registry-stg.cdlib.org

- Regents of the University of California -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number a8:cb:1e:f0:88:7c:9b:5a:9d:c4:10:49:44:85:ca:a9 was issued on by Internet2.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Regents of the University of California

Organization: Regents of the University of California
Organization unit: CDL
Address: 1111 Franklin Street
Postal code: 94607
State / Province: CA
Locality: Oakland
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a8:cb:1e:f0:88:7c:9b:5a:9d:c4:10:49:44:85:ca:a9
Serial Number (int): 224364967083436151405700201809376037545
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ad:02:96:a3:94:43:81:9c:4c:c5:26:53:03:ea:82:70:f1:cb:18:cd
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 4d:09:3a:60:b8:cc:a7:09:57:77:a9:79:25:ef:fc:90:2a:1b:a4:e5
Fingerprint (sha256): 04:ae:b7:92:e1:5b:97:12:c3:d3:bc:55:4a:bf:61:f1:24:ae:f3:46:de:fa:88:8e:49:80:19:db:c7:c7:92:ab

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate registry-stg.cdlib.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for registry-stg.cdlib.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

registry-stg.cdlib.org
dsc-registry-stg.cdlib.org
dsc-registry2-stg.cdlib.org
registry2-stg.cdlib.org

Other certificates including the domain name cdlib.org

(limited to 100 certificates)
pub-xtfweb2-prd.cdlib.org
uc3-mrtui03x2-prd.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
xtf.cdlib.org
datadryad.org
5758048710688768-fe3.pantheonsite.io
www.cdlib.org
5648554290839552-fe1.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
hg.cdlib.org
aspace.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
uc3-ingest03x2-prd.cdlib.org
registry-stg.cdlib.org
uc3-ingest01x2-stg.cdlib.org
5704837555552256-fe2.pantheonsite.io
hg.cdlib.org
5704837555552256-fe2.pantheonsite.io
registry-dev.cdlib.org
5758048710688768-fe3.pantheonsite.io
cdlib.org
5758048710688768-fe3.pantheonsite.io
registry.cdlib.org
5704837555552256-fe2.pantheonsite.io
nuxeo.cdlib.org
5648554290839552-fe1.pantheonsite.io
massdig.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
pub-xtfweb2-prd.cdlib.org
5758048710688768-fe3.pantheonsite.io
uc3-ingest01x2-prd.cdlib.org
5758048710688768-fe3.pantheonsite.io
analytics.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
cdl-aws-nagios.cdlib.org
5758048710688768-fe3.pantheonsite.io
help.oac.cdlib.org
datamirror.org
5758048710688768-fe3.pantheonsite.io
uc3-wasredirectx2-prd.cdlib.org
5653164804014080-fe1.pantheonsite.io
uc3-dryadsolr-stg.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
oac.cdlib.org
dash.cdlib.org
5758048710688768-fe3.pantheonsite.io
cdlib.org
fdus-31.freshdesk.com
help.oac.cdlib.org
5758048710688768-fe3.pantheonsite.io
ftps-stg.cdlib.org
5758048710688768-fe3.pantheonsite.io
5704837555552256-fe2.pantheonsite.io
agua-stage.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
d2d-pid2-prd.cdlib.org
redmine.cdlib.org
voro.cdlib.org
uc3-dryaduix2-stg-2c.cdlib.org
5758048710688768-fe3.pantheonsite.io
mylibrary.cdlib.org
5758048710688768-fe3.pantheonsite.io
5648554290839552-fe1.pantheonsite.io
5653164804014080-fe1.pantheonsite.io
5704837555552256-fe2.pantheonsite.io
oac.cdlib.org
libraries.universityofcalifornia.edu
melvyl.cdlib.org
uc3-ezid-ui-prd.cdlib.org
5653164804014080-fe1.pantheonsite.io
help.oac.cdlib.org
uc3-dryad-stg.cdlib.org
help.oac.cdlib.org
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
tls.automattic.com
5648554290839552-fe1.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
uc3-ingest02x2-stg.cdlib.org
5758048710688768-fe3.pantheonsite.io
uc3-dryaduix2-dev.cdlib.org
5648554290839552-fe1.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
help.oac.cdlib.org
5758048710688768-fe3.pantheonsite.io

