www.cdlib.org
- Regents of the University of California -
Issued by InCommon RSA Server CA
About this certificate
This digital certificate with serial number d8:e3:a5:8d:f1:43:8c:74:40:d0:98:bc:09:9d:f6:dd was issued on by Internet2.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Regents of the University of California
Organization:
Regents of the University of California
Organization unit: CDL
Organization unit: CDL
Address:
1111 Franklin Street
Postal code: 94607
State / Province: CA
Locality: Oakland
Country: US
Postal code: 94607
State / Province: CA
Locality: Oakland
Country: US
Internet2
Organization:
Internet2
Organization unit: InCommon
Organization unit: InCommon
State / Province:
MI
Locality: Ann Arbor
Country: US
Locality: Ann Arbor
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): d8:e3:a5:8d:f1:43:8c:74:40:d0:98:bc:09:9d:f6:ddSerial Number (int): 288295256319852300128448956438427858653
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 03:a8:c0:b4:9f:c4:29:6e:1f:69:20:db:db:09:f6:e0:9f:fe:fb:d6
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38
Fingerprint (sha1): 4b:41:a4:68:cd:b5:e6:69:51:bf:04:93:76:9e:7b:74:6f:49:23:41
Fingerprint (sha256): 02:20:78:fb:a2:a7:01:1c:bc:e0:a4:5e:4a:8b:56:a6:c7:d2:cb:14:a8:24:c2:08:ea:bc:c5:49:43:d0:26:05
Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl
Check the revocation status for certificate www.cdlib.org
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.cdlib.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.cdlib.org
cdlib.org
cdlinfo.cdlib.org
m.cdlib.org
web-cdlib-prd.cdlib.org
cdlib.org
cdlinfo.cdlib.org
m.cdlib.org
web-cdlib-prd.cdlib.org
Other certificates including the domain name cdlib.org
(limited to 100 certificates)
pub-xtfweb2-prd.cdlib.org
uc3-mrtui03x2-prd.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
xtf.cdlib.org
datadryad.org
5758048710688768-fe3.pantheonsite.io
www.cdlib.org
5648554290839552-fe1.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
hg.cdlib.org
aspace.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
uc3-ingest03x2-prd.cdlib.org
registry-stg.cdlib.org
uc3-ingest01x2-stg.cdlib.org
5704837555552256-fe2.pantheonsite.io
hg.cdlib.org
5704837555552256-fe2.pantheonsite.io
registry-dev.cdlib.org
5758048710688768-fe3.pantheonsite.io
cdlib.org
5758048710688768-fe3.pantheonsite.io
registry.cdlib.org
5704837555552256-fe2.pantheonsite.io
nuxeo.cdlib.org
5648554290839552-fe1.pantheonsite.io
massdig.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
pub-xtfweb2-prd.cdlib.org
5758048710688768-fe3.pantheonsite.io
uc3-ingest01x2-prd.cdlib.org
5758048710688768-fe3.pantheonsite.io
analytics.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
cdl-aws-nagios.cdlib.org
5758048710688768-fe3.pantheonsite.io
help.oac.cdlib.org
datamirror.org
5758048710688768-fe3.pantheonsite.io
uc3-wasredirectx2-prd.cdlib.org
5653164804014080-fe1.pantheonsite.io
uc3-dryadsolr-stg.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
oac.cdlib.org
dash.cdlib.org
5758048710688768-fe3.pantheonsite.io
cdlib.org
fdus-31.freshdesk.com
help.oac.cdlib.org
5758048710688768-fe3.pantheonsite.io
ftps-stg.cdlib.org
5758048710688768-fe3.pantheonsite.io
5704837555552256-fe2.pantheonsite.io
agua-stage.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
d2d-pid2-prd.cdlib.org
redmine.cdlib.org
voro.cdlib.org
uc3-dryaduix2-stg-2c.cdlib.org
5758048710688768-fe3.pantheonsite.io
mylibrary.cdlib.org
5758048710688768-fe3.pantheonsite.io
5648554290839552-fe1.pantheonsite.io
5653164804014080-fe1.pantheonsite.io
