banneradmintc.apps.uillinois.edu

- University of Illinois -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number af:64:f6:a6:fc:91:38:6c:8e:db:e9:4c:b5:2a:d1:cc was issued on by Internet2.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Illinois

Organization: University of Illinois
Organization unit: University Administration
Address: 901 West Illinois Street
Postal code: 61801
State / Province: IL
Locality: Urbana
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): af:64:f6:a6:fc:91:38:6c:8e:db:e9:4c:b5:2a:d1:cc
Serial Number (int): 233139131651017019373712173832786858444
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 0e:0c:cb:62:83:c2:96:03:c2:5f:0f:8b:2e:65:61:00:cc:bc:fe:88
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 16:a9:03:e9:a8:a5:58:f2:09:48:76:34:39:33:9f:85:8e:23:9b:66
Fingerprint (sha256): 03:59:30:6d:71:b7:84:0f:26:56:b5:cc:c3:7a:49:a8:e6:88:f8:40:3e:d9:db:0d:81:7a:36:8a:c6:6b:1a:d4

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate banneradmintc.apps.uillinois.edu

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for banneradmintc.apps.uillinois.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

banneradmintc.apps.uillinois.edu
chixeprod1a.admin.uillinois.edu
chixeprod1b.admin.uillinois.edu
chixeprod1c.admin.uillinois.edu
chixeprod1d.admin.uillinois.edu

Other certificates including the domain name uillinois.edu

(limited to 100 certificates)
atlasweb16dev.ad.uillinois.edu
nessie.uihr.uillinois.edu
my.engr.illinois.edu
my.uillinois.edu
uifcrmdb03.ad.uillinois.edu
calendars.illinois.edu
dev.auth.uillinois.edu
calendars.illinois.edu
chipbsql2.admin.uillinois.edu
appserv5.admin.uillinois.edu
illinois.edu
liblapfac04.ad.uillinois.edu
tracker-test.admin.uillinois.edu
chiedwebwin1.ad.uillinois.edu
appserv7.admin.uillinois.edu
banneradmintc.apps.uillinois.edu
chiconf1.admin.uillinois.edu
uajobs.hr.uillinois.edu
urbskypeccapp.ad.uillinois.edu
helpdesk.ahs.illinois.edu
vetmedtest1.admin.uillinois.edu
web.uillinois.edu
www.wcms.uillinois.edu
www.wcms.uillinois.edu
lib-sccm-pdp02.library.illinois.edu
techreadyprod.web.illinois.edu
lists.illinois.edu
chioid.admin.uillinois.edu
www2.wcms.uillinois.edu
blogs.illinois.edu
illinois.edu
faa-www-rori.ad.uillinois.edu
illinois.edu
uicplacement.uillinois.edu
rdpgateway.illinois.edu
exchange.uillinois.edu
hrnetptest.uihr.uillinois.edu
remote.uillinois.edu
pcard.apps.uillinois.edu
tracker.admin.uillinois.edu
hrnet.uihr.uillinois.edu
online.uif.uillinois.edu
darsweb.admin.uillinois.edu
wac.atlas.illinois.edu
ui2web4.apps.uillinois.edu
webprod.admin.uillinois.edu
ossswebcs.admin.uillinois.edu
online.uif.uillinois.edu
blogs.illinois.edu
www.ipay.uillinois.edu
chipbweb1.ad.uillinois.edu
project.ui-integrate.uillinois.edu
training.obfs.uillinois.edu
hipaa.uillinois.edu
my.engr.illinois.edu
urbbannerofmws.admin.uillinois.edu
xml.admin.uillinois.edu
urbskypeccapp.ad.uillinois.edu
inquiry.global.uillinois.edu
auth.uillinois.edu
myuicdev.admin.uillinois.edu
chiisgsapp2.ad.uillinois.edu
illinois.edu
support.uillinois.edu
obfsappsprod2.ui.uillinois.edu
www.icard.uillinois.edu
appsobfs-cf11prod.obfs.uillinois.edu
atlas-cplan03.atlas.illinois.edu
www.isws.illinois.edu
www-s.usp.uillinois.edu
ss.global.uillinois.edu
mobiusview.apps.uillinois.edu
www2.wcms.uillinois.edu
ui2web1.apps.uillinois.edu
sts.addev.uillinois.edu
isgs-zinc.isgs.illinois.edu
uifcrmdb03.ad.uillinois.edu
appserv4.admin.uillinois.edu
remote.uillinois.edu
eddie.ds.uillinois.edu
ilearn.uif.uillinois.edu
newhire.uihr.uillinois.edu
banneradmintc.apps.uillinois.edu
data.isgs.illinois.edu
illinois.edu
uifcrmdb01.ad.uillinois.edu
appserv5.admin.uillinois.edu
lyncfepool3.lync.uillinois.edu
login.uillinois.edu
blogs.illinois.edu
bxsprod.apps.uillinois.edu
lyncpchatpool.lync.uillinois.edu
mosssecure.obfs.uillinois.edu
chiconf1.admin.uillinois.edu
learn.obfs.uillinois.edu
smart.physics.illinois.edu
www.ds.uillinois.edu
liblaplbo02.ad.uillinois.edu
www.uif.uillinois.edu
urbasdev6.admin.uillinois.edu

