my.prd.ais.aws.ucsc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

my.prd.ais.aws.ucsc.edu
ais-cs.ucsc.edu
my.ucsc.edu

Other certificates including the domain name ucsc.edu

(limited to 100 certificates)
farmandgardenwiki.ucsc.edu
5631986051842048-fe1.pantheonsite.io
it.uahs.arizona.edu
connect.ucsc.edu
wcms.ucsc.edu
cp-scanner.ucsc.edu
calendar.sdzsafaripark.org
monitor.soe.ucsc.edu
applygrad.ucsc.edu
cscenter.pbsci.ucsc.edu
5707090131681280-fe3.pantheonsite.io
746f6675.ucsc.edu
wordpress.ucsc.edu
sho-prod-web-2.ad.ucsc.edu
banking-business-review.com
undergrad.pbsci.ucsc.edu
hyperion.ucsc.edu
ecommons.ucsc.edu
iacuc.ucsc.edu
stage.cghub.ucsc.edu
dunkin.eeb.ucsc.edu
campusrec.ucsc.edu
5684453372329984-fe2.pantheonsite.io
5638159220080640-fe2.pantheonsite.io
banking-business-review.com
my.prd.ais.aws.ucsc.edu
gradadmissions.ucsc.edu
pleiades.ucsc.edu
scalefunder.net
ugr.ue.ucsc.edu
noc-dev-vise-1.ucsc.edu
ur-tst-nav.ucsc.edu
5754079087165440-fe4.pantheonsite.io
scalefundercert.net
ecommons.ucsc.edu
5631986051842048-fe1.pantheonsite.io
208.lsnc.net
drs.sandbox.dev.singlecell.gi.ucsc.edu
wildlife.ucsc.edu
5679052450955264-fe2.pantheonsite.io
win-sys-mgr-1.lt.ucsc.edu
5682747733442560-fe3.pantheonsite.io
wcms-prod-web-5.ucsc.edu
5156937704407040-fe1.pantheonsite.io
officeofresearchhelp.ucsc.edu
its-prod-www2-2.ucsc.edu
5638159220080640-fe2.pantheonsite.io
5682747733442560-fe3.pantheonsite.io
5156937704407040-fe1.pantheonsite.io
officeofresearchhelp.ucsc.edu
bsg-sandbox.ucsc.edu
drs.sandbox.dev.singlecell.gi.ucsc.edu
service.sandbox.dev.singlecell.gi.ucsc.edu
banking-business-review.com
urlogin.ucsc.edu
shs-prd-bkr1.au.ucsc.edu
genecats.gi.ucsc.edu
5156937704407040-fe1.pantheonsite.io
hyperion.ucsc.edu
5707090131681280-fe3.pantheonsite.io
5156937704407040-fe1.pantheonsite.io
campusrec.ucsc.edu
ad-prod-rdcb-1.ad.ucsc.edu
vi-prod-vpsc-1.au.ucsc.edu
5156937704407040-fe1.pantheonsite.io
gitlab.soe.ucsc.edu
gradlab.ucsc.edu
saturn.ucsc.edu
208.lsnc.net
pisa.tst.ais.aws.ucsc.edu
161511-web1.vilcek.org
*.courses.soe.ucsc.edu
libportal.ucsc.edu
5156937704407040-fe1.pantheonsite.io
scalefundercert.net
griffin.ucsc.edu
shs-prod-app-2.ad.ucsc.edu
hacking4oceans.ucsc.edu
pisa-dev.ucsc.edu
5638159220080640-fe2.pantheonsite.io
cf-prd-app-1.ucsc.edu
research-it.ucsc.edu
5717044213317632-fe3.pantheonsite.io
mmapl.ucsc.edu
*.ue.ucsc.edu
*.ucsc.edu
noc-prod-vise-2.ucsc.edu
hexcalc.gi.ucsc.edu
ppc-webdav.ucsc.edu
5679052450955264-fe2.pantheonsite.io
gradadmissions.ucsc.edu
sctv.ucsc.edu
ais-reports.rds.ucsc.edu
static.ucsc.edu
ccrec.ucsc.edu
gradadmissions.ucsc.edu
liberalarts.ss.pacific.edu
dunkin.eeb.ucsc.edu
scalefunder.net
scalefunder.net

Certificate

The complete raw certificate details for my.prd.ais.aws.ucsc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRFxl6qqRXFL7QLXv2eq
gNUePW0BPKZFdg/MezCnndM88JCxY2Y6fRL0MF94IpOv66MF4HuXLFBA04U0ggBv
lajsL4e69uMeydqGwIuypl87gb7acUG1Anai1rp6ydgC1MFjkzVXAc/UEnxF43D2
o54MHIxGW92hQzLB6Kc0Ja7/PtvWi1GX0BZp8hRS+t41yZWYn9OqPKQFOQRavAXp
Y3RBJjVxVwfiYnZhIs//aJvyRAICWlJ5ARH52H2EUZBwGW3/hCVEi08ls5Iqd9uL
hVyKMQFlvCNyp3uXoLcjmNVDG2yxWsPoo5AHoHmaF96DDE+u+T9MoMnpcEKJkByu
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 44548667231618372205996027384228062935
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '95064'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Cruz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1156 High Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chancellors Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of California, Santa Cruz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'APMAA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'my.prd.ais.aws.ucsc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25887454337214552617937253410517145029615823739604695937327478094846344861967627310227167942845904916854168708580214875984816645174267826202387008686508582324620693602522867854761536532080917545534881021251538808404012432300850351188925695567733850487258982494563122434186393325897077163170958990787356380995669455463249034904856715457479920258116624192035646800082461341154653319760784616334616357496751449124632600758880786538799161802476770579040089193330367675614399932367891829670088444063863013223878401849794454590715594297649743424409148986155741237234344543935144439454296227822135633613167356254207096958571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e81184457977597dadda91828a0b700730cab974
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.prd.ais.aws.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ais-cs.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ucsc.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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