5704837555552256-fe2.pantheonsite.io
oac.cdlib.org
libraries.universityofcalifornia.edu
melvyl.cdlib.org
uc3-ezid-ui-prd.cdlib.org
5653164804014080-fe1.pantheonsite.io
help.oac.cdlib.org
uc3-dryad-stg.cdlib.org
help.oac.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
tls.automattic.com
5648554290839552-fe1.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
uc3-ingest02x2-stg.cdlib.org
5758048710688768-fe3.pantheonsite.io
uc3-dryaduix2-dev.cdlib.org
5648554290839552-fe1.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
help.oac.cdlib.org
5758048710688768-fe3.pantheonsite.io
uc3-mrtui03x2-prd.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
xtf.cdlib.org
datadryad.org
5758048710688768-fe3.pantheonsite.io
www.cdlib.org
5648554290839552-fe1.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
hg.cdlib.org
aspace.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
uc3-ingest03x2-prd.cdlib.org
registry-stg.cdlib.org
uc3-ingest01x2-stg.cdlib.org
5704837555552256-fe2.pantheonsite.io
hg.cdlib.org
5704837555552256-fe2.pantheonsite.io
registry-dev.cdlib.org
5758048710688768-fe3.pantheonsite.io
cdlib.org
5758048710688768-fe3.pantheonsite.io
registry.cdlib.org
5704837555552256-fe2.pantheonsite.io
nuxeo.cdlib.org
5648554290839552-fe1.pantheonsite.io
massdig.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
pub-xtfweb2-prd.cdlib.org
5758048710688768-fe3.pantheonsite.io
uc3-ingest01x2-prd.cdlib.org
5758048710688768-fe3.pantheonsite.io
analytics.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
cdl-aws-nagios.cdlib.org
5758048710688768-fe3.pantheonsite.io
help.oac.cdlib.org
datamirror.org
5758048710688768-fe3.pantheonsite.io
uc3-wasredirectx2-prd.cdlib.org
5653164804014080-fe1.pantheonsite.io
uc3-dryadsolr-stg.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
oac.cdlib.org
dash.cdlib.org
5758048710688768-fe3.pantheonsite.io
cdlib.org
fdus-31.freshdesk.com
help.oac.cdlib.org
5758048710688768-fe3.pantheonsite.io
ftps-stg.cdlib.org
5758048710688768-fe3.pantheonsite.io
5704837555552256-fe2.pantheonsite.io
agua-stage.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
d2d-pid2-prd.cdlib.org
redmine.cdlib.org
voro.cdlib.org
uc3-dryaduix2-stg-2c.cdlib.org
5758048710688768-fe3.pantheonsite.io
mylibrary.cdlib.org
5758048710688768-fe3.pantheonsite.io
5648554290839552-fe1.pantheonsite.io
5653164804014080-fe1.pantheonsite.io
5704837555552256-fe2.pantheonsite.io
oac.cdlib.org
libraries.universityofcalifornia.edu
melvyl.cdlib.org
uc3-ezid-ui-prd.cdlib.org
5653164804014080-fe1.pantheonsite.io
help.oac.cdlib.org
uc3-dryad-stg.cdlib.org
help.oac.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
tls.automattic.com
5648554290839552-fe1.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
uc3-ingest02x2-stg.cdlib.org
5758048710688768-fe3.pantheonsite.io
uc3-dryaduix2-dev.cdlib.org
5648554290839552-fe1.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
help.oac.cdlib.org
5758048710688768-fe3.pantheonsite.io
Certificate
The complete raw certificate details for www.cdlib.