exauth16s01.albion.edu

- Albion College -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 28:86:63:fe:17:2b:ea:25:d2:fe:39:9a:39:59:dc:14 was issued on by Internet2.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Albion College

Organization: Albion College
Organization unit: Information Technology
Address: 611 E. Porter Street
Postal code: 49224
State / Province: Michigan
Locality: Albion
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 28:86:63:fe:17:2b:ea:25:d2:fe:39:9a:39:59:dc:14
Serial Number (int): 53866915700115586724513629043385031700
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 66:ef:7f:c2:be:24:87:ab:e8:83:76:49:6f:89:40:7a:41:a2:5a:ff
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 01:6e:88:a0:04:70:c9:15:87:10:20:96:6c:07:3e:1a:1e:03:8a:f1
Fingerprint (sha256): 03:52:de:60:13:69:eb:fb:97:d7:f2:57:20:63:de:ba:bd:1a:0f:e3:be:66:7f:66:79:dc:31:e9:78:24:2e:55

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate exauth16s01.albion.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exauth16s01.albion.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exauth16s01.albion.edu
ldaps.albion.edu
sso.albion.edu

Other certificates including the domain name albion.edu

(limited to 100 certificates)
5698362649083904-fe2.pantheonsite.io
banking-business-review.com
banking-business-review.com
cluster2.technolutions.net
banking-business-review.com
exauth16s01.albion.edu
acis.albion.edu
palo5.albion.edu
161511-web1.vilcek.org
advance.albion.edu
discuss.albion.edu
courses.albion.edu
www.nai.arizona.edu
rt.albion.edu
palo5.albion.edu
hvgw1.albion.edu
cluster2.technolutions.net
albion.edu
library.albion.edu
apply.albion.edu
cluster2.technolutions.net
www.datahero.com
apply.albion.edu
cluster2.technolutions.net
208.lsnc.net
advance.albion.edu
courses.albion.edu
alumnimail.albion.edu
libguides.albion.edu
vpn1.albion.edu
apply.albion.edu
banking-business-review.com
secure2.albion.edu
dwapptest01.albion.edu
ssl713957.cloudflaressl.com
www.humanities.sas.upenn.edu
albion.edu
banking-business-review.com
160.167.tmcapital.com
courses.albion.edu
161511-web1.vilcek.org
ssl713957.cloudflaressl.com
discuss.albion.edu
161511-web1.vilcek.org
advance.albion.edu
ssl713956.cloudflaressl.com
160.167.tmcapital.com
alumnimail.albion.edu
alumnimail.albion.edu
161511-web1.vilcek.org
brassunion.com
acadmintest.cuofco.org
208.lsnc.net
discuss.albion.edu
cluster2.technolutions.net
161511-web1.vilcek.org
apply.albion.edu
cluster2.technolutions.net
160.167.tmcapital.com
acadmintest.cuofco.org
secure.advance.albion.edu
teach.albion.edu
commerce.imodulescontent.com
discuss.albion.edu
afscme57.org
160.167.tmcapital.com
ucomm-sites-dev.stanford.edu
teach.albion.edu
208.lsnc.net
banking-business-review.com
161511-web1.vilcek.org
dwapptest01.albion.edu
cluster2.technolutions.net
alldata.com
www.albion.edu
160.167.tmcapital.com
banking-business-review.com
beistest01.albion.edu
publicarchive.albion.edu
cluster2.technolutions.net
apply.albion.edu
alldata.com
RAD12R2E01.albion.edu
libguides.albion.edu
www.giving.dartmouth.edu
cluster2.technolutions.net
library.albion.edu
illiad.albion.edu
cluster2.technolutions.net
acadmintest.cuofco.org
www2.albion.edu
banking-business-review.com
banking-business-review.com
5698362649083904-fe2.pantheonsite.io
161511-web1.vilcek.org
advance.albion.edu
ssl713958.cloudflaressl.com
2.www.upenn.edu
5740240702537728-fe2.pantheonsite.io
secure.advance.albion.edu

