dcsstage.ucop.edu
- University of California Office of the President -
Issued by InCommon RSA Server CA
About this certificate
This digital certificate with serial number 79:64:77:ef:05:b9:f3:55:69:b7:36:3f:32:c5:85:38 was issued on by Internet2.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
University of California Office of the President
Organization:
University of California Office of the President
Organization unit: IRC
Organization unit: IRC
Address:
1111 Franklin Street
Postal code: 94607
State / Province: CA
Locality: Oakland
Country: US
Postal code: 94607
State / Province: CA
Locality: Oakland
Country: US
Internet2
Organization:
Internet2
Organization unit: InCommon
Organization unit: InCommon
State / Province:
MI
Locality: Ann Arbor
Country: US
Locality: Ann Arbor
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 79:64:77:ef:05:b9:f3:55:69:b7:36:3f:32:c5:85:38Serial Number (int): 161358249719874204278552470776577361208
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 02:91:a5:08:c3:0e:55:83:4c:a3:17:61:c6:4b:45:6b:94:32:56:e5
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38
Fingerprint (sha1): 7d:d5:95:2a:a7:ca:49:32:8b:ed:d5:87:63:8f:e2:50:50:4a:4b:97
Fingerprint (sha256): 05:81:fa:87:f7:eb:ad:8b:0a:c3:51:63:57:da:49:ca:79:b1:93:e7:b7:89:78:2a:77:56:d9:9f:f2:68:f1:bc
Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl
Check the revocation status for certificate dcsstage.ucop.edu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dcsstage.ucop.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dcsstage.ucop.edu
Other certificates including the domain name ucop.edu
(limited to 100 certificates)
firm.ucop.edu
ucars.ucop.edu
doscodes.ucop.edu
ucengage2014.ucop.edu
biprod.ucop.edu
ermd.ucop.edu
ajsqa.ucop.edu
danr.ucop.edu
climatechampions.ucop.edu
nartc.fcm.arizona.edu
ottwebapps.ucop.edu
5654831519760384-fe2.pantheonsite.io
5664902681198592-fe4.pantheonsite.io
iws-ucpath.ucop.edu
www.design-engineering.princeton.edu
ucs-ucb-prod.ucop.edu
isedev.ucop.edu
secure.ucop.edu
ucleads.ucop.edu
nxterra.ucop.edu
5737350726418432-fe4.pantheonsite.io
i9complete.ucop.edu
ajsdev.ucop.edu
5738275486564352-fe1.pantheonsite.io
www.blogs.earthjustice.org
cognos-training.ucop.edu
pts.ucop.edu
2021convention.ncte.org
its-skhalil-9.ucop.edu
webdev.colorado.edu
qa.eias.ucop.edu
virtual2.unlv.edu
5688160465977344-fe4.pantheonsite.io
qa.csg.ucop.edu
cognos-training.ucop.edu
keys.ucop.edu
accessqa.ucop.edu
vml.ucop.edu
ucop-system-notification.ucop.edu
dev.wellness.yale.edu
staging-secure.ucop.edu
ucpathmon.ucop.edu
vmp.ucop.edu
csgqa.ucop.edu
info-dev.calperformances.org
agd.nebrwesleyan.edu
timelogdev.ucop.edu
doorways.ucop.edu
dcsstage.ucop.edu
beta.ucop.edu
agd.nebrwesleyan.edu
5688160465977344-fe4.pantheonsite.io
roots.ucop.edu
5684666375864320-fe2.pantheonsite.io
nistmep.blogs.govdelivery.com
5738275486564352-fe1.pantheonsite.io
dev.embody.yale.edu
policy.ucop.edu
voip-edge.ucop.edu
siteimprove.ucop.edu
dev.wellness.yale.edu
ugappinfo.ucop.edu
uccoronc2019project.ucop.edu
*.was.devops.ucop.edu
cicsdev-ca-signed.ucop.edu
5737350726418432-fe4.pantheonsite.io
ois.ucop.edu
www.esc.rutgers.edu
safe.ucop.edu
giannini.ucop.edu
5654831519760384-fe2.pantheonsite.io
5742387179552768-fe1.pantheonsite.io
dmsuat.ucop.edu
ca-ecology.ucnrs.org
www.bodywerks-medspa.com
rsamldev.ucop.edu
sp.ucop.edu
dev.irapinfocenter.ucop.edu
5742387179552768-fe1.pantheonsite.io
ottwebapps.ucop.edu
*.negotiators-handbook.ucop.edu
sas112.ucop.edu
5738275486564352-fe1.pantheonsite.io
5737350726418432-fe4.pantheonsite.io