Certificate

The complete raw certificate details for banneradmintc.apps.uillinois.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHsDCCBpigAwIBAgIRAK9k9qb8kThsjtvpTLUq0cwwDQYJKoZIhvcNAQELBQAw
djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix
EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT
FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMTgxMDE0MDAwMDAwWhcNMjAxMDEz
MjM1OTU5WjCBzjELMAkGA1UEBhMCVVMxDjAMBgNVBBETBTYxODAxMQswCQYDVQQI
EwJJTDEPMA0GA1UEBxMGVXJiYW5hMSEwHwYDVQQJExg5MDEgV2VzdCBJbGxpbm9p
cyBTdHJlZXQxHzAdBgNVBAoTFlVuaXZlcnNpdHkgb2YgSWxsaW5vaXMxIjAgBgNV
BAsTGVVuaXZlcnNpdHkgQWRtaW5pc3RyYXRpb24xKTAnBgNVBAMTIGJhbm5lcmFk
bWludGMuYXBwcy51aWxsaW5vaXMuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsOlAxpYF41La3/msUxU27X2gMJkAlNhZPv6M2Dmi4fcxZGl/QUyh
anFWuR4yo4dcL9n23akd/6dOOVJj4NSzx7DW/ZuspjUQRAQxicwmSz5xdwdUjzDs
rGyFMMUpTZGbcRmgRE9PiGCFo+YMi+/ZXhW8L2d+UchJ1ij9OVg4tJc/Urkogb7Q
Ui7jKrPg+deyNos0SWvwbcenVdBciIiFZg1UyVs17sFmaCmsr0sQBX6OwnGCUKHh
043UDhnzBNd9nlDkIf0h4gpRmrEUcH2DQF1qoq43y1HQQ8h1x24Ed4jS7dactQQM
RV/W4tLvwaDLPLwbV8b1nZQ6pUty91JW1QIDAQABo4ID3jCCA9owHwYDVR0jBBgw
FoAUHgWjd49sluJbh0umtIascQAM5zgwHQYDVR0OBBYEFA4My2KDwpYDwl8Piy5l
YQDMvP6IMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjBnBgNVHSAEYDBeMFIGDCsGAQQBriMBBAMBATBC
MEAGCCsGAQUFBwIBFjRodHRwczovL3d3dy5pbmNvbW1vbi5vcmcvY2VydC9yZXBv
c2l0b3J5L2Nwc19zc2wucGRmMAgGBmeBDAECAjBEBgNVHR8EPTA7MDmgN6A1hjNo
dHRwOi8vY3JsLmluY29tbW9uLXJzYS5vcmcvSW5Db21tb25SU0FTZXJ2ZXJDQS5j
cmwwdQYIKwYBBQUHAQEEaTBnMD4GCCsGAQUFBzAChjJodHRwOi8vY3J0LnVzZXJ0
cnVzdC5jb20vSW5Db21tb25SU0FTZXJ2ZXJDQV8yLmNydDAlBggrBgEFBQcwAYYZ
aHR0cDovL29jc3AudXNlcnRydXN0LmNvbTCBsQYDVR0RBIGpMIGmgiBiYW5uZXJh
ZG1pbnRjLmFwcHMudWlsbGlub2lzLmVkdYIfY2hpeGVwcm9kMWEuYWRtaW4udWls
bGlub2lzLmVkdYIfY2hpeGVwcm9kMWIuYWRtaW4udWlsbGlub2lzLmVkdYIfY2hp
eGVwcm9kMWMuYWRtaW4udWlsbGlub2lzLmVkdYIfY2hpeGVwcm9kMWQuYWRtaW4u
dWlsbGlub2lzLmVkdTCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcA7ku9t3XO
YLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFmcu6AzwAABAMASDBGAiEA50cP
fenBdGZpfA0/R1dMSmRg/cfPlzyfTsqDrVY0cs4CIQCxmRVqDooXm/DzNg2jhmJN
x2jVYBBrU8A7tE05wsAB1AB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaB
cUVYAAABZnLugSQAAAQDAEcwRQIge/76ltKttlmRHM8qRYyIRdFxai5MnvNVe+wy
KC6dc10CIQCm9bCjAU10n8hF9xRVeWo9Y5bUsh0t2QNqpIs3t2gPZQB2AFWB1MIW
kDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABZnLugV4AAAQDAEcwRQIhAJ4B
XT4gKBY8CL38Ley5EJlAKiikaclMX7C//3g8OLBPAiBtqlBSp9NEdpj9vxcg1V6I