Certificate

The complete raw certificate details for exauth16s01.albion.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHLTCCBhWgAwIBAgIQKIZj/hcr6iXS/jmaOVncFDANBgkqhkiG9w0BAQsFADB2
MQswCQYDVQQGEwJVUzELMAkGA1UECBMCTUkxEjAQBgNVBAcTCUFubiBBcmJvcjES
MBAGA1UEChMJSW50ZXJuZXQyMREwDwYDVQQLEwhJbkNvbW1vbjEfMB0GA1UEAxMW
SW5Db21tb24gUlNBIFNlcnZlciBDQTAeFw0xODA1MTUwMDAwMDBaFw0yMDA1MTQy
MzU5NTlaMIG7MQswCQYDVQQGEwJVUzEOMAwGA1UEERMFNDkyMjQxETAPBgNVBAgT
CE1pY2hpZ2FuMQ8wDQYDVQQHEwZBbGJpb24xHTAbBgNVBAkTFDYxMSBFLiBQb3J0
ZXIgU3RyZWV0MRcwFQYDVQQKEw5BbGJpb24gQ29sbGVnZTEfMB0GA1UECxMWSW5m
b3JtYXRpb24gVGVjaG5vbG9neTEfMB0GA1UEAxMWZXhhdXRoMTZzMDEuYWxiaW9u
LmVkdTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMgJEgsJ02L3Djy5
DMBibW4qwJFBtUwnAV8rGySKgV0UvWqh6ROTkG7VAX0slVlTgiJNal9r7UGt5xPO
EepTw19IVMNl5kgUT5ENto1XrK36UC8gRztXxnDuuWGE8G6qeI0hIm36faPdGflJ
P4xT2/t+H7cbpjtSx404hhk5kxq/8UDbsUweXa4MbN6/R6mn1nGDUfZewb/2wd2h
Oa/6lhdfoxQfqOH9ONizGpVIBD03Lgv+WkVyQX2Vq1FtFpp+DILAibeslhMiE7KN
g1BPpKAgUyYemJNxuX6L56lmtbz3C4O6BW17C8yIiMq3rlMKbGc2Ep+eKd2aEqGR
t78zcH0CAwEAAaOCA28wggNrMB8GA1UdIwQYMBaAFB4Fo3ePbJbiW4dLprSGrHEA
DOc4MB0GA1UdDgQWBBRm73/CviSHq+iDdklviUB6QaJa/zAOBgNVHQ8BAf8EBAMC
BaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
ZwYDVR0gBGAwXjBSBgwrBgEEAa4jAQQDAQEwQjBABggrBgEFBQcCARY0aHR0cHM6
Ly93d3cuaW5jb21tb24ub3JnL2NlcnQvcmVwb3NpdG9yeS9jcHNfc3NsLnBkZjAI
BgZngQwBAgIwRAYDVR0fBD0wOzA5oDegNYYzaHR0cDovL2NybC5pbmNvbW1vbi1y
c2Eub3JnL0luQ29tbW9uUlNBU2VydmVyQ0EuY3JsMHUGCCsGAQUFBwEBBGkwZzA+
BggrBgEFBQcwAoYyaHR0cDovL2NydC51c2VydHJ1c3QuY29tL0luQ29tbW9uUlNB
U2VydmVyQ0FfMi5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVzZXJ0cnVz
dC5jb20wQwYDVR0RBDwwOoIWZXhhdXRoMTZzMDEuYWxiaW9uLmVkdYIQbGRhcHMu
YWxiaW9uLmVkdYIOc3NvLmFsYmlvbi5lZHUwggF/BgorBgEEAdZ5AgQCBIIBbwSC
AWsBaQB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABY2WR2HsA
AAQDAEcwRQIgVixKrydWZaR69R/v1wzMjKmt6k2iSMzUz4ujottkX60CIQCS+SlM
XM9JyCMzpYvUKwGZ82+GqtP6gW2Zw+wbApkF+AB2AF6nc/nfVsDntTZIfdBJ4DJ6
kZoMhKESEoQYdZaBcUVYAAABY2WR2+MAAAQDAEcwRQIhAMsGg9S46VM5qOoks7KD
DOZBktbC5WfcWoumVAuN9j4vAiAJ4kiLs1roq+z+jdG1TSH9nEn4GHYYtuSI7+s5
VHa4sQB3AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABY2WR2KoA
AAQDAEgwRgIhAPQxDcMv7+hFpX4q8UfflmBkIU19c9Hj5WMoRXUoy4ssAiEAt1Iz
Rm/r41TYm+XyXDg491GFyC2usB3l/3i2Z/ZnmZ4wDQYJKoZIhvcNAQELBQADggEB
AJRr9y4LURvqZCfbcbgXFSi7B5Ctv04U6ndvcjnOs9gmV7j3G81PE4K4M9lVMmtD
AIKL3gvOCR8Xc/j5EdryzJYhJ872BMBkBTdyzJur4Zx+4ZWS0WFxqxcmjbBfVTkw
qFhxAXX8jCiDkMlS7n3Z+PwUh5+8eRraUBmNhdCh3o1x/GtpNhrkRyzEkW/srdJs
cxRaWe+p3CqiWGfX9JzNOGfn8ZB6cRYR0jZVJHXyR7Y3ffeuRCasHTcvHBcizrk5
jjwEw/eL9I9ssb/QNoYsi3eXgw0vxJ3KIvGyQeYMfHHFT029f13afVUdjhCdhRo9
6KARvv0Dfv0W0l7jmwZPtJw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAkSCwnTYvcOPLkMwGJt
birAkUG1TCcBXysbJIqBXRS9aqHpE5OQbtUBfSyVWVOCIk1qX2vtQa3nE84R6lPD
X0hUw2XmSBRPkQ22jVesrfpQLyBHO1fGcO65YYTwbqp4jSEibfp9o90Z+Uk/jFPb
