cert.sandia.gov

- Sandia National Laboratories -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 45:69:b4:5e:7e:b1:ba:53:78:fa:e0:43:f3:18:9a:2d was issued on by COMODO CA Limited.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sandia National Laboratories

Organization: Sandia National Laboratories
Organization unit: Hosted by Sandia National Laboratories
Address: 1515 Eubank Blvd SE
Postal code: 87123
State / Province: NM
Locality: Albuquerque
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 45:69:b4:5e:7e:b1:ba:53:78:fa:e0:43:f3:18:9a:2d
Serial Number (int): 92265581199691256780406800078597560877
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 0b:bd:af:f6:c7:be:bb:51:09:02:06:c1:90:1a:95:92:2f:de:b8:aa
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 6c:f3:a3:ce:cb:9f:ec:8f:06:47:ba:2b:e6:87:a9:0b:77:bf:34:4a
Fingerprint (sha256): 02:de:79:06:6c:88:f3:a7:4f:9a:10:c9:da:23:fa:14:2c:3a:80:09:8d:f5:83:db:49:46:50:e1:2c:49:3c:e4

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate cert.sandia.gov

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert.sandia.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cert.sandia.gov
*.ca.sandia.gov
*.sandia.gov
*.sso.sandia.gov
*.web.sandia.gov
*.webdev.sandia.gov
*.webqual.sandia.gov
sandia.gov

Other certificates including the domain name sandia.gov

(limited to 100 certificates)
remote.sandia.gov
as1013snllx.sandia.gov
al.sandia.gov
fmdiri1.webdev.sandia.gov
h2zilla.sandia.gov
cchdsupport-son.sandia.gov
as3101snllx.sandia.gov
remote-ca.sandia.gov
ccmelcor.sandia.gov
esheta-dev.sandia.gov
accountpasswords.sandia.gov
ws1682lxz.sandia.gov
xfracas.sandia.gov
rocket.web.sandia.gov
hpcn-www.ca.sandia.gov
ebid-search.sandia.gov
slycat-scn.sandia.gov
rpwmesh-web2.sandia.gov
swas-q.sandia.gov
testing-dev.sandia.gov
kscredrepo.webdev.sandia.gov
msntstsvr.webdev.sandia.gov
accountpasswords.sandia.gov
vast.sandia.gov
primavera.webqual.sandia.gov
xfracas.sandia.gov
isp.sandia.gov
nts.webdev.sandia.gov
psc03nma.sandia.gov
eimsiis.sandia.gov
nagios.gibson.sandia.gov
as3012snllx.sandia.gov
cobrap6jobs.webqual.sandia.gov
as1019snllx.sandia.gov
oud1.webdev.sandia.gov
ebprod.sandia.gov
safer.sandia.gov
wls122emw3.web.sandia.gov
ebwebe2.web.ca.sandia.gov
terminal.web.ca.sandia.gov
catest4.webdev.ca.sandia.gov
foobarmsn.webdev.sandia.gov
cbapce2.webdev.sandia.gov
cert.sandia.gov
wls122emw1.web.sandia.gov
as1008snllx.sandia.gov
radtrain.sandia.gov
gms-webhooks.sandia.gov
*.sandia.gov
datasea-qual.sandia.gov
sregistry.ca.sandia.gov
ebapce2.webdev.ca.sandia.gov
ux-registry.sandia.gov
nwisapiqual.sandia.gov
rtc.sandia.gov
met-eoc.sandia.gov
ick.sandia.gov
vzadmi1.webdev.sandia.gov
tagnsdd.sandia.gov
ws451snlnt.sandia.gov
wildfly27psf.webdev.sandia.gov
*.sandia.gov
ickdev.sandia.gov
msnfoobar.webdev.sandia.gov
wls122emw3.webqual.sandia.gov
moveitmobile-d.sandia.gov
mlserver-dev.sandia.gov
wcvis-q.sandia.gov
pointtest.ca.sandia.gov
rp-linux01.ca.sandia.gov
supplierportal-qual.sandia.gov
dancer.ca.sandia.gov
msntstrostra.webdev.sandia.gov
fmsoai1.webdev.sandia.gov
caf.web.sandia.gov
prodtools.sandia.gov
dhs2.ca.sandia.gov
ebid-role.sandia.gov
eo12333-qual.sandia.gov
sip.sandia.gov
vnge.sandia.gov
foiax.sandia.gov
sccmexternal.sandia.gov
lb-qual-2.sandia.gov
dancer.ca.sandia.gov
getridofit-p.sandia.gov
ebid-help.sandia.gov
range-vpn-1.sandia.gov
hackmd.sandia.gov
lapsmq15.webdev.sandia.gov
ebfrmi2.webdev.ca.sandia.gov
config1.ca.sandia.gov
nexus.web.sandia.gov
ebccmi1.webqual.sandia.gov
map.sandia.gov
supplierportal-dev.sandia.gov
tagnsdd.sandia.gov
fmfnr.webqual.sandia.gov
870dev.sandia.gov
nexus.web.sandia.gov

Certificate

The complete raw certificate details for cert.sandia.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwucbiGfZhd7mUHMJWVR
h115nWVJSg/TNQXrk2P6z/mMTvuKFyxILglgEdRdwgywQdJADrvDm/mvBt0xd2lD
ss1FClqNrjhUap/8j3jxMgvoEhR7dsVZ3vdkt8dwpNDMj0Wamxjy2QYT0HkP8MOp
FSjOQqQzqri7GPBNHUlCSjQp7DxHb3dqir5RuPUB2e9sE/FgULjreiGFsJcKe0AM
ii2IXCEPAAF6fXlfdskzDddoEkdYFO6v3uaCo+0VXP96qyNdZS27i4A2jLAEZyAD
5Fq9JcCuWwvoPzVOz53a8DgTmVEKpNayefz31m3sjy9mlh1OJ1QiYDtoYtLZL/J2
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92265581199691256780406800078597560877
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '87123'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Albuquerque'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1515 Eubank Blvd SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sandia National Laboratories'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Sandia National Laboratories'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert.sandia.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23612288653502605475462639569878409680048281016078861667980333093727385836672409319315091849773170952556209515896325941052975776491674984813013568267506527418768753473914117524954774115604678820043892109256406490825416907613271698173429664225013508452381891722571648199214223801686871336742349953494719616289757689099235491675666413118545472129787402091241820932906690181580888252892638660481545234574174542580597245321142977062943724569400411912010472964286230448152207717253334779110857828233089301275920281225942194456358096328684405051057055018856696669946188872859049314035967065623000661454380994528227961763581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0bbdaff6c7bebb51090206c1901a95922fdeb8aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (142 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert.sandia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ca.sandia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sso.sandia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.web.sandia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webdev.sandia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webqual.sandia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandia.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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