champagne.ucsf.edu
- University of California, San Francisco -
Issued by InCommon RSA Server CA
About this certificate
This digital certificate with serial number e6:1e:9d:f3:dc:ad:ed:5f:4f:76:8b:32:1c:09:b2:76 was issued on by Internet2.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
University of California, San Francisco
Organization:
University of California, San Francisco
State / Province:
California
Country: US
Country: US
Internet2
Organization:
Internet2
Organization unit: InCommon
Organization unit: InCommon
State / Province:
MI
Locality: Ann Arbor
Country: US
Locality: Ann Arbor
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): e6:1e:9d:f3:dc:ad:ed:5f:4f:76:8b:32:1c:09:b2:76Serial Number (int): 305881411595334927161734423802569929334
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: c2:00:12:cd:ec:a1:89:18:cc:01:c1:20:4d:e3:b8:b9:e7:45:6e:21
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38
Fingerprint (sha1): 48:58:a2:a8:1b:1d:7e:c4:4d:ad:e8:b1:e8:0e:67:4e:79:b2:64:63
Fingerprint (sha256): 03:39:69:82:e1:3a:34:c7:cd:83:19:70:34:dc:6e:b4:35:2c:07:af:74:1b:4a:a7:14:f3:a4:85:53:ad:f4:8a
Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl
Check the revocation status for certificate champagne.ucsf.edu
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for champagne.ucsf.edu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
champagne.ucsf.edu
airflow.champagne.ucsf.edu
prod.champagne.ucsf.edu
uat.champagne.ucsf.edu
airflow.champagne.ucsf.edu
prod.champagne.ucsf.edu
uat.champagne.ucsf.edu
Other certificates including the domain name ucsf.edu
(limited to 100 certificates)
www.suzeelee.ucsf.edu
sni.cloudflaressl.com
*.ucsf.edu
lecturepilot.ucsf.edu
barabanlab.ucsf.edu
sni.cloudflaressl.com
wiki.docking.org
5682617542246400-fe1.pantheonsite.io
alertus.ucsf.edu
ucdc.edu
akamai-san50.exacttarget.com
5720929187397632-fe3.pantheonsite.io
sni.cloudflaressl.com
us.prod.campusgroups.com
sni.cloudflaressl.com
biochem.ucsf.edu
mdadmissions.ucsf.edu
image.serviciokia.com.ec
portfolio.ucsf.edu
5673309542809600-fe1.pantheonsite.io
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.suzeelee.ucsf.edu
modbase.compbio.ucsf.edu
awardverification.ucsf.edu
sni.cloudflaressl.com
uplantest.ucsf.edu
5673309542809600-fe1.pantheonsite.io
menus.library.ucsf.edu
5673309542809600-fe1.pantheonsite.io
test.eis.uw.edu
incapsula.com
image.serviciokia.com.ec
nsmaclfw01.mac-internal.ucsf.edu
sni.cloudflaressl.com
gartnerdata.ucsf.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
5682617542246400-fe1.pantheonsite.io
neuroscape.ucsf.edu
scalefunder.net
gmail.ucsf.edu
iris-pa-dev.ucsf.edu
shiehlab.ucsf.edu
sni.cloudflaressl.com
vx105.ucsf.edu
5673309542809600-fe1.pantheonsite.io
view.our.ucsf.edu
5684453372329984-fe2.pantheonsite.io
jdgmail.ucsf.edu
us.prod.campusgroups.com
