frodo.lib.purdue.edu

- Purdue University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 21:1e:a7:5b:9c:46:97:7e:45:ca:e8:dc:9d:b9:eb:3d was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Purdue University

Organization: Purdue University
Organization unit: Libraries
Address: 504 West State Street
Postal code: 47907-2058
State / Province: IN
Locality: West Lafayette
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 21:1e:a7:5b:9c:46:97:7e:45:ca:e8:dc:9d:b9:eb:3d
Serial Number (int): 44023687187189869007857677417867504445
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 1b:75:1a:54:3c:43:ca:70:9b:1e:31:c8:7f:56:d9:13:2f:2a:57:09
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 34:a0:76:7f:ec:44:26:aa:e3:57:c5:c0:33:d4:e3:da:24:be:36:64
Fingerprint (sha256): 05:b4:f8:f6:2c:26:b4:58:e7:44:94:ed:73:df:c6:7f:13:19:e9:83:46:34:a9:61:bb:0c:04:c7:79:0c:c2:80

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate frodo.lib.purdue.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for frodo.lib.purdue.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

frodo.lib.purdue.edu

Other certificates including the domain name purdue.edu

(limited to 100 certificates)
dev.boilerpress.itap.purdue.edu
srv-fna.student-orgs.purdue.edu
frodo.lib.purdue.edu
dayofgiving.purdue.edu
icds28.cs.purdue.edu
buddy-boy1.ecn.purdue.edu
dev.www.purdue.edu
wqvwebasp02-05.www.purdue.edu
roger.ecn.purdue.edu
pc.cs.purdue.edu
webvpn.purdue.edu
itap-netedge-asa5555x-01.tcom.purdue.edu
givingisgorges.org
dev2.hort.purdue.edu
dev.wp.www.purdue.edu
freedom.cs.purdue.edu
wdvwebasp03-01.www.purdue.edu
cmsdev.pha.purdue.edu
www.math.purdue.edu
npdn-dev.ceris.purdue.edu
dns-vetting1l.map.fastly.net
amarillo.nserl.purdue.edu
author.www.purdue.edu
npdn-dev.ceris.purdue.edu
www.purdue.edu
bionum.cs.purdue.edu
webdav.bio.purdue.edu
5684961520648192-fe4.pantheonsite.io
wqvwebcfm02a.www.purdue.edu
sp-dev.itap.purdue.edu
one.purdue.edu
wqvwebasp03b.www.purdue.edu
5757715179634688-fe2.pantheonsite.io
dns-vetting1l.map.fastly.net
cluster2.technolutions.net
dev.www.purdue.edu
owl.english.purdue.edu
one.purdue.edu
aribaqa.itap.purdue.edu
blackmesa.cerias.purdue.edu
dayofgiving.purdue.edu
5684961520648192-fe4.pantheonsite.io
www.ag.purdue.edu
wdvwebpec02.www.purdue.edu
www.bio.purdue.edu
cancerresearch.purdue.edu
5767874312404992-fe2.pantheonsite.io
dev.boilerpress.itap.purdue.edu
givingisgorges.org
www.eaps.purdue.edu
wpvwebdls01-01.www.purdue.edu
lacuna.cla.purdue.edu
www.purdue.edu
www-old.pharmacy.purdue.edu
wdvwebinf03.www.purdue.edu
redirect.www.purdue.edu
dev.boilerpress.itap.purdue.edu
napis.ceris.purdue.edu
polytechnic.purdue.edu
wpvpfrmft01.itap.purdue.edu
Collegiatelink4.Campuslabs.com
dns-vetting1l.map.fastly.net
phishing.itap.purdue.edu
5684961520648192-fe4.pantheonsite.io
cancerresearch.purdue.edu
erp-reporting-sbx.itap.purdue.edu
deleuze.cla.purdue.edu
5750683647082496-fe3.pantheonsite.io
incapsula.com
assets.lib.purdue.edu
www-new.foodsci.purdue.edu
www-new.foodsci.purdue.edu
jafcidev.chem.purdue.edu
weldon.ecn.purdue.edu
wpvwebasp03-01.www.purdue.edu
cancerresearch.purdue.edu
saraswat.rcac.purdue.edu
bmew.ecn.purdue.edu
n002.offcampuspartners.com
www.cs.purdue.edu
n002.offcampuspartners.com
dev.wiki.itap.purdue.edu
*.math.purdue.edu
collections.lib.purdue.edu
sharepoint.purdue.edu
incapsula.com
givingisgorges.org
bejih.com
cos-7apollo.boilerad.purdue.edu
dev.wp.www.purdue.edu
exchange.purdue.edu
dat2-100-asa5506-01.tcom.purdue.edu
offcampushousing.fau.edu
givingisgorges.org
givingisgorges.org
dev.sharepoint.purdue.edu
www.itap.purdue.edu
webapps.krannert.purdue.edu
dns-vetting1l.map.fastly.net
wpvwebasp03b.www.purdue.edu

Certificate

The complete raw certificate details for frodo.lib.purdue.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpseUe1+0ERLb2G8Edn2
uRBvEi3LnMSP+Atx/Cj4JJuTLZxygY7twOm0U5c9OwVmL1WCcPddOhTueLCsN36j
zeEELDnT3v9WSQeaFfS1LE5dXZ9H9hRFgEmtcClRliR5kGcEJ6Y/1nLofBNeaDgk
bQYyQgg60jvmAwrhwUEfHBGF/4wV3D3cGyJ5rzCZ6J1s4heO90PfocbFH/KKDO9F
+GQ6KZvzIv4c5gUssrin9RxhmMGKuz0iQJb5Al5uxGMTKx1Uxjs1JP/wTWLK6B2y
7hq54FL/fRpd+MwwQ4OCpOm8pUKj/niGKvhJqbzs9Oa8ePJSquiet+dKrSpVxrO4
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 44023687187189869007857677417867504445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '47907-2058'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Lafayette'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '504 West State Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Purdue University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Libraries'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'frodo.lib.purdue.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23051863256298633793236857504374744545102041162455650337606016072959429837640871018366323686398952843000786626706197851157504360877218630212424841922198746646897251483802470938391465575680714463314327513097473876662722356057698446289478341280234401061464949179214703026258883646700346377999394350447084859181317807807477724663665386471186863023649653853347463401640000594179246213663637327864184196067333688471163483234525764722901933799347969289312703741333776854589227438258239896682787564057962598819043584537390116583640930126946319223029201272749908740111110720600708206213817134469096258222343906340366636529907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b751a543c43ca709b1e31c87f56d9132f2a5709
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frodo.lib.purdue.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005c0c3b10f25602fd2b2bc7f78ee2b55585d3c76b5a2ae7995de35821db627bb4ae8bd31902c7ea776eeb37358d41f22631b021db030fcc15e0b564cf5e4604400e351fe9338acec37d61d3e3e0628737eb8bdff498b21c5a5b3f746a0af8872f0dac5bc6c7c0cd1a88559fb7963f7d05a7d223438181755f4093953c843ed73bfac434bc9d5d97e1d6aa71824172785ee076cb8b5e58003d5500d6fd4ba99ebef4331a908ef997e8f09dba163729c979cb850d346f4b51eb4ef3e6786bd83f40631c7f97a461a66c7b22ec9b69427d6445761aefe072e59ea9dd8dc3d167a26eafadee1c84651e47ab3cbc6c2a39083327a424485e1153b9fe34e004ea7fc8f6