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgIRANjjpY3xQ4x0QNCYvAmd9t0wDQYJKoZIhvcNAQELBQAw djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMTgwNTEwMDAwMDAwWhcNMjAwNTA5 MjM1OTU5WjCBszELMAkGA1UEBhMCVVMxDjAMBgNVBBETBTk0NjA3MQswCQYDVQQI EwJDQTEQMA4GA1UEBxMHT2FrbGFuZDEdMBsGA1UECRMUMTExMSBGcmFua2xpbiBT dHJlZXQxMDAuBgNVBAoTJ1JlZ2VudHMgb2YgdGhlIFVuaXZlcnNpdHkgb2YgQ2Fs aWZvcm5pYTEMMAoGA1UECxMDQ0RMMRYwFAYDVQQDEw13d3cuY2RsaWIub3JnMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6jpUzO6Fl2nF9LfEHqUFOA+ GpyqCmp2zWSDAXtf7s9qw7YiUeu5Ldgo6jJtkygc4NZ7tx9/4K6orjzVLnnTO5Md tX9Bsqc0Iyf3mfkOhsNjzsFPYoHMWQpJDX8fKuzusfOmXDp9MS4UYqQerHCrNiUd YVDNYU2WRo3g/GM2vIXAvC1Iwdg/jwb2Xkpm14sTdv6UyWVRBUq7zoWBX0z3pOH5 YmhkpHAc7ZWdLUqKrXuV8zcSiV6/5pZCCzjC6WID2gNAheuKm/NxJxji0faVwpRe 7Dryq5qB0T0/fb1jOsvykZxUnOu3zL5qCsCeqanZ9dm633Lfx7yYCwYG3UrtPQID AQABo4ICGjCCAhYwHwYDVR0jBBgwFoAUHgWjd49sluJbh0umtIascQAM5zgwHQYD VR0OBBYEFAOowLSfxCluH2kg29sJ9uCf/vvWMA4GA1UdDwEB/wQEAwIFoDAMBgNV HRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBnBgNVHSAE YDBeMFIGDCsGAQQBriMBBAMBATBCMEAGCCsGAQUFBwIBFjRodHRwczovL3d3dy5p bmNvbW1vbi5vcmcvY2VydC9yZXBvc2l0b3J5L2Nwc19zc2wucGRmMAgGBmeBDAEC AjBEBgNVHR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLmluY29tbW9uLXJzYS5vcmcv SW5Db21tb25SU0FTZXJ2ZXJDQS5jcmwwdQYIKwYBBQUHAQEEaTBnMD4GCCsGAQUF BzAChjJodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vSW5Db21tb25SU0FTZXJ2ZXJD QV8yLmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTAT BgorBgEEAdZ5AgQDAQH/BAIFADBcBgNVHREEVTBTgg13d3cuY2RsaWIub3Jngglj ZGxpYi5vcmeCEWNkbGluZm8uY2RsaWIub3JnggttLmNkbGliLm9yZ4IXd2ViLWNk bGliLXByZC5jZGxpYi5vcmcwDQYJKoZIhvcNAQELBQADggEBAFzzmUOwgYkbLa8S uZPu78M8KwQeGcLDtcG4aUb/4vf/BNpTobcqNwFAFhqRUlmOiFzuu+5h2tdDPGpF 3ujWNUyx7nn01mUqw4xPCV3PS6ScQHQIL+dfh0rZj0VAo1LKBAkPfHKIws4LGrzM 6VWL4gzs4g/7X79jenLN+N5Slhu6oWCSMwGqoRLJ/Za6DCxfNE5j1k2MtOInVrPY Yw9xbMVX1tpFQR39WSdv/LTFBHs2aWSiSE55RFM/v/bGJnW6E+JsKLJP2JUASu8K FeqQNOvxib3H99I/YADrsRGkijewhGcPv7a6sv17MGdpS3eL22AQHXzE98Xnz1BG pzYVBgo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6jpUzO6Fl2nF9LfEHqU FOA+GpyqCmp2zWSDAXtf7s9qw7YiUeu5Ldgo6jJtkygc4NZ7tx9/4K6orjzVLnnT O5MdtX9Bsqc0Iyf3mfkOhsNjzsFPYoHMWQpJDX8fKuzusfOmXDp9MS4UYqQerHCr NiUdYVDNYU2WRo3g/GM2vIXAvC1Iwdg/jwb2Xkpm14sTdv6UyWVRBUq7zoWBX0z3 pOH5YmhkpHAc7ZWdLUqKrXuV8zcSiV6/5pZCCzjC6WID2gNAheuKm/NxJxji0faV wpRe7Dryq5qB0T0/fb1jOsvykZxUnOu3zL5qCsCeqanZ9dm633Lfx7yYCwYG3Urt PQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 288295256319852300128448956438427858653 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '94607' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oakland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1111 Franklin Street' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Regents of the University of California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CDL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cdlib.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24194809576970282179123338487959651450064310770419406269592825953886952175022462881918934544112613338002478315799424212122243250238645156730728478521790531907310251827277508493000630483249734807134830510046717705502361940796829665942626316408743051846871157332517063335429802738966478693380480707891542770525577292568600809459976454380275329078389891063863812504745563628104160710911903225685338590368099797940008324847842149593354238940638661281149856246382648532197048609314890143293474335300415183948919088186757371919825664691612329807334488221125988093844090406043345092412616839861240104275582122852041978735933 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 03a8c0b49fc4296e1f6920dbdb09f6e09ffefbd6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdlib.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdlib.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdlinfo.cdlib.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cdlib.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-cdlib-prd.cdlib.org' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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