owa.illinoisstate.edu

- Illinois State University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number f6:38:2e:32:cf:ae:0f:02:03:10:88:22:e2:89:5e:b7 was issued on by Internet2.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Illinois State University

Organization: Illinois State University
State / Province: Illinois
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f6:38:2e:32:cf:ae:0f:02:03:10:88:22:e2:89:5e:b7
Serial Number (int): 327281792603690969769833557833835699895
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 92:cd:8f:83:49:74:63:ec:46:33:44:77:fd:fe:9f:0b:2f:9e:df:0f
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): ae:05:c4:4d:ab:2e:5e:af:56:2e:be:de:f2:c7:c1:0e:4a:81:3d:8d
Fingerprint (sha256): 04:90:10:4e:44:e6:5e:88:d6:1b:88:c5:e8:01:58:b7:75:dc:79:ea:9d:62:7e:57:e1:e3:b4:62:ae:85:41:23

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate owa.illinoisstate.edu

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owa.illinoisstate.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

owa.illinoisstate.edu
atexchange01a.ad.ilstu.edu
atexchange01b.ad.ilstu.edu
autodiscover.ad.ilstu.edu
autodiscover.exchange.illinoisstate.edu
autodiscover.exchange.ilstu.edu
autodiscover.illinoisstate.edu
autodiscover.ilstu.edu
exchange.illinoisstate.edu
exchange.ilstu.edu
exchangevip.illinoisstate.edu
exchangevip.ilstu.edu
hybridexchange.illinoisstate.edu
hybridexchange.ilstu.edu
isucashub01.ad.ilstu.edu
isucashub02.ad.ilstu.edu
isucashub03.ad.ilstu.edu
outlookanywhere.illinoisstate.edu
outlookanywhere.ilstu.edu
owa.ilstu.edu

Other certificates including the domain name illinoisstate.edu

(limited to 100 certificates)
sfunder11cert.net
meteo.avocat.fr
meteo.avocat.fr
about.illinoisstate.edu
sfunder29cert.net
events.conferences.illinoisstate.edu
cs.illinoisstate.edu
alerts.illinoisstate.edu
owa.illinoisstate.edu
alerts.illinoisstate.edu
sfunder11cert.net
*.illinoisstate.edu
parkingeb.illinoisstate.edu
alerts.illinoisstate.edu
bits.illinoisstate.edu
sharepoint-test.illinoisstate.edu
help.illinoisstate.edu
csib.illinoisstate.edu
meteo.avocat.fr
sts.illinoisstate.edu
meteo.avocat.fr
meteo.avocat.fr
alerts.illinoisstate.edu
meteo.avocat.fr
vidette.veridiansoftware.com
reggienet.illinoisstate.edu
ilstu.edu
meteo.avocat.fr
stories.illinoisstate.edu
internal-sisdev.illinoisstate.edu
events.conferences.illinoisstate.edu
apps.illinoisstate.edu
meteo.avocat.fr
cs-dev.illinoisstate.edu
alerts.illinoisstate.edu
owa.illinoisstate.edu
alerts.illinoisstate.edu
sfunder11cert.net
alerts.illinoisstate.edu
internal-ipeopledev.illinoisstate.edu
sfunder1cert.net
atexpc.ilstu.edu
sfunder15cert.net
scalefundercert.net
meteo.avocat.fr
about.illinoisstate.edu
tmc.library.illinoisstate.edu
alerts.illinoisstate.edu
hcm.illinoisstate.edu
meteo.avocat.fr
cstest-internal-ren.illinoisstate.edu
icsps.illinoisstate.edu
ir.library.illinoisstate.edu
sfunder11cert.net
csdev-ren.illinoisstate.edu
owa-test.illinoisstate.edu
account-test.illinoisstate.edu
meteo.avocat.fr
uhigh.illinoisstate.edu
meteo.avocat.fr
scalefundercert.net
cs.illinoisstate.edu
meteo.avocat.fr
sfunder1cert.net
uhigh.illinoisstate.edu
labstats.ilstu.edu
internal-sis.illinoisstate.edu
meteo.avocat.fr
csdev.illinoisstate.edu
ilstu.edu
alerts.illinoisstate.edu
csdev-internal-ren.illinoisstate.edu
*.sharepoint.illinoisstate.edu
docs.ilstu.edu
cstest-internal.illinoisstate.edu
meteo.avocat.fr
internal-ipeopledev.illinoisstate.edu
alerts.illinoisstate.edu
csdemo-ren.illinoisstate.edu
alerts.illinoisstate.edu
csdev-ren.illinoisstate.edu
external-domains.ilstu.edu
status-test.illinoisstate.edu
ir.library.illinoisstate.edu
alerts.illinoisstate.edu
cstest.illinoisstate.edu
atinsightcon01-t.at.illinoisstate.edu
sfunder6cert.net
parkingeb.illinoisstate.edu
meteo.avocat.fr
sts.illinoisstate.edu
hcmdev.illinoisstate.edu
givingday.marshall.edu
hcm-prod-internal.illinoisstate.edu
reggienet.illinoisstate.edu
alerts.illinoisstate.edu
sfunder1cert.net
ipeopledev.illinoisstate.edu
connect.illinoisstate.edu
ir.library.illinoisstate.edu

