blogs.illinois.edu

- University of Illinois -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number cd:e8:f3:21:71:f7:79:21:c1:78:09:93:22:e7:eb:0f was issued on by Internet2.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Illinois

Organization: University of Illinois
State / Province: Illinois
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): cd:e8:f3:21:71:f7:79:21:c1:78:09:93:22:e7:eb:0f
Serial Number (int): 273701283282421867098020373280477145871
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 41:00:e0:9c:17:3a:ea:43:23:04:9e:b6:89:96:24:84:0d:3e:37:0b
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 45:68:6b:f6:df:e2:31:98:22:01:fe:6d:83:45:2a:a0:41:f5:fd:ba
Fingerprint (sha256): 05:25:f1:64:79:d6:51:35:95:ff:b9:d2:50:d8:18:2a:94:bd:94:95:0a:0b:a8:95:df:5d:4c:a4:63:a6:b8:80

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate blogs.illinois.edu

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blogs.illinois.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blogs.illinois.edu
blogs.uofi.uic.edu
blogs.uofi.uillinois.edu
blogs.uofi.uis.edu
isg.illinois.edu
news.illinois.edu
news.uillinois.edu

Other certificates including the domain name illinois.edu

(limited to 100 certificates)
sandratest.web.illinois.edu
charans2.web.illinois.edu
demosite1.test.web.illinois.edu
tls.automattic.com
trubach.dev.web.illinois.edu
rgonig2.web.illinois.edu
atlasweb16dev.ad.uillinois.edu
acounttestcp.web.illinois.edu
schrage4.web.illinois.edu
jakramer4321.dev.web.illinois.edu
preview.housing.illinois.edu
prd-crt01.publish.illinois.edu
sswdirectory.test.web.illinois.edu
us.prod.campusgroups.com
formalmethods.web.engr.illinois.edu
nbatura.web.illinois.edu
secure.aces.illinois.edu
jhd2.web.illinois.edu
wennebo1.test.web.illinois.edu
oea.illinois.edu
itprosbutler1cus.dev.web.illinois.edu
vassily2.web.engr.illinois.edu
torrellas.web.illinois.edu
ywang298.web.engr.illinois.edu
ics-test.sbutler1.dev.web.illinois.edu
auditorymodels.web.engr.illinois.edu
fin580.business.illinois.edu
ie07.ncsa.illinois.edu
amberg4.web.illinois.edu
gargoyle.uni.illinois.edu
employment.web.illinois.edu
itprobinaldscus.web.illinois.edu
dxl.ncsa.illinois.edu
sbutler1.test.web.illinois.edu
cluster3.technolutions.net
netmath.illinois.edu
uawasth2.web.illinois.edu
mcarrasco.web.illinois.edu
mail.mste.illinois.edu
distributedmuseum.illinois.edu
jzcapaprod.web.illinois.edu
plusc1cus.dev.web.illinois.edu
wmsjdees1.web.illinois.edu
cbitraining.web.illinois.edu
caesar.web.engr.illinois.edu
5635093192245248-fe3.pantheonsite.io
cloudbroker-qa.cites.illinois.edu
cluster3.technolutions.net
web.illinois.edu
contextual.web.illinois.edu
faa.illinois.edu
bretl.csl.illinois.edu
nextcourses.illinois.edu
us.prod.campusgroups.com
my.lis.illinois.edu
stuckexchange.web.illinois.edu
pts.learn.illinois.edu
nikhilm3.web.illinois.edu
studentcode.illinois.edu
test.english.illinois.edu
petgooooo.web.illinois.edu
web.engr.illinois.edu
meganlm2.web.illinois.edu
tuncay2.test.web.illinois.edu
sse.illinois.edu
mail.opia.illinois.edu
cthulhu.cropsciences.illinois.edu
tbp.ec.illinois.edu
pubsplus.illinois.edu
autotestdrupal.web.illinois.edu
itproklangcus.dev.web.illinois.edu
test.frit.illinois.edu
itproklangcus.web.illinois.edu
cspurce2.web.illinois.edu
vetmed.illinois.edu
sbutler1.web.illinois.edu
teamrockettest.test.web.illinois.edu
eohlive2018.web.engr.illinois.edu
mr-dev.atlas.illinois.edu
psaap.anthro.illinois.edu
site-maint.itcs.illinois.edu
etdtest.ideals.illinois.edu
demosite2.test.web.illinois.edu
peterarest.web.illinois.edu
gvserver.inhs.illinois.edu
illinilarp.web.illinois.edu
jmeid2.web.illinois.edu
wiki.cigi.illinois.edu
cgs.illinois.edu
images.publicaffairs.illinois.edu
tulshib2.web.engr.illinois.edu
jakemullen.web.illinois.edu
crt05.prd-letsencrypt.publish.illinois.edu
isws-data.web.illinois.edu
baylislab.ace.illinois.edu
researchpark.illinois.edu
engr-web-01.engr.illinois.edu
dhritig2.web.illinois.edu
thefarm.illinois.edu
seclab-minneapolis.cs.illinois.edu