bionano.ucsf.edu
hivinsite.ucsf.edu
weinbergerlab.ucsf.edu
sni.cloudflaressl.com
suzeelee.ucsf.edu
prospector.ucsf.edu
remote.ucsf.edu
opengut.ucsf.edu
humangenetics.ucsf.edu
na132-2.cdn.salesforce-communities.com
precisionneuro-radiology.ucsf.edu
5632490240737280-fe4.pantheonsite.io
transcare.ucsf.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
moodle.ucsf.edu
dermpath.ucsf.edu
sni.cloudflaressl.com
clinicaltrials.ucsf.edu
sni.cloudflaressl.com
cwms-admin.infra.ucsf.edu
dermpath.ucsf.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
champagne.ucsf.edu
mydocs.ucsf.edu
sni.cloudflaressl.com
www.dermpath.ucsf.edu
sni.cloudflaressl.com
fredchanglab.ucsf.edu
sni.cloudflaressl.com
weinbergerlab.ucsf.edu
tls.automattic.com
sni.cloudflaressl.com
dermatopathology.ucsf.edu
parngti.radiology.ucsf.edu
5706316634914816-fe1.pantheonsite.io
dermatology.ucsf.edu
makeagift.ucsf.edu
prevention.ucsf.edu
sni.cloudflaressl.com
wiki.docking.org
sni.cloudflaressl.com
sni.cloudflaressl.com
wiki.wynton.ucsf.edu
rtemis.mac-internal.ucsf.edu
5682617542246400-fe1.pantheonsite.io
sni.cloudflaressl.com
sni.cloudflaressl.com
*.ucsf.edu
lecturepilot.ucsf.edu
barabanlab.ucsf.edu
sni.cloudflaressl.com
wiki.docking.org
5682617542246400-fe1.pantheonsite.io
alertus.ucsf.edu
ucdc.edu
akamai-san50.exacttarget.com
5720929187397632-fe3.pantheonsite.io
sni.cloudflaressl.com
us.prod.campusgroups.com
sni.cloudflaressl.com
biochem.ucsf.edu
mdadmissions.ucsf.edu
image.serviciokia.com.ec
portfolio.ucsf.edu
5673309542809600-fe1.pantheonsite.io
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.suzeelee.ucsf.edu
modbase.compbio.ucsf.edu
awardverification.ucsf.edu
sni.cloudflaressl.com
uplantest.ucsf.edu
5673309542809600-fe1.pantheonsite.io
menus.library.ucsf.edu
5673309542809600-fe1.pantheonsite.io
test.eis.uw.edu
incapsula.com
image.serviciokia.com.ec
nsmaclfw01.mac-internal.ucsf.edu
sni.cloudflaressl.com
gartnerdata.ucsf.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
5682617542246400-fe1.pantheonsite.io
neuroscape.ucsf.edu
scalefunder.net
gmail.ucsf.edu
iris-pa-dev.ucsf.edu
shiehlab.ucsf.edu
sni.cloudflaressl.com
vx105.ucsf.edu
5673309542809600-fe1.pantheonsite.io
view.our.ucsf.edu
5684453372329984-fe2.pantheonsite.io
jdgmail.ucsf.edu
us.prod.campusgroups.com
bionano.ucsf.edu
hivinsite.ucsf.edu
weinbergerlab.ucsf.edu
sni.cloudflaressl.com
suzeelee.ucsf.edu
prospector.ucsf.edu
remote.ucsf.edu
opengut.ucsf.edu
humangenetics.ucsf.edu
na132-2.cdn.salesforce-communities.com
precisionneuro-radiology.ucsf.edu
5632490240737280-fe4.pantheonsite.io
transcare.ucsf.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
moodle.ucsf.edu
dermpath.ucsf.edu
sni.cloudflaressl.com
clinicaltrials.ucsf.edu
sni.cloudflaressl.com
cwms-admin.infra.ucsf.edu
dermpath.ucsf.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
champagne.ucsf.edu
