weiji.mdanderson.edu

- The University of Texas M.D. Anderson Cancer Center -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 7b:70:c2:f5:2e:33:63:84:77:ed:d9:52:1d:62:fa:f7 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The University of Texas M.D. Anderson Cancer Center

Organization: The University of Texas M.D. Anderson Cancer Center
Organization unit: MD Anderson Cancer Center
Address: 1515 Holcombe Blvd
Postal code: 77030
State / Province: TX
Locality: Houston
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:70:c2:f5:2e:33:63:84:77:ed:d9:52:1d:62:fa:f7
Serial Number (int): 164080534942361913106864683468856687351
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f2:ef:3a:fc:8f:dd:d0:1d:12:44:29:b5:e9:ef:20:52:8b:f6:58:db
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): f6:c8:40:d6:49:36:95:e2:9d:3c:02:af:db:50:8f:fc:90:0c:8c:07
Fingerprint (sha256): 05:35:46:12:e5:62:6e:8c:36:8d:0d:8c:ad:3f:f3:91:be:f0:54:79:91:b2:17:71:bf:7c:60:9a:65:b6:f7:dd

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate weiji.mdanderson.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for weiji.mdanderson.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

weiji.mdanderson.edu

Other certificates including the domain name mdanderson.edu

(limited to 100 certificates)
icmobile.mdanderson.edu
1mcdcprd004.mdanderson.edu
lync.mdanderson.org
bcaweb.mdanderson.edu
mda02plt.mdanderson.org
qcdwldev-web.mdanderson.edu
snowinv-dev.mdanderson.edu
dcgdcprd007.mdanderson.edu
icmychart.mdanderson.edu
copwldocmps1.mdanderson.edu
moclia-stage.mdanderson.edu
mailbox.mdanderson.org
ehrsdwebrelbvb.mdanderson.edu
qiacapi.mdanderson.edu
dcswlmesaview.mdanderson.edu
dcgdcprd004.mdanderson.edu
snow.mdanderson.edu
1access.mdanderson.edu
stage-qiacapi.mdanderson.edu
dosrlredcap01s.mdanderson.edu
cpbonbaseroi.mdanderson.edu
sapbidev.mdanderson.edu
doprlredcap02p.mdanderson.edu
onbaseroipoc.mdanderson.edu
dcgdcprd006.mdanderson.edu
oc.mdanderson.edu
dopwlrdsserver.mdanderson.edu
1mcintconzoom02.mdanderson.edu
biobank-stage.mdanderson.edu
cpbdcprd003.mdanderson.edu
weiji.mdanderson.edu
men.mdanderson.org
mdasign.mdanderson.edu
cpbdcprd003.mdanderson.edu
acadtech-dev.mdanderson.edu
scpapfwapp.mdanderson.edu
doprlstreaming.mdanderson.edu
mobileaccessendpoint.mdanderson.edu
dcgdcprd004.mdanderson.edu
mdawireless-fs.mdanderson.edu
1mconbaseroi.mdanderson.edu
v-armada.mdanderson.edu
1mcdcprd001.mdanderson.edu
iscvwebtst.mdanderson.edu
pacs.mdanderson.edu
hswstg.mdanderson.edu
ehrsdwebbkrv.mdanderson.edu
dopwlps1web.mdanderson.edu
dcpalcsc5m.mdanderson.edu
d1prlcscui3.mdanderson.edu
dcgdcprd008.mdanderson.edu
dcgonbasepro01.mdanderson.edu
roadstest.mdanderson.edu
ehrsdwebprdvc.mdanderson.edu
mylink-sup.mdanderson.edu
ehrbirestrelbva.mdanderson.edu
cpbsnowmgrdev1.mdanderson.edu
dopwldibrainlab.mdanderson.edu
cpbdcprd002.mdanderson.edu
dcpalcsc5w6.mdanderson.edu
ccgfamilyhistory.mdanderson.edu
enroll-device.mdanderson.edu
scpaptmeddi02.mdanderson.edu
cpbdcprd006.mdanderson.edu
1mconbaseapp01.mdanderson.edu
snowinv.mdanderson.edu
webqa.mdanderson.edu
idm-prod-epic-rest.mdanderson.edu
qa-qiac.mdanderson.edu
prodsp2013.mdanderson.edu
d1twlicttest.mdanderson.edu
dopwlinowapp2a.mdanderson.edu
dev-qiac.mdanderson.edu
4info.mdanderson.edu
dcgdcprd003.mdanderson.edu
zoom.mdanderson.org
oneaccesspwrs-staging.mdanderson.edu
aspera-staging.mdanderson.org
webstagep.mdanderson.edu
apistage.mdanderson.edu
dcgintconmed01.mdanderson.edu
idm-prod-epic-rest.mdanderson.edu
dev-qiac.mdanderson.edu
4info.mdanderson.edu
dcgdcprd008.mdanderson.edu
ehrsdwebtstva.mdanderson.edu
d1pwlipcttbcrc.mdanderson.edu
cpbdcprd004.mdanderson.edu
carelinktr.mdanderson.edu
emprss.mdanderson.edu
eps.mdanderson.edu
ehrwelwebrel1.mdanderson.edu
ehricmychstga01.mdanderson.edu
ehrcarelnkrbld1.mdanderson.edu
epm.mdanderson.edu
nonprddskpsc.mdanderson.edu
dopwldlpenf.mdanderson.edu
pocdsk.mdanderson.org
ehrmychrbld1.mdanderson.edu
dcgintconzoom01.mdanderson.edu

