palo-test.vpn.lsu.edu

- Louisiana State University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number db:5e:46:ad:86:87:0d:42:8c:fb:92:ca:37:b8:8f:81 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Louisiana State University

Organization: Louisiana State University
Organization unit: LSU A & M
State / Province: Louisiana
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): db:5e:46:ad:86:87:0d:42:8c:fb:92:ca:37:b8:8f:81
Serial Number (int): 291590440498377479467792167946639937409
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e8:0e:92:65:fb:c9:94:9b:ca:82:e5:7f:59:5a:d3:cf:9b:1e:84:08
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): ab:0c:02:9b:dc:57:b4:1c:ed:52:d2:fd:70:18:c9:43:5e:7c:2a:61
Fingerprint (sha256): 03:ff:5c:a0:87:a1:be:97:bf:f3:90:b0:81:6f:be:b1:86:a5:03:e3:f5:d4:73:e4:d7:5e:4c:f5:4f:d1:f8:b5

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate palo-test.vpn.lsu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for palo-test.vpn.lsu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

palo-test.vpn.lsu.edu

Other certificates including the domain name lsu.edu

(limited to 100 certificates)
paws.lsu.edu
test-myproxy01.apps.lsu.edu
itservice.lsu.edu
moodlerooms.com
ussweb012.lsu.edu
us.prod.campusgroups.com
www.lsu.edu
libweb.lsu.edu
listservnew.lsu.edu
lalinks.lsu.edu
stellar.cct.lsu.edu
cobbler.hpc.lsu.edu
ngcl-4052-ups-1.lsu.edu
www.socialwork.lsu.edu
guides.lib.lsu.edu
www.ltrc.lsu.edu
rhhms002.lsu.edu
accounts.hpc.lsu.edu
subrosa.esl.lsu.edu
rhmac001.lsu.edu
acsa.lsu.edu
mail.agcenter.lsu.edu
phall.vpn.ncbrt.lsu.edu
ath-helpdesk.lsu.edu
appj07.apps.lsu.edu
training.lsu.edu
skype.ncbrt.lsu.edu
nas-csc.lsu.edu
sncsrtweb.sncsrt.lsu.edu
app.lbrn.lsu.edu
www.cct.lsu.edu
applygrad.lsu.edu
ol.berklee.edu
rh-testwiki.lsu.edu
moodleftp.lsu.edu
digitalcommons.lsu.edu
places.lsu.edu
admissions.lsu.edu
registration.apps.lsu.edu
us.prod.campusgroups.com
phall.vpn.ncbrt.lsu.edu
pollux.ncbrt.lsu.edu
class.bus.lsu.edu
saspr01.lsu.edu
development.moodlerooms.com
development.moodlerooms.com
hydra.cct.lsu.edu
it.design.lsu.edu
card.apps.lsu.edu
appl008.lsu.edu
www.bands.lsu.edu
ngcl-1079-ups-1.lsu.edu
appl030.lsu.edu
podcast.cct.lsu.edu
testsciquest.lsu.edu
uiswcmsweb.prod.lsu.edu
*.ezproxy.law.lsu.edu
mediasite.outreach.lsu.edu
timeclock.lsu.edu
acsa.lsu.edu
newservicerequest.lsu.edu
palo-test.vpn.lsu.edu
cbr.lsu.edu
vm-apps.ofs.lsu.edu
appl003.lsu.edu
web.offcampuspartners.com
urecportal.lsu.edu
appl020tm.lsu.edu
www.ece.lsu.edu
cas.sso.paws.lsu.edu
moss.outreach.lsu.edu
lbrn.lsu.edu
mediasite.outreach.lsu.edu
test-myproxy01.apps.lsu.edu
maps.ga.lsu.edu
clbd.cobre.lsu.edu
us.prod.campusgroups.com
uss-tut.lsu.edu
www.cae.lsu.edu
web.apps.lsu.edu
rhmax.lsu.edu
development.moodlerooms.com
vcs.lsuagcenter.net
mapp02.lsu.edu
answers.outreach.lsu.edu
dsl.lsu.edu
ol.berklee.edu
uni-wiki.lsu.edu
digitalcommons.lsu.edu
geauxgive.lsu.edu
hearne.phys.lsu.edu
development.moodlerooms.com
us.prod.campusgroups.com
laddl-lims.lsu.edu
pollux.ncbrt.lsu.edu
etd.lsu.edu
splunk.its.lsu.edu
lawadfs.law.lsu.edu
chat.ncbrt.lsu.edu
test003.lsu.edu