Certificate

The complete raw certificate details for registry-stg.cdlib.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHXzCCBkegAwIBAgIRAKjLHvCIfJtancQQSUSFyqkwDQYJKoZIhvcNAQELBQAw
djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix
EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT
FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMTkwNjA3MDAwMDAwWhcNMjEwNjA2
MjM1OTU5WjCBvDELMAkGA1UEBhMCVVMxDjAMBgNVBBETBTk0NjA3MQswCQYDVQQI
EwJDQTEQMA4GA1UEBxMHT2FrbGFuZDEdMBsGA1UECRMUMTExMSBGcmFua2xpbiBT
dHJlZXQxMDAuBgNVBAoTJ1JlZ2VudHMgb2YgdGhlIFVuaXZlcnNpdHkgb2YgQ2Fs
aWZvcm5pYTEMMAoGA1UECxMDQ0RMMR8wHQYDVQQDExZyZWdpc3RyeS1zdGcuY2Rs
aWIub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLD/PIPyUyjD
5uOxhs6zPwumd6QPgh+cLMTDQmk9OlsCPxOTczZe+daA/h9/7SW/qCR0Vdc8CoiS
0txQ2jC6ZYrg70PT9lGBlW7nwdMol/HdSHunULh+g3pKmUReTTKCZ8XE/WxrbzyR
eBi1NR3U7tngj9u9L7CfhchcNHSN7WQiBTN3/wqH2E9+SCIA99A5to6W/vzLnGZL
l10OfV87icahPajMToUAwThFYeYyt13FUlKXbQo+99+ZVgd0VH+Hqi/mBmeFjxuL
eaojnSnZd4K22wxzm9t+Rv6pe7QtxsEpZuSRmRcXWqCebfLlhq9mgefmj1DRsyDU
oV4aI9tsAwIDAQABo4IDnzCCA5swHwYDVR0jBBgwFoAUHgWjd49sluJbh0umtIas
cQAM5zgwHQYDVR0OBBYEFK0ClqOUQ4GcTMUmUwPqgnDxyxjNMA4GA1UdDwEB/wQE
AwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjBnBgNVHSAEYDBeMFIGDCsGAQQBriMBBAMBATBCMEAGCCsGAQUFBwIBFjRodHRw
czovL3d3dy5pbmNvbW1vbi5vcmcvY2VydC9yZXBvc2l0b3J5L2Nwc19zc2wucGRm
MAgGBmeBDAECAjBEBgNVHR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLmluY29tbW9u
LXJzYS5vcmcvSW5Db21tb25SU0FTZXJ2ZXJDQS5jcmwwdQYIKwYBBQUHAQEEaTBn
MD4GCCsGAQUFBzAChjJodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vSW5Db21tb25S
U0FTZXJ2ZXJDQV8yLmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRy
dXN0LmNvbTBzBgNVHREEbDBqghZyZWdpc3RyeS1zdGcuY2RsaWIub3Jnghpkc2Mt
cmVnaXN0cnktc3RnLmNkbGliLm9yZ4IbZHNjLXJlZ2lzdHJ5Mi1zdGcuY2RsaWIu
b3JnghdyZWdpc3RyeTItc3RnLmNkbGliLm9yZzCCAX8GCisGAQQB1nkCBAIEggFv
BIIBawFpAHcAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFrMxvS
RQAABAMASDBGAiEA+RbWTK8vNmAFAUZh2RG4Q19eFSNRAUX5GPPiHG9YqHcCIQCn
ph6RnGFxN6QrMETAcf8YXzukLoJUNnZ6xJoZ+DvaMAB2AESUZS6w7s6vxEAH2Kj+
KMDa5oK+2MsxtT/TM5a1toGoAAABazMb0w8AAAQDAEcwRQIgYqKINhLLEO3zUM+o
C66z1mWPkPjSPyZHVv5FOUdV5D8CIQDU1uauQgrrFTzLeo6SHSOrbXZULv6TqMr4
RHj+isC2JwB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABazMb
0mUAAAQDAEcwRQIhAJ9V6bFFWew80e+Qt1aWo5ODIm6UgSgzXIt2Y1+BJ4oXAiBu
uHzKoyjRobLJ+oIZn5Y62dzfEUgtLgfb5++d6wiN+TANBgkqhkiG9w0BAQsFAAOC
AQEAZcJOcGeU/SJrA1CGQpbTHpklDKRXwIGlvZ/9Llqf4/bfOoHeYZBU7UHfVekw
GpC97kDl6Mii9P/XMfMZkeCNs6ggWLLq/CrVxhaACpd6lp/Qofpn5Z2c68kVhjH4
lIoHRxSDRZYrluXH+MeW2yVOC3qhUHTStgESaJphy9THjgDraiyMD1yjQGi67Syu
9G5f2bOJcs/E4nq8xq8wBuJtfABFLtK1xI2ZSI/Z4StiNCZZonN8KnhAdlyBL9QS
d082LZu4yFO0uydQuK3ufDWJ/FDblVjDRHt6OmRynOMqIbj1Pp7HB5o76/jfETXt