pts.ucop.edu
ucimmtoolkit.ucop.edu
itinnovate.ucop.edu
www.extension.ucdavis.edu
2fadmin.govdelivery.com
5742387179552768-fe1.pantheonsite.io
cl.ucop.edu
qa.rgpodonate.ucop.edu
ppsqa.ucop.edu
ugappinfo.ucop.edu
agd.nebrwesleyan.edu
5737350726418432-fe4.pantheonsite.io
5742387179552768-fe1.pantheonsite.io
5738275486564352-fe1.pantheonsite.io
5684666375864320-fe2.pantheonsite.io
applyucd.ucop.edu
ucars.ucop.edu
doscodes.ucop.edu
ucengage2014.ucop.edu
biprod.ucop.edu
ermd.ucop.edu
ajsqa.ucop.edu
danr.ucop.edu
climatechampions.ucop.edu
nartc.fcm.arizona.edu
ottwebapps.ucop.edu
5654831519760384-fe2.pantheonsite.io
5664902681198592-fe4.pantheonsite.io
iws-ucpath.ucop.edu
www.design-engineering.princeton.edu
ucs-ucb-prod.ucop.edu
isedev.ucop.edu
secure.ucop.edu
ucleads.ucop.edu
nxterra.ucop.edu
5737350726418432-fe4.pantheonsite.io
i9complete.ucop.edu
ajsdev.ucop.edu
5738275486564352-fe1.pantheonsite.io
www.blogs.earthjustice.org
cognos-training.ucop.edu
pts.ucop.edu
2021convention.ncte.org
its-skhalil-9.ucop.edu
webdev.colorado.edu
qa.eias.ucop.edu
virtual2.unlv.edu
5688160465977344-fe4.pantheonsite.io
qa.csg.ucop.edu
cognos-training.ucop.edu
keys.ucop.edu
accessqa.ucop.edu
vml.ucop.edu
ucop-system-notification.ucop.edu
dev.wellness.yale.edu
staging-secure.ucop.edu
ucpathmon.ucop.edu
vmp.ucop.edu
csgqa.ucop.edu
info-dev.calperformances.org
agd.nebrwesleyan.edu
timelogdev.ucop.edu
doorways.ucop.edu
dcsstage.ucop.edu
beta.ucop.edu
agd.nebrwesleyan.edu
5688160465977344-fe4.pantheonsite.io
roots.ucop.edu
5684666375864320-fe2.pantheonsite.io
nistmep.blogs.govdelivery.com
5738275486564352-fe1.pantheonsite.io
dev.embody.yale.edu
policy.ucop.edu
voip-edge.ucop.edu
siteimprove.ucop.edu
dev.wellness.yale.edu
ugappinfo.ucop.edu
uccoronc2019project.ucop.edu
*.was.devops.ucop.edu
cicsdev-ca-signed.ucop.edu
5737350726418432-fe4.pantheonsite.io
ois.ucop.edu
www.esc.rutgers.edu
safe.ucop.edu
giannini.ucop.edu
5654831519760384-fe2.pantheonsite.io
5742387179552768-fe1.pantheonsite.io
dmsuat.ucop.edu
ca-ecology.ucnrs.org
www.bodywerks-medspa.com
rsamldev.ucop.edu
sp.ucop.edu
dev.irapinfocenter.ucop.edu
5742387179552768-fe1.pantheonsite.io
ottwebapps.ucop.edu
*.negotiators-handbook.ucop.edu
sas112.ucop.edu
5738275486564352-fe1.pantheonsite.io
5737350726418432-fe4.pantheonsite.io
pts.ucop.edu
ucimmtoolkit.ucop.edu
itinnovate.ucop.edu
www.extension.ucdavis.edu
2fadmin.govdelivery.com
5742387179552768-fe1.pantheonsite.io
cl.ucop.edu
qa.rgpodonate.ucop.edu
ppsqa.ucop.edu
ugappinfo.ucop.edu
agd.nebrwesleyan.edu
5737350726418432-fe4.pantheonsite.io
5742387179552768-fe1.pantheonsite.io
5738275486564352-fe1.pantheonsite.io
5684666375864320-fe2.pantheonsite.io
applyucd.ucop.edu
Certificate
The complete raw certificate details for dcsstage.ucop.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgIQeWR37wW581VptzY/MsWFODANBgkqhkiG9w0BAQsFADB2 MQswCQYDVQQGEwJVUzELMAkGA1UECBMCTUkxEjAQBgNVBAcTCUFubiBBcmJvcjES MBAGA1UEChMJSW50ZXJuZXQyMREwDwYDVQQLEwhJbkNvbW1vbjEfMB0GA1UEAxMW SW5Db21tb24gUlNBIFNlcnZlciBDQTAeFw0xNTAxMjkwMDAwMDBaFw0xODAxMjgy MzU5NTlaMIHAMQswCQYDVQQGEwJVUzEOMAwGA1UEERMFOTQ2MDcxCzAJBgNVBAgT AkNBMRAwDgYDVQQHEwdPYWtsYW5kMR0wGwYDVQQJExQxMTExIEZyYW5rbGluIFN0 cmVldDE5MDcGA1UEChMwVW5pdmVyc2l0eSBvZiBDYWxpZm9ybmlhIE9mZmljZSBv ZiB0aGUgUHJlc2lkZW50MQwwCgYDVQQLEwNJUkMxGjAYBgNVBAMTEWRjc3N0YWdl LnVjb3AuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4nztRu1 77P4sc7BSwoMuMzsW2vLn7sinePXAVrW9goIZf2SL2qwA8u1PoXK5u6Latz/32fU fkMOnbU5c9v1XA+ONWsuynMPhnIa1kpzOtpPNOoBRfwaLpteKZa83Mwr7bXU/qdL b9LT0IdqCDDHXL1m33xbmnmsnK3rXKTqV7EZ2mj93hVN+ikgXWH7m9V4rQhHm4K+ O7sabSqxaZFSp6du131ltnnnA6MWc0gDAusL5rYDOUCPUZZETesMD27xQTaRm3DI jeh8pHedxk4UwYRNnmNksEMfni2z1nfusKgfXWlqgY1NjLwLVmEPsEKx4vmG+oZj 324rlHyOtIoAzwIDAQABo4IBxTCCAcEwHwYDVR0jBBgwFoAUHgWjd49sluJbh0um tIascQAM5zgwHQYDVR0OBBYEFAKRpQjDDlWDTKMXYcZLRWuUMlblMA4GA1UdDwEB /wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjBnBgNVHSAEYDBeMFIGDCsGAQQBriMBBAMBATBCMEAGCCsGAQUFBwIBFjRo dHRwczovL3d3dy5pbmNvbW1vbi5vcmcvY2VydC9yZXBvc2l0b3J5L2Nwc19zc2wu cGRmMAgGBmeBDAECAjBEBgNVHR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLmluY29t bW9uLXJzYS5vcmcvSW5Db21tb25SU0FTZXJ2ZXJDQS5jcmwwdQYIKwYBBQUHAQEE aTBnMD4GCCsGAQUFBzAChjJodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vSW5Db21t b25SU0FTZXJ2ZXJDQV8yLmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNl cnRydXN0LmNvbTAcBgNVHREEFTATghFkY3NzdGFnZS51Y29wLmVkdTANBgkqhkiG 9w0BAQsFAAOCAQEAPIHWlYrR/nHVU7smSyRIcRFlgIgYtGGg/LOQYbu7SBV52rgc yBSpf3j9Wmji8fC9lJMBvBYx7edMz4JkjD4RXewi1Jr48Jq2ybPuO1XW2rxF2Dw1 shvp5pV3HMvfO0Ybf55ZhYwDNIp9OqPDHdcpU0Ux95UE7yB3bfGjPl6wqrEt2GWH 09bBbsrfuqTkgviqsMKIK38yJgw2eXEDXioIiP/ETSY5I4bIw+XqpeYbVL8WOpR8 Nreg9SgXCjDu7uXIBcGevzztP7Tw5xRSPk9+55zFGPMALqtS0eM7/zu1qfxSGH0G /Vo2Z3Kya0ACC6yDN7BEuvWSXJQ/C8VoVUL9/A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4nztRu177P4sc7BSwoM uMzsW2vLn7sinePXAVrW9goIZf2SL2qwA8u1PoXK5u6Latz/32fUfkMOnbU5c9v1 XA+ONWsuynMPhnIa1kpzOtpPNOoBRfwaLpteKZa83Mwr7bXU/qdLb9LT0IdqCDDH XL1m33xbmnmsnK3rXKTqV7EZ2mj93hVN+ikgXWH7m9V4rQhHm4K+O7sabSqxaZFS p6du131ltnnnA6MWc0gDAusL5rYDOUCPUZZETesMD27xQTaRm3DIjeh8pHedxk4U wYRNnmNksEMfni2z1nfusKgfXWlqgY1NjLwLVmEPsEKx4vmG+oZj324rlHyOtIoA zwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 161358249719874204278552470776577361208 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-28 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '94607' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oakland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1111 Franklin Street' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of California Office of the President' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IRC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dcsstage.ucop.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21149823587163828144289512539487300811412698678759410376468417527681274218011305194922543664350200686802056380691952789120075251852385673795942689735266971415746112722581802450820094129608222264223156487752551359704723040678330612256619311050342534599285608924573756073910876814180425374234185781846025725040066401459245452724044628871228964928935743531037115315117563604221584683823135672138268386778745409202730513340208246296508598969295156953725212913793968905177954608834610513756832123536362379922343956065419916178236566395080709694220038758896230963265996302953355324996056877993600596064556127812216649547983 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0291a508c30e55834ca31761c64b456b943256e5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcsstage.ucop.edu' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003c81d6958ad1fe71d553bb264b2448711165808818b461a0fcb39061bbbb481579dab81cc814a97f78fd5a68e2f1f0bd949301bc1631ede74ccf82648c3e115dec22d49af8f09ab6c9b3ee3b55d6dabc45d83c35b21be9e695771ccbdf3b461b7f9e59858c03348a7d3aa3c31dd729534531f79504ef20776df1a33e5eb0aab12dd86587d3d6c16ecadfbaa4e482f8aab0c2882b7f32260c367971035e2a0888ffc44d26392386c8c3e5eaa5e61b54bf163a947c36b7a0f528170a30eeeee5c805c19ebf3ced3fb4f0e714523e4f7ee79cc518f3002eab52d1e33bff3bb5a9fc52187d06fd5a366772b26b40020bac8337b044baf5925c943f0bc5685542fdfc