Certificate

The complete raw certificate details for palo-test.vpn.lsu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgIRANteRq2Ghw1CjPuSyje4j4EwDQYJKoZIhvcNAQELBQAw
djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix
EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT
FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMjExMjA3MDAwMDAwWhcNMjMwMTA3
MjM1OTU5WjB6MQswCQYDVQQGEwJVUzESMBAGA1UECBMJTG91aXNpYW5hMSMwIQYD
VQQKExpMb3Vpc2lhbmEgU3RhdGUgVW5pdmVyc2l0eTESMBAGA1UECwwJTFNVIEEg
JiBNMR4wHAYDVQQDExVwYWxvLXRlc3QudnBuLmxzdS5lZHUwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDYBTfTHdE2zuo08023+Z9y8vtcpLGHRKFPzu+o
BKTr44YFH2YJrN4Mqz9vhWKt4LP69TrGR/SP9Btv5v5DvYKnP+xUeL0WsTFKi2G/
rmdmMb+y28Iw2OPnD75O0DD20jioS7yw5IauV1F5yro+QNMk1E28cdYhJAFdu/Ya
MnOLrwb+d3ZvA1G6hh/ZgTcpvVDmsg0CscqxjsHDweV4D4SQXYymHKEfCipGTKqq
xhuS9TtYrlnjzqFxns8uNgeWBX6VihGCIF3pF/aNramk1/I5CUunFUbeaRDZlyk2
lM4HEP25q+euh7AdOdU8B8Rf3uZ9swfuE80pmw72g48CgnuVAgMBAAGjggHeMIIB
2jAfBgNVHSMEGDAWgBQeBaN3j2yW4luHS6a0hqxxAAznODAdBgNVHQ4EFgQU6A6S
ZfvJlJvKguV/WVrTz5sehAgwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGcGA1UdIARgMF4wUgYMKwYB
BAGuIwEEAwEBMEIwQAYIKwYBBQUHAgEWNGh0dHBzOi8vd3d3LmluY29tbW9uLm9y
Zy9jZXJ0L3JlcG9zaXRvcnkvY3BzX3NzbC5wZGYwCAYGZ4EMAQICMEQGA1UdHwQ9
MDswOaA3oDWGM2h0dHA6Ly9jcmwuaW5jb21tb24tcnNhLm9yZy9JbkNvbW1vblJT
QVNlcnZlckNBLmNybDB1BggrBgEFBQcBAQRpMGcwPgYIKwYBBQUHMAKGMmh0dHA6
Ly9jcnQudXNlcnRydXN0LmNvbS9JbkNvbW1vblJTQVNlcnZlckNBXzIuY3J0MCUG
CCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMCAGA1UdEQQZMBeC
FXBhbG8tdGVzdC52cG4ubHN1LmVkdTATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkq
hkiG9w0BAQsFAAOCAQEANHSfYeTXPzXmccYoIAAV81ct+d6xDyG16OWrZyhYuOGB
a3KQPiHebOmDRxw1sbo5izqfgTF3HF6Z78cW/vf9Ap7FlgAb839Px2qaRq/Xr4uL
FFX9WgJvqIANHaZfRZES2AMZIF16egqbwZQNwObbbsTlaJki9JVT1xQmzK5A2JFJ
1xEcQYxeBsuMoy8EWjWzhxsyiqdTVH4P6pKPtK7oz2IljYBxXf+31VnGfFsAl2eE
+8vxpecM1kcvJv8/I5RybydwNmiej7dCIOTPWtdPtWP0FsqqjXWpdtQFVmAg+7RY
mFft2NwI5amcL4YbxfNspASbysIAk6bN07UfW/aCTQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AU30x3RNs7qNPNNt/mf
cvL7XKSxh0ShT87vqASk6+OGBR9mCazeDKs/b4VireCz+vU6xkf0j/Qbb+b+Q72C
pz/sVHi9FrExSothv65nZjG/stvCMNjj5w++TtAw9tI4qEu8sOSGrldRecq6PkDT
JNRNvHHWISQBXbv2GjJzi68G/nd2bwNRuoYf2YE3Kb1Q5rINArHKsY7Bw8HleA+E
kF2MphyhHwoqRkyqqsYbkvU7WK5Z486hcZ7PLjYHlgV+lYoRgiBd6Rf2ja2ppNfy
OQlLpxVG3mkQ2ZcpNpTOBxD9uavnroewHTnVPAfEX97mfbMH7hPNKZsO9oOPAoJ7
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291590440498377479467792167946639937409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Louisiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Louisiana State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LSU A & M'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'palo-test.vpn.lsu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27270046996486760617849395895985207809747545219323738499507385142965107735317913442157760503356708433778044094166850974228034218008177988744824528645380955200099821720078017489237831242753654946337878061232993175858741458624723041570887814848085100174817067918674121483405500820101504945952804168082320126979660484311183851040650188161619052446178265378962879075799589700242238982509867583687566087935332910864415028823495160689923747646384321429954032893427523280876447022879636608282614510820068117433111103766849681583720315277507917888084977333516882962695301759324974644209064344259032253162290890105724023765909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e80e9265fbc9949bca82e57f595ad3cf9b1e8408
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palo-test.vpn.lsu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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