www.rit.edu

- Rochester Institute of Technology -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number b3:8c:31:f4:d1:88:95:16:9e:30:57:4f:49:21:3a:3b was issued on by Internet2.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Rochester Institute of Technology

Organization: Rochester Institute of Technology
State / Province: New York
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): b3:8c:31:f4:d1:88:95:16:9e:30:57:4f:49:21:3a:3b
Serial Number (int): 238659746040284534544086612301211318843
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:ca:ba:99:52:84:65:13:ab:50:8b:56:93:47:7e:99:ea:f1:09:3f
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): b5:60:70:d8:94:33:c4:38:de:23:79:c6:a8:bc:f7:62:f1:0d:ad:ef
Fingerprint (sha256): 02:3b:a5:11:15:99:f5:59:cc:01:b9:66:8c:a1:ad:85:d2:d6:23:75:fb:94:ac:a8:a6:16:91:72:8c:aa:b6:b5

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate www.rit.edu

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rit.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.rit.edu
flctaodconference.rit.edu
footprints.rit.edu
foss.rit.edu
fpi.rit.edu
framelesslabs.rit.edu
fsl.rit.edu
galapagos.rit.edu
gameeducationjournal.rit.edu
games.rit.edu
gccis.rit.edu
gcciswic.rit.edu
gencyber.rit.edu
globalcampus.rit.edu
globalcampuses.rit.edu
globalscholar.rit.edu
globalunion.rit.edu
google.rit.edu
grad.rit.edu
gradstudies.rit.edu
grcs.rit.edu
greek.rit.edu
greekcouncil.rit.edu
gsv.rit.edu
headless.rit.edu
help.rc.rit.edu
homeuse.rit.edu
honors.rit.edu
housing.rit.edu
hubprint.rit.edu
ie.rit.edu
ieee.rit.edu
igm.rit.edu
ihouse.rit.edu
imaging.rit.edu
impress.rit.edu
inclusiveexcellence.rit.edu
infocenter.rit.edu
innovation.rit.edu
inside.rit.edu
interactiveadventures.rit.edu
interpreting.rit.edu
ischool.rit.edu
iscram2018.rit.edu
ithelp.rit.edu
its.rit.edu
itshd.rit.edu
itswiki.rit.edu
ivcf.rit.edu
ivet.rit.edu
ivv.rit.edu

Other certificates including the domain name rit.edu

(limited to 100 certificates)
3dprint.csh.rit.edu
elkmoose.student.rit.edu
us.prod.campusgroups.com
ezproxy.rit.edu
arthouse.rit.edu
www.rit.edu
michaelfrancis.me
cluster3.technolutions.net
spam.rit.edu
us.prod.campusgroups.com
dbadmin.istlabs.rit.edu
bcc1.talentera.com
vems.main.ad.rit.edu
cs.rit.edu
hvz.rit.edu
afsabre.rit.edu
kdcproxy.ad.rit.edu
www.rit.edu
print02.main.ad.rit.edu
game.csh.rit.edu
inspirationalshitposts.a.csh.rit.edu
fma.rit.edu
apps-alpha.scb.rit.edu
www.rit.edu
cluster3.technolutions.net
astrodance.rit.edu
nga.scb.rit.edu
git.csh.rit.edu
myportal.rit.edu
www.rit.edu
oops.rit.edu
git.csh.rit.edu
croatia.rit.edu
hogs.rit.edu
us.prod.campusgroups.com
grapeape.se.rit.edu
spiritpass.rit.edu
openevals.rit.edu
reports.ntid.rit.edu
kgcoe-msdpics.rit.edu
crmstage-des.rit.edu
vpr-sandbox.rc.rit.edu
cias-jira.rit.edu
sites.sg.rit.edu
pawprints.rit.edu
cias-confluence.rit.edu
samurai.csh.rit.edu
www.ist.rit.edu
bcc1.talentera.com
moonbounce.rit.edu
myupktest.rit.edu
castnet.rit.edu
cadetsrv.main.ad.rit.edu
crmprod-des.rit.edu
filedump.se.rit.edu
api.rit.edu
www.rit.edu
reslab.rit.edu
rit.edu
myportaladmin.rit.edu
ritmailtest.rit.edu
evt.rit.edu
us.prod.campusgroups.com
rlescloud.main.ad.rit.edu
jenky.csh.rit.edu
www.rit.edu
www.rit.edu
headcount.se.rit.edu
monitor.istlabs.rit.edu
argo.csh.rit.edu
people.rit.edu
purple.student.rit.edu
infoguides.rit.edu
msdnaa.rit.edu
mabl.rit.edu
us.prod.campusgroups.com
croatia.rit.edu
appsdev.ntid.rit.edu
www.rit.edu
bcc1.talentera.com
twcosxserver01.main.ad.rit.edu
scholarworks.rit.edu
www2.rit.edu
myinfographicsd.main.ad.rit.edu
*.ce.rit.edu
careerservices.rit.edu
ritanime.rit.edu
witr.rit.edu
ntidwb01d.ntid.rit.edu
ccserv.rit.edu
aod.rit.edu
swen-ads.igm.rit.edu
mabl.rit.edu
taco.student.rit.edu
myinfo.rit.edu
vm344c.se.rit.edu
imap.se.rit.edu
openbsd.se.rit.edu
*.ce.rit.edu
cluster3.technolutions.net

