www.publichealth.pitt.edu

- University of Pittsburgh -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 41:33:f4:7f:55:82:ca:31:2a:48:b5:4c:3e:8e:05:f4 was issued on by Internet2.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Pittsburgh

Organization: University of Pittsburgh
Organization unit: Computing Services and Systems Development
Address: 4200 Fifth Avenue
Postal code: 15260
State / Province: PA
Locality: Pittsburgh
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 41:33:f4:7f:55:82:ca:31:2a:48:b5:4c:3e:8e:05:f4
Serial Number (int): 86669585862189079283287948141815268852
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: df:59:8e:fb:9c:d7:98:0f:8f:61:61:bf:78:da:11:dd:4f:28:23:c1
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 0c:80:3a:f0:43:71:da:38:82:96:e7:81:25:a3:84:72:d9:f5:b6:26
Fingerprint (sha256): 02:fd:5c:e0:5b:13:53:85:54:56:e2:41:06:b1:53:de:65:b8:b3:ea:1b:81:58:47:e6:a9:30:d9:5a:05:0f:40

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate www.publichealth.pitt.edu

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.publichealth.pitt.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.publichealth.pitt.edu
bchs.pitt.edu
biostat.pitt.edu
curazika.pitt.edu
deltaomega.pitt.edu
eoh.pitt.edu
epidemiology.pitt.edu
globalhealth.pitt.edu
hgen.pitt.edu
hpm.pitt.edu
hsrp.pitt.edu
idm.pitt.edu
my.publichealth.pitt.edu
mypublichealth.pitt.edu
pittbridges.pitt.edu
publichealth.pitt.edu
www.bchs.pitt.edu
www.biostat.pitt.edu
www.curazika.pitt.edu
www.deltaomega.pitt.edu
www.eoh.pitt.edu
www.epidemiology.pitt.edu
www.globalhealth.pitt.edu
www.hgen.pitt.edu
www.hpm.pitt.edu
www.hsrp.pitt.edu
www.idm.pitt.edu
www.mypublichealth.pitt.edu
www.pittbridges.pitt.edu

