www.cs.purdue.edu

- Purdue University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 56:9a:59:22:1e:9b:e9:17:67:56:37:c3:61:47:fd:9e was issued on by Internet2.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Purdue University

Organization: Purdue University
Organization unit: Computer Science
Address: 305 N. University Street
Postal code: 47907
State / Province: Indiana
Locality: West Lafayette
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 56:9a:59:22:1e:9b:e9:17:67:56:37:c3:61:47:fd:9e
Serial Number (int): 115115029191402413547968755357339614622
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 15:9b:4e:12:49:c4:f8:4d:ee:d9:7d:cd:30:ed:77:12:9a:58:04:9b
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 3a:93:d2:56:3d:4c:0c:28:69:f3:a5:36:72:7e:3e:ce:23:3e:b8:81
Fingerprint (sha256): 04:38:6c:83:56:c0:54:dc:53:32:b5:dc:b2:d9:b2:82:11:04:e2:54:4e:73:7f:e9:64:c5:e3:e4:2e:7d:55:8e

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate www.cs.purdue.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cs.purdue.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cs.purdue.edu
cs.purdue.edu

Other certificates including the domain name purdue.edu

(limited to 100 certificates)
dev.boilerpress.itap.purdue.edu
srv-fna.student-orgs.purdue.edu
frodo.lib.purdue.edu
dayofgiving.purdue.edu
icds28.cs.purdue.edu
buddy-boy1.ecn.purdue.edu
dev.www.purdue.edu
wqvwebasp02-05.www.purdue.edu
roger.ecn.purdue.edu
pc.cs.purdue.edu
webvpn.purdue.edu
itap-netedge-asa5555x-01.tcom.purdue.edu
givingisgorges.org
dev2.hort.purdue.edu
dev.wp.www.purdue.edu
freedom.cs.purdue.edu
wdvwebasp03-01.www.purdue.edu
cmsdev.pha.purdue.edu
www.math.purdue.edu
npdn-dev.ceris.purdue.edu
dns-vetting1l.map.fastly.net
amarillo.nserl.purdue.edu
author.www.purdue.edu
npdn-dev.ceris.purdue.edu
www.purdue.edu
bionum.cs.purdue.edu
webdav.bio.purdue.edu
5684961520648192-fe4.pantheonsite.io
wqvwebcfm02a.www.purdue.edu
sp-dev.itap.purdue.edu
one.purdue.edu
wqvwebasp03b.www.purdue.edu
5757715179634688-fe2.pantheonsite.io
dns-vetting1l.map.fastly.net
cluster2.technolutions.net
dev.www.purdue.edu
owl.english.purdue.edu
one.purdue.edu
aribaqa.itap.purdue.edu
blackmesa.cerias.purdue.edu
dayofgiving.purdue.edu
5684961520648192-fe4.pantheonsite.io
www.ag.purdue.edu
wdvwebpec02.www.purdue.edu
www.bio.purdue.edu
cancerresearch.purdue.edu
5767874312404992-fe2.pantheonsite.io
dev.boilerpress.itap.purdue.edu
givingisgorges.org
www.eaps.purdue.edu
wpvwebdls01-01.www.purdue.edu
lacuna.cla.purdue.edu
www.purdue.edu
www-old.pharmacy.purdue.edu
wdvwebinf03.www.purdue.edu
redirect.www.purdue.edu
dev.boilerpress.itap.purdue.edu
napis.ceris.purdue.edu
polytechnic.purdue.edu
wpvpfrmft01.itap.purdue.edu
Collegiatelink4.Campuslabs.com
dns-vetting1l.map.fastly.net
phishing.itap.purdue.edu
5684961520648192-fe4.pantheonsite.io
cancerresearch.purdue.edu
erp-reporting-sbx.itap.purdue.edu
deleuze.cla.purdue.edu
5750683647082496-fe3.pantheonsite.io
incapsula.com
assets.lib.purdue.edu
www-new.foodsci.purdue.edu
www-new.foodsci.purdue.edu
jafcidev.chem.purdue.edu
weldon.ecn.purdue.edu
wpvwebasp03-01.www.purdue.edu
cancerresearch.purdue.edu
saraswat.rcac.purdue.edu
bmew.ecn.purdue.edu
n002.offcampuspartners.com
www.cs.purdue.edu
n002.offcampuspartners.com
dev.wiki.itap.purdue.edu
*.math.purdue.edu
collections.lib.purdue.edu
sharepoint.purdue.edu
incapsula.com
givingisgorges.org
bejih.com
cos-7apollo.boilerad.purdue.edu
dev.wp.www.purdue.edu
exchange.purdue.edu
dat2-100-asa5506-01.tcom.purdue.edu
offcampushousing.fau.edu
givingisgorges.org
givingisgorges.org
dev.sharepoint.purdue.edu
www.itap.purdue.edu
webapps.krannert.purdue.edu
dns-vetting1l.map.fastly.net
wpvwebasp03b.www.purdue.edu

Certificate

The complete raw certificate details for www.cs.purdue.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UNPaLJ9Zsf/tT6hOPn6
GpJtpnMZLV3rRWjlPRYxqtT7/wzetVEQ5YajQg7bCdqXF3IaQKQtke2SIE1fNgqa
z9x5z6sVnlTIRhDBz3fphEot6wmoND9epthdx+yNs3DvHuoLLIAINsl2jPguhenT
EeYi/kWODBTJLOH+VBtI6Q95AV4Y9gAefgyb2jLW+EirOC4PTW6dfbnseGGxR3G0
nff4DaQUr/BRHZmF2Gb3GyhVFoq2g5a4RWkekE4QEbs5qYQPetLgmRe0CqxM8BnF
fN9v7WOBQhf2NxTtRxWiI40/8i0iP0rD1y/NcObzNKWDIb3R4IPZj14BctM3DDo8
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 115115029191402413547968755357339614622
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '47907'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Lafayette'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '305 N. University Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Purdue University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Computer Science'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cs.purdue.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28436810509773414786846731407225536392970575457629306166669501763171955506000156169706664090614643626771208810478659814685995192209914313963398259341497999748150405215201887399827056806502121258649023724128115248385059984884863462253072637903847766590378534166747297634965264322137622857890401507486440885896421767551788691553587040701493315499488717799770058289012004578440599937631707223007865480103531295311700147322764240125978446985498346119697883719405866880985022468160652865635736789692393705031890214734379411059979823349111188362102502621119493395916737427033507352554476955823664499898410526579318710746259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							159b4e1249c4f84deed97dcd30ed77129a58049b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cs.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.purdue.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005e05660c39f8ad289714cf5cbec7a0c00d21ce9a20a88c2a7cad95a9ca9d6e07fd3b92a2f7f19b6678f42a85c43be513e5af0bf77058b4b9ba40188d8a2bc2a04546f2d6822b35eada0287475305e8d99f57019cffdba428dee87052f15e8378bf7cb860a1403b16159eca0f4fd27ef18ea31ed6f9fe3760355313a8009c89b483c622dd507b6db9bc53fa47d1fa0d917572c61710fe1c1ce675918018b217cdb777d8429e3dc2f205ac85312b8a8b50ae83a48f40054447836dc7e74b370a635c24519bc7149ba7403bf1e3969013c86170f01ee04f95aa401b08434be1590e43fe2acb52a9f0fb511a82fca0002694c1bc1340bbfdff0a1247d0017273de51