Certificate

The complete raw certificate details for www.rit.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFhjE2shP8V3bjABUTwI
HSD2xsqReU138GnHOPiAt0TojfOM2ps+U9v9Hd3AU6kB2WmaLVtunUS4EMKPN0hE
Ek45x2SDAHRryIPZSmKM2fsnLUA8i47GIpN2+C+svulYlbw3AFNdhC8Wg+RwrYTM
as9joOceT8cHbLq+cjQpEJ4bKKTjU+iOa3UD7zJPVgTs4trsSUutKE+mUCuSvflP
0Ot/5F5OzZaxbGcgmxRiPkfl2IFPs9plM2RdHa/k1T5dmAG8Ly/n2DDr6zEmuBod
4SXyy8SeFihb6MiambPftGyrs0KFXk51tSVrc246mdm0QANtymA7KeVCW5YV9+AX
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 238659746040284534544086612301211318843
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rochester Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rit.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24281339815050553704729579623546844111196193632064836408069198986683034278748814142632175243238035643207229909266814807883999885550045589866683178616954971657218360818882491745356563730882282244583623347804743040183340521297388937854207150584837692491120445579112697908868662499175942206928436807957880167154982851936547298158477928303839279522454134665156009635996376100368732830451284061590392898564653186192682743235544017966145457694438977879661860191000922551623263418302256496235817363498099726180257407988720717689534076928595948494379339231708609225329611788913699710103032009610372236983965797798482093807431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06caba9952846513ab508b5693477e99eaf1093f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a0000018fdfa642e00000040300473045022100d4df9188a39cbf2a5fb2248b60d2426f967acd5ec5ef180e19e102de9ab1e66402205d8522f999bec4189d3bd61e5f81b53e62090f7545a7516c15f557abbb8d58ff0075000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa340000018fdfa642a0000004030046304402202f8340627d66314d467ceed8cc621ba109b92f7ff5745414180e5d0b89437f4702206ba181193da0974d2e3aa3b68a5dfadb011eb950b3caf0c553e163ea7ace5b7500770012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a0000018fdfa642880000040300483046022100abe7d5d85d79775f3220e1fc18872acb667dd6d0617de3cefcfa657c8f9705e0022100a219a5eaafba0ee1b2357c9c4b024e65730d4c7dca7d550a53f1265f6cd1372f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (916 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flctaodconference.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footprints.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foss.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpi.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'framelesslabs.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsl.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galapagos.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameeducationjournal.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'games.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gccis.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcciswic.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gencyber.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalcampus.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalcampuses.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalscholar.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalunion.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'google.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grad.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gradstudies.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grcs.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greek.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greekcouncil.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsv.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headless.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.rc.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeuse.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honors.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housing.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubprint.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ieee.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igm.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihouse.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaging.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impress.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inclusiveexcellence.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infocenter.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovation.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactiveadventures.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interpreting.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ischool.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iscram2018.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ithelp.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'its.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itshd.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itswiki.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivcf.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivet.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivv.rit.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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