Other certificates including the domain name pitt.edu

(limited to 100 certificates)
statuspage.io
apistatus.pitneybowes.com
online.orientation.pitt.edu
www.kidneycenter.pitt.edu
www.wiser.pitt.edu
my.pulmonarytrials.pitt.edu
www.ctmhr.pitt.edu
www.chronicle.pitt.edu
pitt-dr-vcweb.cssd.pitt.edu
statuspage.io
www.diabetesprevention.pitt.edu
statuspage.io
aro.pitt.edu
services.rods.pitt.edu
statuspage.io
coi.hs.pitt.edu
cutislaxa.hgen.pitt.edu
www.medstudentaffairs.pitt.edu
www.cwscholars.blog.pitt.edu
my.education.pitt.edu
ewi-vip-01.cssd.pitt.edu
www.scholarlyproject.medschool.pitt.edu
go.innovation.pitt.edu
pjephl.law.pitt.edu
jmla.pitt.edu
telerehab.pitt.edu
tincture.pharmacy.pitt.edu
valet.haa.pitt.edu
www.games4socialimpact.pitt.edu
www.pts.pitt.edu
www.phdl.pitt.edu
omed.pitt.edu
www.collision.pitt.edu
www.upgservices.pitt.edu
www.afcbt.pitt.edu
clip.pharmacy.pitt.edu
eval.medschool.pitt.edu
fsc-bbm-fe01qa.fis.pitt.edu
www.roc.pitt.edu
www.iise.pitt.edu
navigator.medschool.pitt.edu
rms-pgaw-01.cssd.pitt.edu
5673649784750080-fe1.pantheonsite.io
*.tt.pitt.edu
dev-itbill.pitt.edu
www.rusfilm.pitt.edu
www.totalrewards.pitt.edu
statuspage.io
stage.fm.pitt.edu
ssoe-sp13-01.engr.pitt.edu
ewi-zweb-19.cssd.pitt.edu
ledger.pitt.edu
securedns1.planmygift.org
passport.pitt.edu
securedns1.planmygift.org
scherlock.lrdc.pitt.edu
www.aspire.pitt.edu
shrsft6029himb.shrs.pitt.edu
www.ucisportfolios.pitt.edu
anthro-age.pitt.edu
durrantlab.bio.pitt.edu
www.collision.pitt.edu
scalefunder.net
overdrive.library.pitt.edu
katz-sepm.univ.pitt.edu
www.healthyhomelaboratory.pitt.edu
ppr.pitt.edu
www.gso.cs.pitt.edu
www.law.pitt.edu
rd-r9-26-cons-1.net.pitt.edu
www.ois.pitt.edu
www.ncbrr.pitt.edu
www.connect.pitt.edu
stage.lamp.pitt.edu
www.alumnionline.pitt.edu
moira.pitt.edu
passport.pitt.edu
oam.pitt.edu
www.exhibit.library.pitt.edu
data.act.pitt.edu
www.cba.pitt.edu
stage-pittdc-01.univad.stage.pitt.edu
www.publichealth.pitt.edu
www.osp.pitt.edu
contacts.katz.pitt.edu
50.shrs.pitt.edu
chassis.hsrdc.pitt.edu
www.japanstudies.pitt.edu
www.students.pharmacy.pitt.edu
5673649784750080-fe1.pantheonsite.io
www.hopeteam.pitt.edu
www.pediatrics.pitt.edu
www.medfaculty.pitt.edu
statuspage.io
statuspage.io
www.medadmissions.pitt.edu
www.vmi.pitt.edu
www.cmh.pitt.edu
rms-sjaw-01.cssd.pitt.edu
statuspage.io

Certificate

The complete raw certificate details for www.publichealth.pitt.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCKQ5W2EzlfWq30/sc9B
MsVUmgJTHGMF7Fyc9cO9tg+6FKK+5LETLEexWyjvTTtbKe2Z92di9O3XrK69bdwn
iYXHdo/ZGSalui0AsQemBVInNcHc+7IGsqaKj7EWPBdVc7cafCuV83NAG/p/s+kM
LAUQamE2/1Vf6AAhFW7LFxAsaUTsrAsSofVel7sYzNdfjtTSfF5AS9sbQhQRX4cW
NX0IpLT3p40ShpE4Lvrr4OnHehHRmdB+6XAcnbvhtIQhRwEWsGmWffvujlKejL+w
UPFuKwaA5ElA5jM7I9OJnhoOPvanPgyBOpHVNXzfxfwIwO23NU5oRZx10er2T5xi
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 86669585862189079283287948141815268852
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '15260'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4200 Fifth Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Computing Services and Systems Development'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.publichealth.pitt.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24759752903618001894382353119348577757363315064292176589607050414325847840141161024078505624161938531703824301611261069870539577128359681758340883998675526497828575893998164252571694864752678572901914538729035851112752741538840933608148963543226556166205821541514818109304573515915322017048518661712990301057280914458589887561978400898285711431502181647272198696636386379186521448242562148215398644925981609661527303463703875250690978843734210092920425442593557976196211569252296972582869393281385502041134358911153086163337890910981757697401773220500254909869862842992438583572128699819203367862253914019032867824197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df598efb9cd7980f8f6161bf78da11dd4f2823c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publichealth.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bchs.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biostat.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curazika.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deltaomega.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eoh.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epidemiology.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalhealth.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hgen.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpm.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsrp.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idm.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.publichealth.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypublichealth.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pittbridges.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publichealth.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bchs.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biostat.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curazika.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deltaomega.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eoh.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epidemiology.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalhealth.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hgen.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpm.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsrp.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idm.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypublichealth.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pittbridges.pitt.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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