remote.ca.uky.edu

- University of Kentucky -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number a5:a7:6f:53:71:a1:7b:f8:e6:3d:b7:1c:8a:e6:27:00 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Kentucky

Organization: University of Kentucky
Organization unit: Agricultural Communications Services
Address: 410 Administration Drive
Postal code: 40506
State / Province: KY
Locality: Lexington
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a5:a7:6f:53:71:a1:7b:f8:e6:3d:b7:1c:8a:e6:27:00
Serial Number (int): 220191990838456957871680325487155357440
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: af:b2:c1:e7:8c:89:a8:76:53:50:db:5a:fd:3a:01:ee:47:fc:64:ae
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): a6:1d:c6:93:94:7f:4d:fa:96:b9:28:0d:05:70:cf:08:99:2a:a5:cd
Fingerprint (sha256): 04:9c:87:a4:64:eb:dd:84:a8:2b:08:34:30:81:f5:90:fe:9c:06:39:87:c4:61:60:27:15:b9:18:4b:f7:8e:41

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate remote.ca.uky.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for remote.ca.uky.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

remote.ca.uky.edu

Other certificates including the domain name uky.edu

(limited to 100 certificates)
lsv.uky.edu
remote.ca.uky.edu
www.hosp.uky.edu
download.uky.edu
imaps.netlab.uky.edu
5636470266134528-fe2.pantheonsite.io
bbtools.ad.uky.edu
landing.socialworkonline.uky.edu
5700866052980736-fe2.pantheonsite.io
5636470266134528-fe2.pantheonsite.io
scdp.uky.edu
adfs.uky.edu
alumniweb.uky.edu
ukam.uky.edu
lyncpool.ad.uky.edu
cpr.as.uky.edu
kers.ca.uky.edu
uconnectlabs.com
plyits2016svr01.mc.uky.edu
rhelp.ad.uky.edu
5636470266134528-fe2.pantheonsite.io
www.bae.uky.edu
pks2-cas2.net.uky.edu
5649684605435904-fe1.pantheonsite.io
securedns.planmygift.org
timeoffcalendar.uky.edu
ukhcsftpt.mc.uky.edu
tableaupublic.uky.edu
ww-a12.as.uky.edu
uk-pa7080-edge1-pri-mgmt.net.uky.edu
www.etrax.uky.edu
drive.uky.edu
prdukheiixdsrp04.mc.uky.edu
ctrp-dev.uky.edu
spencer.ca.uky.edu
exploreuk.uky.edu
www.hcii.cs.cmu.edu
sfbextweb.uky.edu
ibi-test.uky.edu
ukam.uky.edu
grackle.ecc.engr.uky.edu
its.net.uky.edu
horm.as.uky.edu
*.coe.uky.edu
tstukheiixdsrp02.mc.uky.edu
icmac.rch.uky.edu
mfp.uky.edu
5636470266134528-fe2.pantheonsite.io
pa7080-primary-mgmt.net.uky.edu
5700866052980736-fe2.pantheonsite.io
boonecenter.uky.edu
ra.uky.edu
5700866052980736-fe2.pantheonsite.io
prdltchvc01.mc.uky.edu
www2.ca.uky.edu
plannedgiving.zaytuna.edu
support.ccs.uky.edu
clarity.mc.uky.edu
castle.uky.edu
warehouse.ca.uky.edu
labrea.ecc.engr.uky.edu
fayette.ca.uky.edu
securedns.planmygift.org
*.law.uky.edu
ibi.uky.edu
uconnectlabs.com
sims.uky.edu
ukhcvendorreg.mc.uky.edu
5636470266134528-fe2.pantheonsite.io
athena.uky.edu
ehrci.mc.uky.edu
uconnectlabs.com
prdsprspctu01.mc.uky.edu
plyits2016svr01.mc.uky.edu
boonecenter.uky.edu
comm.uky.edu
*.mc.uky.edu
beckdt.engr.uky.edu
remote.ca.uky.edu
5636470266134528-fe2.pantheonsite.io
libraries.uky.edu
landing.socialworkonline.uky.edu
myukmpx.uky.edu
5700866052980736-fe2.pantheonsite.io
devedwcognapp01.mc.uky.edu
sudepresearch.uky.edu
i2b2ccts.uky.edu
finearts.uky.edu
sweb.uky.edu
prdcteweb01.mc.uky.edu
www.lgcr.com
www.nai.arizona.edu
prdltchvcpsc01.mc.uky.edu
pimser.coe.uky.edu
5636470266134528-fe2.pantheonsite.io
ukitspks2cmx01.net.uky.edu
scriptprorefills.mc.uky.edu
ukhr.uky.edu
5722903798611968-fe3.pantheonsite.io
ehs.uky.edu

Certificate

The complete raw certificate details for remote.ca.uky.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 220191990838456957871680325487155357440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '40506'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lexington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '410 Administration Drive'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Kentucky'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Agricultural Communications Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'remote.ca.uky.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 848768935006600267400019756458297450597054420601650481150741504617906570418722436761523658725624611515108665517031567601085312660500306235526123190254354938588446627458797627504964486993033440897890055086350112955586515600162098664589336415265989348031162362801666316018763805499062105815948926079898657416194995936406552702554985722037633636732166863966208697675032989324729311377229988122403265720273020742265126539969090234727540500832431423724517841438032274068408333799493544636906149095691907169810461888407202016657593232912688828931572611193168124531978604771360648953320495211403344419256420265184726419845737191619403716099466054644798995170636544649424655105626673168562614477712816089625869196519019276667414305544366366263490965892759563115245539429578765647331975170721454364955363944668053504884966739515466576308895192735400731899394359251589628056061180674073775776062327171738268892048647644030627230258657351174897224031572883227099319847253226318597226770499780212211758663569093116639953471038223917937679899794312637050286417242800583210110378767087616099927593439600419911254764137402467677339189293263146552316318827990601827127770590841639553988726203568305696397959843866625150006834172027545025499278127889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afb2c1e78c89a8765350db5afd3a01ee47fc64ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.ca.uky.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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