fVp2G9Ms446OFIwAABluhZSx9w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLD/PIPyUyjD5uOxhs6z
Pwumd6QPgh+cLMTDQmk9OlsCPxOTczZe+daA/h9/7SW/qCR0Vdc8CoiS0txQ2jC6
ZYrg70PT9lGBlW7nwdMol/HdSHunULh+g3pKmUReTTKCZ8XE/WxrbzyReBi1NR3U
7tngj9u9L7CfhchcNHSN7WQiBTN3/wqH2E9+SCIA99A5to6W/vzLnGZLl10OfV87
icahPajMToUAwThFYeYyt13FUlKXbQo+99+ZVgd0VH+Hqi/mBmeFjxuLeaojnSnZ
d4K22wxzm9t+Rv6pe7QtxsEpZuSRmRcXWqCebfLlhq9mgefmj1DRsyDUoV4aI9ts
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 224364967083436151405700201809376037545
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '94607'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oakland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1111 Franklin Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Regents of the University of California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CDL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'registry-stg.cdlib.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23820081815759845502556021172616167765137625077556371960093140811379213119598591737810324326908617568613360630658966549210137029971520181104832930850867693049317591242795829474310508739124789029553394477417347589724367249469415465533521144780783576349202865053604894924940595102539710306207991405423299332835496576234182708111046227907260420604846835042789107296608791979445976778811835323490823605672130206962492816453208695345498491035858346443364698325350447875475467213226903057116374954296149730652452586482111566941646606589912855459876841725259830430923358386369333958250965705838947979481792839538496730000387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad0296a39443819c4cc5265303ea8270f1cb18cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry-stg.cdlib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsc-registry-stg.cdlib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsc-registry2-stg.cdlib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry2-stg.cdlib.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016b331bd2450000040300483046022100f916d64caf2f366005014661d911b8435f5e1523510145f918f3e21c6f58a877022100a7a61e919c617137a42b3044c071ff185f3ba42e825436767ac49a19f83bda300076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016b331bd30f0000040300473045022062a2883612cb10edf350cfa80baeb3d6658f90f8d23f264756fe45394755e43f022100d4d6e6ae420aeb153ccb7a8e921d23ab6d76542efe93a8caf84478fe8ac0b6270076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b331bd26500000403004730450221009f55e9b14559ec3cd1ef90b75696a39383226e948128335c8b76635f81278a1702206eb87ccaa328d1a1b2c9fa82199f963ad9dcdf11482d2e07dbe7ef9deb088df9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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