ur-tst-nav.ucsc.edu

- University of California, Santa Cruz -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number d8:18:17:ea:74:f9:50:01:84:7f:5d:30:8c:9b:01:aa was issued on by Internet2.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of California, Santa Cruz

Organization: University of California, Santa Cruz
Organization unit: APMIOPS
Address: 1156 High Street
Address: Chancellors Office
Postal code: 95064
State / Province: CA
Locality: Santa Cruz
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d8:18:17:ea:74:f9:50:01:84:7f:5d:30:8c:9b:01:aa
Serial Number (int): 287238347285159238222254701088570278314
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 73:48:80:ca:15:00:5a:95:74:a8:18:93:ab:5e:c9:f9:59:e3:f7:7b
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 69:2c:67:e2:b4:80:f1:36:2a:13:b9:4f:da:2d:01:4a:23:50:91:f3
Fingerprint (sha256): 02:36:2c:7d:83:00:36:06:a0:7f:6e:1c:6b:02:ee:0b:79:fc:cc:d7:90:6c:9a:8a:b9:db:99:13:5f:e2:59:87

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate ur-tst-nav.ucsc.edu

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ur-tst-nav.ucsc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ur-tst-nav.ucsc.edu
ur-tst-adm-1.ucsc.edu
ur-tst-adm.ucsc.edu
ur-tst-ban-1.ucsc.edu
ur-tst-eis-1.ucsc.edu
ur-tst-eis.ucsc.edu
ur-tst-nav-1.ucsc.edu

Other certificates including the domain name ucsc.edu

(limited to 100 certificates)
farmandgardenwiki.ucsc.edu
5631986051842048-fe1.pantheonsite.io
it.uahs.arizona.edu
connect.ucsc.edu
wcms.ucsc.edu
cp-scanner.ucsc.edu
calendar.sdzsafaripark.org
monitor.soe.ucsc.edu
applygrad.ucsc.edu
cscenter.pbsci.ucsc.edu
5707090131681280-fe3.pantheonsite.io
746f6675.ucsc.edu
wordpress.ucsc.edu
sho-prod-web-2.ad.ucsc.edu
banking-business-review.com
undergrad.pbsci.ucsc.edu
hyperion.ucsc.edu
ecommons.ucsc.edu
iacuc.ucsc.edu
stage.cghub.ucsc.edu
dunkin.eeb.ucsc.edu
campusrec.ucsc.edu
5684453372329984-fe2.pantheonsite.io
5638159220080640-fe2.pantheonsite.io
banking-business-review.com
my.prd.ais.aws.ucsc.edu
gradadmissions.ucsc.edu
pleiades.ucsc.edu
scalefunder.net
ugr.ue.ucsc.edu
noc-dev-vise-1.ucsc.edu
ur-tst-nav.ucsc.edu
5754079087165440-fe4.pantheonsite.io
scalefundercert.net
ecommons.ucsc.edu
5631986051842048-fe1.pantheonsite.io
208.lsnc.net
drs.sandbox.dev.singlecell.gi.ucsc.edu
wildlife.ucsc.edu
5679052450955264-fe2.pantheonsite.io
win-sys-mgr-1.lt.ucsc.edu
5682747733442560-fe3.pantheonsite.io
wcms-prod-web-5.ucsc.edu
5156937704407040-fe1.pantheonsite.io
officeofresearchhelp.ucsc.edu
its-prod-www2-2.ucsc.edu
5638159220080640-fe2.pantheonsite.io
5682747733442560-fe3.pantheonsite.io
5156937704407040-fe1.pantheonsite.io
officeofresearchhelp.ucsc.edu
bsg-sandbox.ucsc.edu
drs.sandbox.dev.singlecell.gi.ucsc.edu
service.sandbox.dev.singlecell.gi.ucsc.edu
banking-business-review.com
urlogin.ucsc.edu
shs-prd-bkr1.au.ucsc.edu
genecats.gi.ucsc.edu
5156937704407040-fe1.pantheonsite.io
hyperion.ucsc.edu
5707090131681280-fe3.pantheonsite.io
5156937704407040-fe1.pantheonsite.io
campusrec.ucsc.edu
ad-prod-rdcb-1.ad.ucsc.edu
vi-prod-vpsc-1.au.ucsc.edu
5156937704407040-fe1.pantheonsite.io
gitlab.soe.ucsc.edu
gradlab.ucsc.edu
saturn.ucsc.edu
208.lsnc.net
pisa.tst.ais.aws.ucsc.edu
161511-web1.vilcek.org
*.courses.soe.ucsc.edu
libportal.ucsc.edu
5156937704407040-fe1.pantheonsite.io
scalefundercert.net
griffin.ucsc.edu
shs-prod-app-2.ad.ucsc.edu
hacking4oceans.ucsc.edu
pisa-dev.ucsc.edu
5638159220080640-fe2.pantheonsite.io
cf-prd-app-1.ucsc.edu
research-it.ucsc.edu
5717044213317632-fe3.pantheonsite.io
mmapl.ucsc.edu
*.ue.ucsc.edu
*.ucsc.edu
noc-prod-vise-2.ucsc.edu
hexcalc.gi.ucsc.edu
ppc-webdav.ucsc.edu
5679052450955264-fe2.pantheonsite.io
gradadmissions.ucsc.edu
sctv.ucsc.edu
ais-reports.rds.ucsc.edu
static.ucsc.edu
ccrec.ucsc.edu
gradadmissions.ucsc.edu
liberalarts.ss.pacific.edu
dunkin.eeb.ucsc.edu
scalefunder.net
scalefunder.net

