liblapfac04.ad.uillinois.edu

- University of Illinois -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number c2:a7:ce:e8:6a:5c:96:47:f2:75:0f:50:ec:68:fa:80 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Illinois

Organization: University of Illinois
Organization unit: Urbana-Champaign Campus
Address: 901 West Illinois Street
Postal code: 61801
State / Province: IL
Locality: Urbana
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c2:a7:ce:e8:6a:5c:96:47:f2:75:0f:50:ec:68:fa:80
Serial Number (int): 258741541347878393009366087436079790720
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e8:2d:c7:4a:27:a3:65:d2:d2:d0:86:89:65:7a:7b:3e:93:70:6f:e6
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 49:c1:15:28:fe:23:e6:cb:1b:d5:f8:dd:47:9c:3a:1c:96:39:fc:21
Fingerprint (sha256): 02:f8:cc:ee:c0:53:b5:64:c8:45:40:3a:83:cd:5a:d4:25:4d:df:7a:8b:f6:fb:b3:7b:a6:29:2c:64:2a:47:54

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate liblapfac04.ad.uillinois.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for liblapfac04.ad.uillinois.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

liblapfac04.ad.uillinois.edu

Other certificates including the domain name uillinois.edu

(limited to 100 certificates)
atlasweb16dev.ad.uillinois.edu
nessie.uihr.uillinois.edu
my.engr.illinois.edu
my.uillinois.edu
uifcrmdb03.ad.uillinois.edu
calendars.illinois.edu
dev.auth.uillinois.edu
calendars.illinois.edu
chipbsql2.admin.uillinois.edu
appserv5.admin.uillinois.edu
illinois.edu
liblapfac04.ad.uillinois.edu
tracker-test.admin.uillinois.edu
chiedwebwin1.ad.uillinois.edu
appserv7.admin.uillinois.edu
banneradmintc.apps.uillinois.edu
chiconf1.admin.uillinois.edu
uajobs.hr.uillinois.edu
urbskypeccapp.ad.uillinois.edu
helpdesk.ahs.illinois.edu
vetmedtest1.admin.uillinois.edu
web.uillinois.edu
www.wcms.uillinois.edu
www.wcms.uillinois.edu
lib-sccm-pdp02.library.illinois.edu
techreadyprod.web.illinois.edu
lists.illinois.edu
chioid.admin.uillinois.edu
www2.wcms.uillinois.edu
blogs.illinois.edu
illinois.edu
faa-www-rori.ad.uillinois.edu
illinois.edu
uicplacement.uillinois.edu
rdpgateway.illinois.edu
exchange.uillinois.edu
hrnetptest.uihr.uillinois.edu
remote.uillinois.edu
pcard.apps.uillinois.edu
tracker.admin.uillinois.edu
hrnet.uihr.uillinois.edu
online.uif.uillinois.edu
darsweb.admin.uillinois.edu
wac.atlas.illinois.edu
ui2web4.apps.uillinois.edu
webprod.admin.uillinois.edu
ossswebcs.admin.uillinois.edu
online.uif.uillinois.edu
blogs.illinois.edu
www.ipay.uillinois.edu
chipbweb1.ad.uillinois.edu
project.ui-integrate.uillinois.edu
training.obfs.uillinois.edu
hipaa.uillinois.edu
my.engr.illinois.edu
urbbannerofmws.admin.uillinois.edu
xml.admin.uillinois.edu
urbskypeccapp.ad.uillinois.edu
inquiry.global.uillinois.edu
auth.uillinois.edu
myuicdev.admin.uillinois.edu
chiisgsapp2.ad.uillinois.edu
illinois.edu
support.uillinois.edu
obfsappsprod2.ui.uillinois.edu
www.icard.uillinois.edu
appsobfs-cf11prod.obfs.uillinois.edu
atlas-cplan03.atlas.illinois.edu
www.isws.illinois.edu
www-s.usp.uillinois.edu
ss.global.uillinois.edu
mobiusview.apps.uillinois.edu
www2.wcms.uillinois.edu
ui2web1.apps.uillinois.edu
sts.addev.uillinois.edu
isgs-zinc.isgs.illinois.edu
uifcrmdb03.ad.uillinois.edu
appserv4.admin.uillinois.edu
remote.uillinois.edu
eddie.ds.uillinois.edu
ilearn.uif.uillinois.edu
newhire.uihr.uillinois.edu
banneradmintc.apps.uillinois.edu
data.isgs.illinois.edu
illinois.edu
uifcrmdb01.ad.uillinois.edu
appserv5.admin.uillinois.edu
lyncfepool3.lync.uillinois.edu
login.uillinois.edu
blogs.illinois.edu
bxsprod.apps.uillinois.edu
lyncpchatpool.lync.uillinois.edu
mosssecure.obfs.uillinois.edu
chiconf1.admin.uillinois.edu
learn.obfs.uillinois.edu
smart.physics.illinois.edu
www.ds.uillinois.edu
liblaplbo02.ad.uillinois.edu
www.uif.uillinois.edu
urbasdev6.admin.uillinois.edu

Certificate

The complete raw certificate details for liblapfac04.ad.uillinois.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Z8BWrxxGXq3SOwm7J8q
DApB77N3QjkoLki/PNTIEUxvZ4I8I9ZZ7K3n/XGL/rpLzVYEaz/H/DtY1OBDqxXz
5PiFj6ymBnd4ai02UKRfG/kpj3/mAnHKpdId42dyC91QjMJBJ2VTdpqafVCECkyc
DVOHfZwtytkglzbRbMRFYFXz/EoRMlK1QyXj17u/vzO/J+5HzMC+EdjdTxQLimVX
1oN0qkfo5+3sjadjVYYkGTc8cs1DrCRQH+t+V5Zv0FRroaPdKS6YgaTYoykfIre0
YQlrHqu7u8m77J1QPkwJphPBYosDv5wgm4jds8vwePloPp+LNF1axWSvWtzj1HXn
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 258741541347878393009366087436079790720
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '61801'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Urbana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '901 West Illinois Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Urbana-Champaign Campus'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'liblapfac04.ad.uillinois.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28986980268429852480242237557930164805414466726111476160860755653131194052667470312459371499723676895650780878237704481493038524709818552452043084988627171668876082872115706012376238665900890373300996781497636821958194548639952363749938282307315588281971645928660929266456150576532889034182635856754171928776870147187672061630634336872576770931735812226128837928551582321895308620623238215684769723222707897542333227869814203010186345155219916415340536967517628487188655558898744009869932129389114179488824822126755362177318379771102658575949253272847337683149528865454368223434408632584293233522721879727922247755573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e82dc74a27a365d2d2d08689657a7b3e93706fe6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liblapfac04.ad.uillinois.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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