hydrogeochem.earth.indiana.edu

- Indiana University-Bloomington -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 08:d9:1d:e8:57:72:f4:5b:7b:ab:8b:6f:11:61:e6:73 was issued on by Internet2.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Indiana University-Bloomington

Organization: Indiana University-Bloomington
Organization unit: University Information Technology Services
Address: 107 South Indiana Ave
Postal code: 47405
State / Province: Indiana
Locality: Bloomington
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:d9:1d:e8:57:72:f4:5b:7b:ab:8b:6f:11:61:e6:73
Serial Number (int): 11761158982457761129270179560973002355
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 22:cd:a4:30:7f:98:a9:1e:b2:f5:f9:97:c5:9a:8d:6d:e6:fa:c5:c1
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 85:59:11:8c:6f:70:25:57:6b:bd:81:38:f6:3c:93:3a:3b:a6:c9:2a
Fingerprint (sha256): 05:11:d6:85:62:f2:92:da:f6:e3:d4:de:f5:b7:8f:28:02:8d:b3:6a:1c:38:a5:3d:04:bd:8e:b9:21:d2:39:14

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate hydrogeochem.earth.indiana.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hydrogeochem.earth.indiana.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hydrogeochem.earth.indiana.edu
www.hydrogeochem.earth.indiana.edu

Other certificates including the domain name indiana.edu

(limited to 100 certificates)
floorplans.service.indiana.edu
bl-s4b-dirpool.ads.iu.edu
cid.indiana.edu
alumni.indiana.edu
patshih.sice.indiana.edu
opera.imu.indiana.edu
info.educ.indiana.edu
owa.exchange.iu.edu
iuware-test.uits.indiana.edu
sgis.indiana.edu
www.vpfaa.indiana.edu
test.fims.indiana.edu
vole.luddy.indiana.edu
storefront.document.indiana.edu
physics.indiana.edu
mfodev.music.indiana.edu
iuhssis.indiana.edu
kemprd.iuf.indiana.edu
franklin.chem.indiana.edu
list.indiana.edu
iufedocs.iuf.indiana.edu
nwb.slis.indiana.edu
www.cs.indiana.edu
mysite.sp.indiana.edu
uconnectlabs.com
rps.indiana.edu
maps.indiana.edu
sustain.iu.edu
vdi.ait.indiana.edu
www.iumj.indiana.edu
apps.indiana.edu
uconnectlabs.com
read.indiana.edu
iujur.iu.edu
unitedway.indiana.edu
munger.indiana.edu
www.informatics.indiana.edu
iubshutdown.indiana.edu
utilities-dev.registrar.indiana.edu
chemical.inventory.indiana.edu
apps3.indiana.edu
test.pe.registrar.indiana.edu
ccsrv1.psych.indiana.edu
earm.registrar.indiana.edu
fatalii.uits.indiana.edu
ucso.indiana.edu
alumni.indiana.edu
holtzlab.psych.indiana.edu
dev.citl.indiana.edu
iontrap.physics.indiana.edu
ella.ils.indiana.edu
iu-cv-xa7psf-02.uits.indiana.edu
external-relay.indiana.edu
housing.indiana.edu
college.indiana.edu
residency-test.indiana.edu
dev1.igs.indiana.edu
datainnovation.soic.indiana.edu
robotclothes.luddy.indiana.edu
projectdox.vpad.indiana.edu
uconnectlabs.com
josotl.indiana.edu
carina.indiana.edu
kb.indiana.edu
batch.iuf.indiana.edu
test.histdegr.indiana.edu
fast.oem.indiana.edu
uconnectlabs.com
grades.indiana.edu
wsa001.uits.indiana.edu
provost.indiana.edu
echo.uits.indiana.edu
snowy.luddy.indiana.edu
partnership.publichealth.indiana.edu
websurv.indiana.edu
www.document.indiana.edu
rt-spam.uits.indiana.edu
uconnectlabs.com
iumusiclive.jsom.indiana.edu
www.dailyrental.motorpool.indiana.edu
api.insite.indiana.edu
lisa.luddy.indiana.edu
www.repository.law.indiana.edu
alumni.indiana.edu
oemservices.indiana.edu
soco.sice.indiana.edu
key-qa.jsom.indiana.edu
calmweb.chem.indiana.edu
hydrogeochem.earth.indiana.edu
engagedlearning.indiana.edu
bksan2.bus.indiana.edu
monitor1.soic.indiana.edu
lmicdata.bio.indiana.edu
rosvall.lab.indiana.edu
fims.indiana.edu
wiki.dlib.indiana.edu
blog.provost.indiana.edu
dgrc-chris.bio.indiana.edu
bugs.dlib.indiana.edu
drugs.indiana.edu

Certificate

The complete raw certificate details for hydrogeochem.earth.indiana.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0UVnHB6gVnEXgHW4Emv
HBwkEVrmms2CnRM8och524afNtWjYr6nwzFLEg0BZ47qPfS1fG1h2sFrgZRSjzgu
64v867VebuaTiEG9UMA3xkV1DqTCMXNqzSGPAhzpiZo1FUn9RHRDIk+/2JsQ2Fnr
DrSyDwRhrE+BxvZxUXneQJuhTkVCQk9WrFCTxiuc64/1Ih408rFXsAEXlpsRGNMB
GMe/+6l8gERRe51Z2O+aS42+k6GHE5AJdLxb88khYtAKadEo6JXibZ3jNb8xGZDA
U/uWWnzBUKUtAy6WSAt9RpGzRL8otPNBnsNf93vztZ3EEDLffi5iMiOzffE4Aqys
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11761158982457761129270179560973002355
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '47405'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '107 South Indiana Ave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana University-Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University Information Technology Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hydrogeochem.earth.indiana.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25155489484608777762736853151104850953459284704406605276696854469865073853133330768406235085865822850659745684415007213536328688103665278019944574432754258523776370162907244127157095464731585414059400329384832318908863324634798900443763226877410389218785693501916224329418537467873027209356645427784543462538676313238563420284891836756626715264772632170926539121544300217639052851222686722879374748131766916542289706821981768721964968302091855003120094301964325339154371467207695170139763559275797982457890186245518441502037271641995569078691427139501478670383686673840570245379042271827158040962793675332122728770651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22cda4307f98a91eb2f5f997c59a8d6de6fac5c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrogeochem.earth.indiana.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydrogeochem.earth.indiana.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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