Certificate

The complete raw certificate details for ur-tst-nav.ucsc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGPzCCBSegAwIBAgIRANgYF+p0+VABhH9dMIybAaowDQYJKoZIhvcNAQELBQAw
djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix
EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT
FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMTgxMDA5MDAwMDAwWhcNMTkxMDA5
MjM1OTU5WjCB1jELMAkGA1UEBhMCVVMxDjAMBgNVBBETBTk1MDY0MQswCQYDVQQI
EwJDQTETMBEGA1UEBxMKU2FudGEgQ3J1ejEZMBcGA1UECRMQMTE1NiBIaWdoIFN0
cmVldDEbMBkGA1UECRMSQ2hhbmNlbGxvcnMgT2ZmaWNlMS0wKwYDVQQKEyRVbml2
ZXJzaXR5IG9mIENhbGlmb3JuaWEsIFNhbnRhIENydXoxEDAOBgNVBAsTB0FQTUlP
UFMxHDAaBgNVBAMTE3VyLXRzdC1uYXYudWNzYy5lZHUwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQC537SOHcNMDCehmVBCZt3G1zY/e11OYP/Sl7ofv3IN
FIj4vlOUV9iak02bhrHBxYzb6axrTY9zbbpXQEktr+Kl/gaf68p4FphBYvvL4KJK
W03u6/EtsL4idm6KY68kapAnoqFnttfI8dpzUGC0ZoLzp+MMX/VEXYbb28zBWUkX
n4mjmC1g6vE9EZpbxBy2kFHNmZPYKl9hEqq06rZOQZ3YyZvgoCbps8CE1KZbxs80
irtAuxN064R456BbOvkBztxIkbgHS5B+I01foVIpKxwHeW9zVHXedgC9oaULxHY8
mUQXJ18h6SwE6OXkMzRqtWagl5gP3t9a38of3FScYaeXAgMBAAGjggJlMIICYTAf
BgNVHSMEGDAWgBQeBaN3j2yW4luHS6a0hqxxAAznODAdBgNVHQ4EFgQUc0iAyhUA
WpV0qBiTq17J+Vnj93swDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGcGA1UdIARgMF4wUgYMKwYBBAGu
IwEEAwEBMEIwQAYIKwYBBQUHAgEWNGh0dHBzOi8vd3d3LmluY29tbW9uLm9yZy9j
ZXJ0L3JlcG9zaXRvcnkvY3BzX3NzbC5wZGYwCAYGZ4EMAQICMEQGA1UdHwQ9MDsw
OaA3oDWGM2h0dHA6Ly9jcmwuaW5jb21tb24tcnNhLm9yZy9JbkNvbW1vblJTQVNl
cnZlckNBLmNybDB1BggrBgEFBQcBAQRpMGcwPgYIKwYBBQUHMAKGMmh0dHA6Ly9j
cnQudXNlcnRydXN0LmNvbS9JbkNvbW1vblJTQVNlcnZlckNBXzIuY3J0MCUGCCsG
AQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMBMGCisGAQQB1nkCBAMB
Af8EAgUAMIGmBgNVHREEgZ4wgZuCE3VyLXRzdC1uYXYudWNzYy5lZHWCFXVyLXRz
dC1hZG0tMS51Y3NjLmVkdYITdXItdHN0LWFkbS51Y3NjLmVkdYIVdXItdHN0LWJh
bi0xLnVjc2MuZWR1ghV1ci10c3QtZWlzLTEudWNzYy5lZHWCE3VyLXRzdC1laXMu
dWNzYy5lZHWCFXVyLXRzdC1uYXYtMS51Y3NjLmVkdTANBgkqhkiG9w0BAQsFAAOC
AQEAAFZiacVm66Yg+ApU9loMSBYuDZ9UHGzxHnfNlKBmpz2jDTENPvgH3VgAe5X6
vSklDI1rrSnL1r+1EMXsVpIn1sVaWCxs9hDV7pge/zMTHTfRP3/ck7gQ6Cq1+R2b
dUdvHp+gurST1v3mvcNZDJgGxma/Z/CL4lO+8yyEqUlW9G8t/xYOpyK5C5ce6v4u
80LIXaDFNLUR8S+b50Q2JSoEX/0w6DAcPsB38egdLsH/feah93Mmj0uvpO+XnCy0
dMaC4WUCQ2Rt5LAD5kSldYvPoHKXVX8a5rfDymK1RH+1psJmSV/kOSySEBNVswBs
WBKe/rwai2l8/ugBSgH+AGzKsw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud+0jh3DTAwnoZlQQmbd