+34ftxumO1LHjTiGGTmTGr/xQNuxTB5drgxs3r9HqafWcYNR9l7Bv/bB3aE5r/qW
F1+jFB+o4f042LMalUgEPTcuC/5aRXJBfZWrUW0Wmn4MgsCJt6yWEyITso2DUE+k
oCBTJh6Yk3G5fovnqWa1vPcLg7oFbXsLzIiIyreuUwpsZzYSn54p3ZoSoZG3vzNw
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 53866915700115586724513629043385031700
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '49224'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Albion'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '611 E. Porter Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Albion College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exauth16s01.albion.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25252133814063776800149287442616832783632433745636175607499480884566039763152175570126228154444701833498740788534156702370141332239215512776669568874415563251708470135280046178102272021521638289189527528317214141196149506086879157585995245140750365846933638472890933033476356625223506169759385395695308313701022119777872460837789733978577651101479319075741562046950241755236650960698406232165706496411343526040630710021774111668078945930190608998867556939519153768801498813577534956012325308147762446781607416468716601892574371824182901655886259735806766751980341070504206018240675017253073387329603606883472661246077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66ef7fc2be2487abe88376496f89407a41a25aff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exauth16s01.albion.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldaps.albion.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.albion.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001636591d87b00000403004730450220562c4aaf275665a47af51fefd70ccc8ca9adea4da248ccd4cf8ba3a2db645fad02210092f9294c5ccf49c82333a58bd42b0199f36f86aad3fa816d99c3ec1b029905f80076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001636591dbe30000040300473045022100cb0683d4b8e95339a8ea24b3b2830ce64192d6c2e567dc5a8ba6540b8df63e2f022009e2488bb35ae8abecfe8dd1b54d21fd9c49f8187618b6e488efeb395476b8b10077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001636591d8aa0000040300483046022100f4310dc32fefe845a57e2af147df966064214d7d73d1e3e56328457528cb8b2c022100b75233466febe354d89be5f25c3838f75185c82daeb01de5ff78b667f667999e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00946bf72e0b511bea6427db71b8171528bb0790adbf4e14ea776f7239ceb3d82657b8f71bcd4f1382b833d955326b4300828bde0bce091f1773f8f911daf2cc962127cef604c064053772cc9babe19c7ee19592d16171ab17268db05f553930a858710175fc8c288390c952ee7dd9f8fc14879fbc791ada50198d85d0a1de8d71fc6b69361ae4472cc4916fecadd26c73145a59efa9dc2aa25867d7f49ccd3867e7f1907a711611d236552475f247b6377df7ae4426ac1d372f1c1722ceb9398e3c04c3f78bf48f6cb1bfd036862c8b7797830d2fc49dca22f1b241e60c7c71c54f4dbd7f5dda7d551d8e109d851a3de8a011befd037efd16d25ee39b064fb49c