Certificate

The complete raw certificate details for weiji.mdanderson.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz6S8ZIpNMgJEbOmS0gP
gnlRV12K8RJG9qJuG80fXY8zzKhLBHwqUvyYLxfPLJ5AxUtLMq9wZavkfSQ5/Ong
TWbpY/j9CDjsji7BBQsQnnRSpiDEXt9Be4oeUZgGgAbHKfe+TMSqYZOLXUcoj2qF
u7fsziIkRUizVeiv9nHAO/JDiVyhcmuVp/epMzJXT7VEmymbsKjLgL40GWgJFmtF
0GSkLVcdbZ2aQFKE4D7mq3NjkYkNKJ/yweXBt5cUCraKVwOX34FOBZnHV4Syn6Si
RiUEJ1AJcKa5HkWBDYEcLdQCcjY4JxM2kfLWDZ3WhlobzP+UTVo4A2qLRaoi4GTS
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 164080534942361913106864683468856687351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '77030'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1515 Holcombe Blvd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of Texas M.D. Anderson Cancer Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MD Anderson Cancer Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'weiji.mdanderson.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22627512977657666576049880209758928815393416626829740187658730878898674945052303572270122514600398890242905716171134986078477258488088677178629665376959340991755162800619122717518830533490823651749697378913706890179675386860694713483510050911881266242614414527997253534915585236141591083632865437479805281431135234864833965904587595406802566022026513811960139946979710046643817209681790087665925338871640431948140239805508680666201100753939473710486303081559335579379618964082638326227587792872141279287300393213617428559957261050213908258637142704608508649489843390625938851456414680874204286167494736915990533427949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2ef3afc8fddd01d124429b5e9ef20528bf658db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiji.mdanderson.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001657ba1ed9f0000040300483046022100843157059d0f2b86c4a666aec7ec7ead7690d2034de0f26fbfbf840ea2b0aec0022100ace77711d42dbcafe18f121e9184d9f257feee0130ca4db4d8bfc53d1ddef19d0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001657ba1edd60000040300473045022008c37ee0d1f76d0b14e2df051b178fc7d886f86501f95e8455df78a72e048b93022100997db646ed0f517f2bbd2778c6060a449d6aca17e21e96172798240fca2c03c20076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001657ba1ee2b0000040300473045022077e6093d6cec0ce63594dfb488381609509a2137fe69648b14856fa02e5e8ed8022100d9bfb9bd9f3ec5bb88eba61f7929a7f67d1db0e7e7f8e30e91fdf9cfdada6857
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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