xtc2P3tdTmD/0pe6H79yDRSI+L5TlFfYmpNNm4axwcWM2+msa02Pc226V0BJLa/i
pf4Gn+vKeBaYQWL7y+CiSltN7uvxLbC+InZuimOvJGqQJ6KhZ7bXyPHac1BgtGaC
86fjDF/1RF2G29vMwVlJF5+Jo5gtYOrxPRGaW8QctpBRzZmT2CpfYRKqtOq2TkGd
2Mmb4KAm6bPAhNSmW8bPNIq7QLsTdOuEeOegWzr5Ac7cSJG4B0uQfiNNX6FSKSsc
B3lvc1R13nYAvaGlC8R2PJlEFydfIeksBOjl5DM0arVmoJeYD97fWt/KH9xUnGGn
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287238347285159238222254701088570278314
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '95064'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Cruz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1156 High Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chancellors Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of California, Santa Cruz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'APMIOPS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ur-tst-nav.ucsc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23464399610385526951063836419831677533541058347608895926981082179812125860263263783386275271941908908718458279999462895003183964074658673197913003238640354648108954634963302689208323502972483096392434482988901944138857441876641115052292281946569798424692167573548451215412695304747296916675300263153028192586338677175564710911255904313458172504598760429614509407516481551023603436566080724232387860401119686897784754425879228376056750661974148994861317667908870808513015204639491524533999144843974891886847251493972672671453597786498234610647492067240905490512489878420500982238082562715903755723571609407401727469463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							734880ca15005a9574a81893ab5ec9f959e3f77b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (158 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ur-tst-nav.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ur-tst-adm-1.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ur-tst-adm.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ur-tst-ban-1.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ur-tst-eis-1.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ur-tst-eis.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ur-tst-nav-1.ucsc.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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