datavizdev.stanfordchildrens.org

- Stanford University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 71:29:85:f4:65:d7:ec:aa:4a:72:3c:4a:cb:06:60:41 was issued on by Internet2.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stanford University

Organization: Stanford University
Organization unit: Stanford Children's Hospital
State / Province: California
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 71:29:85:f4:65:d7:ec:aa:4a:72:3c:4a:cb:06:60:41
Serial Number (int): 150418364618563383386538569349063925825
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 10:dd:80:43:df:42:92:06:52:23:f6:3a:fd:f5:1b:df:6a:3a:0e:0b
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): c8:e1:58:76:20:c7:67:f5:58:04:fd:a0:92:0e:23:8e:b6:c1:32:f8
Fingerprint (sha256): 04:30:7c:f2:d4:53:45:84:4e:62:26:4b:73:fb:4c:06:d6:2a:44:da:01:44:4e:50:3d:50:5f:40:f4:04:5d:6b

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate datavizdev.stanfordchildrens.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for datavizdev.stanfordchildrens.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

datavizdev.stanfordchildrens.org
psrttabapp01.lpch.net
psrttabapp02.lpch.net
psrttabapp03.lpch.net

Other certificates including the domain name stanfordchildrens.org

(limited to 100 certificates)
cert00026-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
cert00026-azurecdn.akamaized.net
changepassword.stanfordchildrens.org
cert00050-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00026-azurecdn.akamaized.net
cert00026-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00026-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
datavizdev.stanfordchildrens.org
cert00026-azurecdn.akamaized.net
newhospital.stanfordchildrens.org
myphone.lpch.org
treat-epilepsy.stanfordchildrens.org
insight.lpch.org
cert00078-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
guestwifi2.stanfordchildrens.org
cert00078-azurecdn.akamaized.net
cert00050-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
formsqa.stanfordchildrens.org
bmswebctrl.stanfordchildrens.org
cert00026-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
careers.stanfordchildrens.org
cds.stanfordchildrens.org
formsstaging.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
epicprodce.stanfordchildrens.org
treat-chiari-malformation.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
lifeimage.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
hylandprd.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
cert00026-azurecdn.akamaized.net
stanfordchildrens.org
bmswebctrl.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
wech-cuclpcup01.lpch.org
treat.stanfordchildrens.org
mychart.stanfordchildrens.org
www.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
pam.stanfordchildrens.org
treat-chiari-malformation.stanfordchildrens.org
cert00078-azurecdn.akamaized.net
secure5s.scene7.com
admin.stanfordchildrens.org
vandam.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
cert00026-azurecdn.akamaized.net
sch.beam3.monigle.net
secure5s.scene7.com
cert00057-azurecdn.akamaized.net
cert00050-azurecdn.akamaized.net
pssesqa.stanfordchildrens.org
cert00050-azurecdn.akamaized.net
voalte.stanfordchildrens.org
cert00078-azurecdn.akamaized.net
accesscontrol.stanfordchildrens.org
treat-concussion.stanfordchildrens.org
MDPortal.stanfordchildrens.org
qa.stanfordchildrens.org
vandam.stanfordchildrens.org
MDPortal.stanfordchildrens.org
treat-concussion.stanfordchildrens.org
securemail.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
healthier.stanfordchildrens.org
apps.stanfordchildrens.org
passwordmanager.stanfordchildrens.org
forms.stanfordchildrens.org
cert00026-azurecdn.akamaized.net
sch.beam3.monigle.net
cert00057-azurecdn.akamaized.net
cas.stanfordchildrens.org
awsegprodo365.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
hugstst01.stanfordchildrens.org
brand.stanfordchildrens.org
cert00057-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
trackcore.stanfordchildrens.org
cert00026-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
healthier.stanfordchildrens.org