mydocs.ucsf.edu
sni.cloudflaressl.com
www.dermpath.ucsf.edu
sni.cloudflaressl.com
fredchanglab.ucsf.edu
sni.cloudflaressl.com
weinbergerlab.ucsf.edu
tls.automattic.com
sni.cloudflaressl.com
dermatopathology.ucsf.edu
parngti.radiology.ucsf.edu
5706316634914816-fe1.pantheonsite.io
dermatology.ucsf.edu
makeagift.ucsf.edu
prevention.ucsf.edu
sni.cloudflaressl.com
wiki.docking.org
sni.cloudflaressl.com
sni.cloudflaressl.com
wiki.wynton.ucsf.edu
rtemis.mac-internal.ucsf.edu
5682617542246400-fe1.pantheonsite.io
sni.cloudflaressl.com
Certificate
The complete raw certificate details for champagne.ucsf.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGnDCCBYSgAwIBAgIRAOYenfPcre1fT3aLMhwJsnYwDQYJKoZIhvcNAQELBQAw djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMjIxMjIxMDAwMDAwWhcNMjQwMTIx MjM1OTU5WjBxMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEwMC4G A1UEChMnVW5pdmVyc2l0eSBvZiBDYWxpZm9ybmlhLCBTYW4gRnJhbmNpc2NvMRsw GQYDVQQDExJjaGFtcGFnbmUudWNzZi5lZHUwggIiMA0GCSqGSIb3DQEBAQUAA4IC DwAwggIKAoICAQDgWlMg/mB05+Kgw0xW7AI5hz4nwBo1FjyWYrWmzVBdzA3mmUf+ b0fiI9FqDiHRyVgLXkQAeaqjyg0YMx9MjEQ9yLbuM6q+p2j9iPBxdc2ziGmDXxMX K7Evc+2lIuoYhMySKsfHkqUTs7hjQ70oJF1bBBGGYy3hbNd9DayBAhT3sX9v3drX Ux5NfQUU3TTCOj8aMavFb9IfMf1n0Z2ngWs2rLuMnHMsod8cWoMg/Q4sj0+eRfhs yrRMCdEMFgagEUMqIGytYL34BzIoxstRKUQ1K7S7B3twtpKSkYAtVtkCULD+037q r6gcOcEK4pGTKK/SK9BKt1N2Pm0X+hj0w9rxpyVAQSjw3NN7M62d1oVZuS7J2UOV QmQtSqyhHyX/S6dFV9XWEdSzlvO02HWx/i8rCnl1ETHbcAuaS22L2a/vozUPx1VM 5HR+tKdUiBQvMJJhg2fDJffFB0MfuJ8U3rqpyKlUgfZbi3QB6rTwS6kC1gTwKZ0O 7ITYwygd4ul686n3MNrV61izjq5thgkHpTFGFxF3iBR+n/bre9xgSrRDV2wGU7v0 6aqYMIl3rzPjCkDI0eUNS2Fv/8mZCTwA9pfGF0mrFwRCDNWCFlC3hmrcYh++9yrt MbU+347E6Wn3gZFpfgtn3pqQPzM97Y5QU3owIYGnp66M84iuAALr7yX84QIDAQAB o4ICKDCCAiQwHwYDVR0jBBgwFoAUHgWjd49sluJbh0umtIascQAM5zgwHQYDVR0O BBYEFMIAEs3soYkYzAHBIE3juLnnRW4hMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMB Af8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBnBgNVHSAEYDBe MFIGDCsGAQQBriMBBAMBATBCMEAGCCsGAQUFBwIBFjRodHRwczovL3d3dy5pbmNv bW1vbi5vcmcvY2VydC9yZXBvc2l0b3J5L2Nwc19zc2wucGRmMAgGBmeBDAECAjBE BgNVHR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLmluY29tbW9uLXJzYS5vcmcvSW5D b21tb25SU0FTZXJ2ZXJDQS5jcmwwdQYIKwYBBQUHAQEEaTBnMD4GCCsGAQUFBzAC hjJodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vSW5Db21tb25SU0FTZXJ2ZXJDQV8y LmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTATBgor BgEEAdZ5AgQDAQH/BAIFADBqBgNVHREEYzBhghJjaGFtcGFnbmUudWNzZi5lZHWC GmFpcmZsb3cuY2hhbXBhZ25lLnVjc2YuZWR1ghdwcm9kLmNoYW1wYWduZS51Y3Nm LmVkdYIWdWF0LmNoYW1wYWduZS51Y3NmLmVkdTANBgkqhkiG9w0BAQsFAAOCAQEA eDjq8wISJtOtxrNcHIBn7ZdWwgOOUWifJfXElJhhC/UY08lVp2hXc+uq6c1QSwQv 9FeiepOR10U/xzOirPaYCag0Hg6FtgKGfHx14RAQf+6RY83bAFja8lN878UpE7tG 26LL69awp2Hnzw29iXzyiSv37RVW/CGvnMkROQaazLjQeOFIyW0pY812OFusHHii bso1ecGXYENAw13TwgBH7RloJVxQb+au3cJSd1qJT9MXTXDXKsTg2RBE7b3WDLoS 