iontrap.physics.indiana.edu

- Indiana University-Bloomington -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number f0:98:c1:de:eb:dd:5b:c0:21:17:31:6b:57:db:bd:5d was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Indiana University-Bloomington

Organization: Indiana University-Bloomington
Organization unit: University Information Technology Services
Address: 107 South Indiana Ave
Postal code: 47405
State / Province: Indiana
Locality: Bloomington
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f0:98:c1:de:eb:dd:5b:c0:21:17:31:6b:57:db:bd:5d
Serial Number (int): 319807880277579269429185253848282545501
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 2e:d1:4b:6c:a3:68:fd:df:01:c4:5f:91:ab:7f:3c:23:4d:33:47:75
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): ce:81:9f:08:47:64:4b:34:63:08:08:cd:5a:a9:91:f2:de:1b:c2:fc
Fingerprint (sha256): 02:c3:0f:cf:6b:ba:fa:e6:6e:c5:5a:cf:38:9c:d6:22:02:d7:9c:0f:73:17:32:4e:eb:e9:e5:23:36:fa:c7:a5

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate iontrap.physics.indiana.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iontrap.physics.indiana.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

iontrap.physics.indiana.edu

Other certificates including the domain name indiana.edu

(limited to 100 certificates)
floorplans.service.indiana.edu
bl-s4b-dirpool.ads.iu.edu
cid.indiana.edu
alumni.indiana.edu
patshih.sice.indiana.edu
opera.imu.indiana.edu
info.educ.indiana.edu
owa.exchange.iu.edu
iuware-test.uits.indiana.edu
sgis.indiana.edu
www.vpfaa.indiana.edu
test.fims.indiana.edu
vole.luddy.indiana.edu
storefront.document.indiana.edu
physics.indiana.edu
mfodev.music.indiana.edu
iuhssis.indiana.edu
kemprd.iuf.indiana.edu
franklin.chem.indiana.edu
list.indiana.edu
iufedocs.iuf.indiana.edu
nwb.slis.indiana.edu
www.cs.indiana.edu
mysite.sp.indiana.edu
uconnectlabs.com
rps.indiana.edu
maps.indiana.edu
sustain.iu.edu
vdi.ait.indiana.edu
www.iumj.indiana.edu
apps.indiana.edu
uconnectlabs.com
read.indiana.edu
iujur.iu.edu
unitedway.indiana.edu
munger.indiana.edu
www.informatics.indiana.edu
iubshutdown.indiana.edu
utilities-dev.registrar.indiana.edu
chemical.inventory.indiana.edu
apps3.indiana.edu
test.pe.registrar.indiana.edu
ccsrv1.psych.indiana.edu
earm.registrar.indiana.edu
fatalii.uits.indiana.edu
ucso.indiana.edu
alumni.indiana.edu
holtzlab.psych.indiana.edu
dev.citl.indiana.edu
iontrap.physics.indiana.edu
ella.ils.indiana.edu
iu-cv-xa7psf-02.uits.indiana.edu
external-relay.indiana.edu
housing.indiana.edu
college.indiana.edu
residency-test.indiana.edu
dev1.igs.indiana.edu
datainnovation.soic.indiana.edu
robotclothes.luddy.indiana.edu
projectdox.vpad.indiana.edu
uconnectlabs.com
josotl.indiana.edu
carina.indiana.edu
kb.indiana.edu
batch.iuf.indiana.edu
test.histdegr.indiana.edu
fast.oem.indiana.edu
uconnectlabs.com
grades.indiana.edu
wsa001.uits.indiana.edu
provost.indiana.edu
echo.uits.indiana.edu
snowy.luddy.indiana.edu
partnership.publichealth.indiana.edu
websurv.indiana.edu
www.document.indiana.edu
rt-spam.uits.indiana.edu
uconnectlabs.com
iumusiclive.jsom.indiana.edu
www.dailyrental.motorpool.indiana.edu
api.insite.indiana.edu
lisa.luddy.indiana.edu
www.repository.law.indiana.edu
alumni.indiana.edu
oemservices.indiana.edu
soco.sice.indiana.edu
key-qa.jsom.indiana.edu
calmweb.chem.indiana.edu
hydrogeochem.earth.indiana.edu
engagedlearning.indiana.edu
bksan2.bus.indiana.edu
monitor1.soic.indiana.edu
lmicdata.bio.indiana.edu
rosvall.lab.indiana.edu
fims.indiana.edu
wiki.dlib.indiana.edu
blog.provost.indiana.edu
dgrc-chris.bio.indiana.edu
bugs.dlib.indiana.edu
drugs.indiana.edu