Certificate

The complete raw certificate details for datavizdev.stanfordchildrens.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIMTCCBxmgAwIBAgIQcSmF9GXX7KpKcjxKywZgQTANBgkqhkiG9w0BAQsFADB2
MQswCQYDVQQGEwJVUzELMAkGA1UECBMCTUkxEjAQBgNVBAcTCUFubiBBcmJvcjES
MBAGA1UEChMJSW50ZXJuZXQyMREwDwYDVQQLEwhJbkNvbW1vbjEfMB0GA1UEAxMW
SW5Db21tb24gUlNBIFNlcnZlciBDQTAeFw0yMjAzMzAwMDAwMDBaFw0yMzAzMzAy
MzU5NTlaMIGSMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEcMBoG
A1UEChMTU3RhbmZvcmQgVW5pdmVyc2l0eTElMCMGA1UECxMcU3RhbmZvcmQgQ2hp
bGRyZW4ncyBIb3NwaXRhbDEpMCcGA1UEAxMgZGF0YXZpemRldi5zdGFuZm9yZGNo
aWxkcmVucy5vcmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCuNdqG
vxTEMRbGrM/0OGaQIU/tDGhJc7ZrZwwuXy3NIxtwmJh3v+kK0C9syxg6JLeLIPEB
hR81pNAJwncny+pOukiDpXa/5QwV/9gLZDJHV0VNLmMZ0/XaLFZK2ES6xGnwTN51
YjQt51a95n6SHzWfwXK4h5IHG37B9RzF1IDF+NhseEshROCLA5CJ/L2N9UYmYe4f
dPo11/RrGvo5sUaW0F1p2Pn7CC5cEEzzSO7LK79mQFBPnfRrW9z3ev4YUpiP8omx
fU11VngKJdM0eIRHCk4d/QKd7IhEY3/U/NvwGXb1PUZam4h1nwCX1dOFOYllENYD
n+XKeqqUzAOoExiAcbRXwzqxE4Vzxf0frJ/Qc16GMf6pD+iegojGkhcMPvaFfbib
Aqmf8tRiAr/uhl9Ie0ATpZSvkanv+5wuDUcQa+61zx3PCzsWml5djlJIqSH3W3T3
QCS5kCLBJwj/SAAGj7xKbVCBbm4jLdt/MfBVkCYaDuKklHoh0o9IQ7A5Rn3f0vXw
S5kv8Qx73uBMpnQDqJeFwWVbTVRSTqZeDZa58LoE5D83gBmZkvkKZJ3Dxsh5jM1Q
ApbBkMRTrhk5w3Iq8SMuU/BTvuXGThNNGRyXnuejbmFNNXR+/ha03nDrlUnXIYOP
5vltahwfru/BKguJIHa0kFWP9F0J1dfvPoBMjQIDAQABo4IDnDCCA5gwHwYDVR0j
BBgwFoAUHgWjd49sluJbh0umtIascQAM5zgwHQYDVR0OBBYEFBDdgEPfQpIGUiP2
Ov31G99qOg4LMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjBnBgNVHSAEYDBeMFIGDCsGAQQBriMBBAMB
ATBCMEAGCCsGAQUFBwIBFjRodHRwczovL3d3dy5pbmNvbW1vbi5vcmcvY2VydC9y
ZXBvc2l0b3J5L2Nwc19zc2wucGRmMAgGBmeBDAECAjBEBgNVHR8EPTA7MDmgN6A1
hjNodHRwOi8vY3JsLmluY29tbW9uLXJzYS5vcmcvSW5Db21tb25SU0FTZXJ2ZXJD
QS5jcmwwdQYIKwYBBQUHAQEEaTBnMD4GCCsGAQUFBzAChjJodHRwOi8vY3J0LnVz
ZXJ0cnVzdC5jb20vSW5Db21tb25SU0FTZXJ2ZXJDQV8yLmNydDAlBggrBgEFBQcw
AYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTCCAX8GCisGAQQB1nkCBAIEggFv
BIIBawFpAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAF/2/EV
HQAABAMARzBFAiAq3WI8mMlm6bsiwBn+1tuDsFDkiUyYrs+9tWvxsFvkuwIhAOrE
XMpkBRdWIkWrBitCwXnXwSeG7Wy6Q7rQdIJzeoCmAHcAejKMVNi3LbYg6jjgUh7p
hBZwMhOFTTvSK8E6V6NS61IAAAF/2/EVHwAABAMASDBGAiEAzGpymEfcYDgAcNWy
kdH59+4+6lTSX3uUvTxG1XU2+a4CIQCbnANSA/mpl+8edp9Tc9gCsgN/bBHEdgoF
hdQefb3sPQB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABf9vx
FP4AAAQDAEcwRQIgHfhh7eIOOqk714ca9fnsiImW176HiDy6hSg1CEIqyBwCIQD0
+H6LcZR8QXalfkkXGE4uWZXjdADUcF9YNthFrpCW0TBwBgNVHREEaTBngiBkYXRh
dml6ZGV2LnN0YW5mb3JkY2hpbGRyZW5zLm9yZ4IVcHNydHRhYmFwcDAxLmxwY2gu
bmV0ghVwc3J0dGFiYXBwMDIubHBjaC5uZXSCFXBzcnR0YWJhcHAwMy5scGNoLm5l
dDANBgkqhkiG9w0BAQsFAAOCAQEAK0K677k2kHO1Du7V8fZdJWvG4fBA+NeoRw22
UC0+nVsQ3+66LhCUUMexYXU9dYWVrdEkcLkXgynV1dNc/8V4a4Pq5G7A8dhqjJtD
d5/Wxy7zTDKjdX9FqQn5gJvj67pwiTZuhfth9EiJUyoMq5FdWDl8guFkv4ANMq0G
Q6FUxiugjYFDuYTBmEXT6OupUtTDy4SGsLDE4WRuTNaDVW5ODg/uFY28UqT6C76N
19iSZcHz5Jv5X+Mh8J3ANx6YTjjZmnie5Hfy5jCIXyhoTh2bHFAo2M9eBv2kZSKQ
UTzqI3YwtuSmRh/53+Jx9PKfhE1a9Vy/ZyIsl5WufVwoEDGuqQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 150418364618563383386538569349063925825
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stanford University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stanford Children's Hospital'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'datavizdev.stanfordchildrens.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 710716285005535340206281379794481032895056064906554646047807454946591696971276579330153747246486052190673650288503386800283314634040936275089194206153031329386886217814477042576440940169782896056901965931505656603764673646237036892663586435682157667316020546333687533739466251629337287219568062884890492714091468372857079724062748955207761959843588113922860569528148727566583118867757613735236997540180748250560876287362558413462418378463142598469714912464128276197035148758355268610066839343273656307054779634721516398779616257351762503795688723713206393124597795702278080019255982236733196148455123543108907675752395728329674835165559228128490627310692049382762378459715851262023654289460263626710673644208545487496818942577100183331200744760282159460360377379517580359956152097071588319060824937626944987631107846727210443762953893963732334734346988976242941292905195740965420838622418011470519833413059683229473662988450053955286325297457362444130240959067201936315988167363774580043180599665049814556856930253305636380802823253567000748781110924705094246876422958901979176926038040397140611327972732571912987130520324736304843487168125890959851658234917826021394771896853272807609087347528586797613003907329328680554989642337421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10dd8043df4292065223f63afdf51bdf6a3a0e0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datavizdev.stanfordchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psrttabapp01.lpch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psrttabapp02.lpch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psrttabapp03.lpch.net'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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