3AjLqmX5Gkd/ekuK277n1XRwRE8qAadZJKhBWf7pXoTufGvYmWpRu9suWtH3aCxr gMQbUjirTy0OqC+LJB/nWg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4FpTIP5gdOfioMNMVuwC OYc+J8AaNRY8lmK1ps1QXcwN5plH/m9H4iPRag4h0clYC15EAHmqo8oNGDMfTIxE Pci27jOqvqdo/YjwcXXNs4hpg18TFyuxL3PtpSLqGITMkirHx5KlE7O4Y0O9KCRd WwQRhmMt4WzXfQ2sgQIU97F/b93a11MeTX0FFN00wjo/GjGrxW/SHzH9Z9Gdp4Fr Nqy7jJxzLKHfHFqDIP0OLI9PnkX4bMq0TAnRDBYGoBFDKiBsrWC9+AcyKMbLUSlE NSu0uwd7cLaSkpGALVbZAlCw/tN+6q+oHDnBCuKRkyiv0ivQSrdTdj5tF/oY9MPa 8aclQEEo8NzTezOtndaFWbkuydlDlUJkLUqsoR8l/0unRVfV1hHUs5bztNh1sf4v Kwp5dREx23ALmktti9mv76M1D8dVTOR0frSnVIgULzCSYYNnwyX3xQdDH7ifFN66 qcipVIH2W4t0Aeq08EupAtYE8CmdDuyE2MMoHeLpevOp9zDa1etYs46ubYYJB6Ux RhcRd4gUfp/263vcYEq0Q1dsBlO79OmqmDCJd68z4wpAyNHlDUthb//JmQk8APaX xhdJqxcEQgzVghZQt4Zq3GIfvvcq7TG1Pt+OxOlp94GRaX4LZ96akD8zPe2OUFN6 MCGBp6eujPOIrgAC6+8l/OECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 305881411595334927161734423802569929334 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of California, San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'champagne.ucsf.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 915279695912646774017269610813511255392383929976865647987498020357425439039032706096467878942074077731047818482579402096662510943610830526625422945975016510998813222834438598528104593283478095061358097608803877415665929460045591115804545240072638477183902809499967476085310288812229024909218562225518513878461131594919102286574884146860385228198551528888663593729960384680586054574636245308682645271234847517262433537075852516326398696467867317140548358562498260748149359736481660596434590115923272767921363979955204272520235011546875369081396002163094861061866464470033790860039999659468595302449255545642586228586676504791003726136401541862861802825940564058563547901987791454758055253208084426817898895167515023389860249221615206645576363875708754413252135228296611540758930865625515934367398102834763614700255579184444762896418581187739119921750102434241904312353584400742275606850294315787520093173163042927505827784371496930680561273710573835592753694803966087833977980775181675867118161279210331812596385379394306646017695216406597021209321999434285458677064167775040788142909506966232636317385387906993680983716957134062175353600595888482112381681476555169346388474629623272332804898767934615597369408654398070165810008423649 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c20012cdeca18918cc01c1204de3b8b9e7456e21 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champagne.ucsf.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airflow.champagne.ucsf.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.champagne.ucsf.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.champagne.ucsf.edu' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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