Certificate

The complete raw certificate details for blogs.illinois.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywr7F5j2b+BK2o9Ae0ks
NLJ6rFD7jsXb3is0TXyeTyav7AUYlg1LJUS6GC4vMoNVHApYIgRpdYHzJejlMtBr
QKPtnReWKryaTAloZqxj7cVKKIyoH21tURB0fX7RELTOLF8sd0UjSqxeNg9XeKm5
CrGRfDAJk5tcL46ZqPrtbjyVmzRt7X98qM56HORQ4upaOgS4YS4XJHMpC+aHZVgW
xq2LX9b2Y1J5RQshmBnNN8QQ55GD/ZJLTqoDcLe0i6Aucr3vZmiYz6xpLXF7yHch
9Z2DfScScUKgFbq/+BAm5CpY1YkuK5UGgOPeTgaaq/UvzzeILrN+DyVRim2lpVfD
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273701283282421867098020373280477145871
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blogs.illinois.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25631790756614930045099830841552322938018316428709566548995370371458791753563746750736935805137630192295062068521772717552913715601416743758802138612417171502963419223115787717812552614210713331068030021201664193577089145504976989129735926384957186247813583881778160731463340672539175201674975930259157461939784494413822577088373904154747138130676911777919054032942095429123280780742887665982195728783065748736964190154924140214798478605964075503059368233155064291068475357275194829129607039429615672249258990309728910899926071841343128529947460243401035915939203092981734844583185892984471462186588476166634603004761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4100e09c173aea4323049eb6899624840d3e370b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000185f5c495a6000004030047304502201b121ccf115f077383dbe59a0c2a426e0676a5c18f98e6c32a38e2bc7ce9bb65022100e89894758dfdeecbd775677024bba8757343d35ea236436ab5a2df0af63a003e0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185f5c4957400000403004730450221009bb3c031c1465e7e1f518c97c1e4e0e2f524842d3cc9a8817931b8a32ff320ed02202a34abb49998d80b1d841a7c211ea9fe7f1cde0c47325ee3d95e1e184f422f0d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.uofi.uic.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.uofi.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.uofi.uis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isg.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.uillinois.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0028302ad111e79584c920bebf26827be947cd3e5d3d1a0757a0f9f2982add17f0d496b74f9f69c1bba70f927ecc882aea6692760d7f8cf5129c199a29dea8e11faec70b7825d81e6c0ed7b35892d976d58b75c7a8b76cbf11e4a2f5e1b28b1c6a9eac00888062ecf1ae845eaa2f714a30b9f34c70acc99b0407bcbbb310b5c81d4c50a8160bb6ad664a8311aae1b6beb142bec34ef2f871e68dc61fcc7946e50974d6ddfb598a630f4c7fd7c1c9a479033336c57aee502b7647a26ae1e0272ede34948ec7308c9d41d214f089891c8334066237418abf21b52e6da90f9f24b42c8621e298c35c674849f950bfd8ae322e34dc3fd74c850245443293589a0264df