Certificate

The complete raw certificate details for owa.illinoisstate.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMiutnNXTk0kXUcGhX7L
2QWNxdyOKR5BJYd/8raEK6/CNmcexuP8SO8Py/OxaOUywnaynD8D/IgsphASI5Zr
C2esqqVAdJ4p7GDlEfCun9htVfZQUVqEOMzaUMa27vXSVlzjbkFBMeTajvqU0zY5
pjgTxhRrAk5K1cCzMQJjOHjK//4MM8ILKuttT1WAQ2M7DkHxglKlXlsvvecl7q2e
2Lkl3TIgX48mblvHeamh1w2/8yP42oiTgv53z+2pYd/vgTgz6huKOZ3pjxA2rnTQ
kcqN6su2cIGtJtjJY8jfKTk1MzGpllnGdsNTKNmh5qbaKzSN/KQud/dWSRs11Nbt
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327281792603690969769833557833835699895
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'owa.illinoisstate.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24841667988329273678873375994758787073388696785671071571869171215510814424263884094745918613494536242809606340198337945508309835646150103186532651211207616693579202197824567500401259696750532782501185632105280456702796077718685500326188524608393426884506166074244080663250927486303316415309074602896951939857458818601769200201759411929064783028091704373687072039666026962071204353429076287877424925513608995471897746658026576072467819091412365514429501644366435877640389834640618463044867460608153861311876949221766352547028474300876888855133575605527294252139629193112472482364526628016259429998723153747531307347439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92cd8f83497463ec46334477fdfe9f0b2f9edf0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (557 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.illinoisstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atexchange01a.ad.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atexchange01b.ad.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ad.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.exchange.illinoisstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.exchange.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.illinoisstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.illinoisstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchangevip.illinoisstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchangevip.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybridexchange.illinoisstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybridexchange.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isucashub01.ad.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isucashub02.ad.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isucashub03.ad.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlookanywhere.illinoisstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlookanywhere.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.ilstu.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00477dea0cc99c403382f5fd753489185c0a591c1d213fbfac631290906763f44f9a70986a596b14ed2409402287a705ba673b818f6c2ed64c16b3c4b743d685911e2c06cd91ca2468a49b0c2d4e399824ad5ba1a3ad0b9f855d52b87bd7fe5b65b591a896c97a76d18a13a4de67651d0351e85005aad50ebfe7217453090a9c9ef0c95dc188db9f8c5548b4d06770b8516409edad6be7e5bacc35cc8624c78e134fa03a54ff0666482d6a3a15fb6c2783f63340264e59f525220611510e644d8bbd3798f56667fef3c7724a8bfd8473d46386ae930ae0e6cede3e396e01d8966be68aa4b61adad5906a5ec9ccf874954158c05fc2afff32eccc1cac9b521960d1