vcXce0oy0/pMTIgoUE37DDANBgkqhkiG9w0BAQsFAAOCAQEAFct58t69eMwmm2+G
PCo7XDlXKHJpVSzpH8AD40uFhgiwKHVIVDNXQYtswtzDIHQ9aMlbvkLJwh3dxekr
USEjjhoJghDijoOxA4ZnyLZtL2j1UCYQlKDQndw8jo3W0L2TQFK6LgYP3dS8dVoI
iez12yRpM7hWNLDdtQzQYIh002HY7W44FFuu8ts4FeElfMOrTmal/8YroArQMbtc
x1DiCFUrakU9ILGBpeMeiYbSW/HFwXbzPNYGzrVVLRm5zeaGl1L/XHCt04tuqpRm
7HSym9i4miVp3K7TnkAHyVImsuE4IaVczWDVssDugviKYIugVSaKZrUrk37o2aKV
W0WHKw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOlAxpYF41La3/msUxU2
7X2gMJkAlNhZPv6M2Dmi4fcxZGl/QUyhanFWuR4yo4dcL9n23akd/6dOOVJj4NSz
x7DW/ZuspjUQRAQxicwmSz5xdwdUjzDsrGyFMMUpTZGbcRmgRE9PiGCFo+YMi+/Z
XhW8L2d+UchJ1ij9OVg4tJc/Urkogb7QUi7jKrPg+deyNos0SWvwbcenVdBciIiF
Zg1UyVs17sFmaCmsr0sQBX6OwnGCUKHh043UDhnzBNd9nlDkIf0h4gpRmrEUcH2D
QF1qoq43y1HQQ8h1x24Ed4jS7dactQQMRV/W4tLvwaDLPLwbV8b1nZQ6pUty91JW
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 233139131651017019373712173832786858444
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '61801'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Urbana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '901 West Illinois Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'banneradmintc.apps.uillinois.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22332963030113859376817563097488633891391657706867442444511054364936140854376534078961950078532236656526614810530552388477286590122923647150512577766153080358257012890785168572790651252637096484450998220129390880504238459272470359820874575999376683609262848056519246853686687920037371186406560686015634909205809147890637423114805170537801314055981088585274397817731132502677968473096759571348741142804811103372952552387777304371329219824860154021974657620247284430124973963420027523054909535818494853717360122659976774096636352390934468624487814723565855162335261389956370295294721657726455795314477500108200343656149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e0ccb6283c29603c25f0f8b2e656100ccbcfe88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banneradmintc.apps.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chixeprod1a.admin.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chixeprod1b.admin.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chixeprod1c.admin.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chixeprod1d.admin.uillinois.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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