Certificate

The complete raw certificate details for iontrap.physics.indiana.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s7idjxl1jB6FlcR/MGK
qGizMnaiYyfFhGeJ8+hJEngHPD6KdDrND4w0wkrgEn6drvlHTlue0Cd3VuY4hMk8
2IEU0gVJa8f1nTqZPSSjO6pfkmHKRn1c3UCPfpw6tC2WTrvyHarpozKHTBJaMGTE
Oy5qNMX5bZ3nfCwub7m6rgBQNfNZk0WaFlq4eE4O8+o0VRpwFjyVBajAgmRhXEM9
IxrzhCC5xPKEq7T+a75Yj+bWfeT8VX1qDP7zR7cft6fAdDNA+3WBFFKufULvfsHB
cgHuKfyQRUQbxQUct5doCAO+s4WMRbUArh+fPM+3XYOikK1Sp4xkhn60aTGcDyrK
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319807880277579269429185253848282545501
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '47405'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '107 South Indiana Ave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana University-Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University Information Technology Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iontrap.physics.indiana.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27117015869485842816763772148779366025267870918915694730745405817779599366724165649308673397759237867669990027903568023098084917156229287928988770750607421856909315758939075826956154015258205441596938958046226038391361776141910385251422972048841997686755928291124778405524411531210529677938530480958187904636356878492890658952153940841562987388969705590816365835732895704668226911934711156493819176355457842054188657433108689525297448825754697254690539424543622489866918677527044059469632028916773193362783145974405454478156037001405084175828419947465740427544027231720110928903792241914896325385022357067483333708413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ed14b6ca368fddf01c45f91ab7f3c234d334775
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iontrap.physics.indiana.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000016d225a3160000004030047304502210091015f5c172a4ef47925f8552f4828e4593c1d12f49861d05d7901ee54ff02fe02207710660689c7533fea11e44ddfd9f5c045c5a6153118214b8e0080b07b10da820077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016d225a3193000004030048304602210085f2be81e817549cc474a0db6fca72ec75d5ab533a9d2db0b4dd06960693b02d022100da54b76b884ae12ce4126cd1a6f4c047889db67a0fc75ce40e5f9bc659f0a04d0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016d225a314b000004030047304502210090d0a1d6f730b6781d2b2ecf486b13aa31e9620c2d7f4f0529f6fd4ddc78b43a02204836f0ac392aad7a3ccbb7d09c6c6d1179f8e3fcf3f10db3bc8326a7a48c8ce5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007be6b003d2053d14d375782e12b3009f09f2a89871b578abed8a820932aeea2e43d492fc5c47065c2191cd3ddd79160d0210c5eec870f9ab69c43258cd0736cfcaee9b53114d34d7137df39cd2764c2e385aba2d639c627cd19664b375a10c4ee7c886e3190146886ab60d269db62521c954b5cf940de78b551a2843bc5824009a9b2e70be1903df49e6f1e1c941aa304251d1ab611a27af5f1b9d5ddc6b8bd23426c739ef1a5c16cdade6c566e864e8cadf12a5a4541f80ee9dc9c2665df03a8fcd5e389064038fcb3e1c830b37e30de45aba9f0ca1cd5a0c066c52207130fd3505415eb890f73e6bd954485c52038c9e8987365ad20ab542a5657dd69b6531