p250.cc.stonybrook.edu

- Stony Brook University -

Issued by InCommon Server CA

About this certificate

This digital certificate with serial number fa:cd:57:1e:29:ba:53:eb:b4:be:b9:29:ab:96:f0:7a was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Stony Brook University

Organization: Stony Brook University
Organization unit: Computing Center
Address: Stony Brook University
Address: Computing Center
Postal code: 11794-2400
State / Province: NY
Locality: Stony Brook
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fa:cd:57:1e:29:ba:53:eb:b4:be:b9:29:ab:96:f0:7a
Serial Number (int): 333373186761623142922607983142291042426
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5e:3a:a3:19:40:a9:02:e5:5a:6c:65:e9:6b:05:d0:a0:e5:50:95:34
AuthorityKeyId: 48:4f:5a:fa:2f:4a:9a:5e:e0:50:f3:6b:7b:55:a5:de:f5:be:34:5d

Fingerprint (sha1): ba:df:35:6f:0f:df:0a:2c:2a:11:1b:2c:3e:6c:af:2e:76:00:f5:36
Fingerprint (sha256): 06:00:ef:55:e6:04:35:6c:a8:05:a9:83:ca:49:e5:c9:81:3e:f9:fc:9d:01:09:d6:70:05:d8:0b:b7:11:dd:54

Issuing Certificate URL: http://cert.incommon.org/InCommonServerCA.crt

Revocation information

OCSP Server: http://ocsp.incommon.org
CRL Distribution Point: http://crl.incommon.org/InCommonServerCA.crl

Check the revocation status for certificate p250.cc.stonybrook.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for p250.cc.stonybrook.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

p250.cc.stonybrook.edu

Other certificates including the domain name stonybrook.edu

(limited to 100 certificates)
svn.cs.stonybrook.edu
sql-tmates16-p.uhmc.sbuh.stonybrook.edu
answers.library.stonybrook.edu
statuspage.io
5098030885765120-fe4.pantheonsite.io
givingday.stonybrook.edu
cloud-status.typesense.org
guides.library.stonybrook.edu
statuspage.io
statuspage.io
rdpgw-2fa.cc.stonybrook.edu
5745710343389184-fe4.pantheonsite.io
grading.cse356.compas.cs.stonybrook.edu
sunapsistest.campus.stonybrook.edu
5098030885765120-fe4.pantheonsite.io
5098030885765120-fe4.pantheonsite.io
5707532110659584-fe2.pantheonsite.io
arrive.cs.stonybrook.edu
sbmta2.cc.stonybrook.edu
vsst.stonybrook.edu
webappys.cc.stonybrook.edu
5721185543258112-fe3.pantheonsite.io
nanocas.ece.stonybrook.edu
clubred.stonybrook.edu
5717119551406080-fe2.pantheonsite.io
sqlnode2-p.campus.stonybrook.edu
seniorclasslegacy.stonybrook.edu
5707532110659584-fe2.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5719980670713856-fe1.pantheonsite.io
6250489796624384-fe1.pantheonsite.io
teams.stonybrook.edu
its.msudenverstatus.com
5707532110659584-fe2.pantheonsite.io
testhighsierra01.sinc.stonybrook.edu
sbmatters.stonybrook.edu
sql-ips16-p1.uhmc.sbuh.stonybrook.edu
icdm2015.stonybrook.edu
5765867027562496-fe4.pantheonsite.io
webapp1.cc.stonybrook.edu
5765867027562496-fe4.pantheonsite.io
enroll.stonybrook.edu
5737664527466496-fe3.pantheonsite.io
redcap.stonybrook.edu
ascomaxess.uhmc.sbuh.stonybrook.edu
sdmwc.uhmc.sbuh.stonybrook.edu
research-pp.stonybrook.edu
stemsoftclinic.uhmc.sbuh.stonybrook.edu
xsrv2.mm.cs.stonybrook.edu
policymanagerd.uhmc.sbuh.stonybrook.edu
testsmg.cc.stonybrook.edu
5717119551406080-fe2.pantheonsite.io
statuspage.io
statuspage.io
coi.myresearch.stonybrook.edu
statuspage.io
dsfrey.javits.stonybrook.edu
statuspage.io
sql-spkctrm16p1.uhmc.sbuh.stonybrook.edu
uhmc-xapp-sf-d.uhmc.sbuh.stonybrook.edu
5759778777202688-fe2.pantheonsite.io
chartcompletion.hospital.stonybrook.edu
6250489796624384-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
statuspage.io
you.stonybrook.edu
grants.myresearch.stonybrook.edu
mysbfiles.stonybrook.edu
5765867027562496-fe4.pantheonsite.io
disaster.studies.stonybrook.edu
5721185543258112-fe3.pantheonsite.io
5745710343389184-fe4.pantheonsite.io
statuspage.io
cucmpub-ms.cewit.stonybrook.edu
p250.cc.stonybrook.edu
classroomfinder.tlt.stonybrook.edu
statuspage.io
p250.cc.stonybrook.edu
icdm2015.stonybrook.edu
liberalarts.ss.pacific.edu
5766380947243008-fe1.pantheonsite.io
statuspage.io
addc2.campus.stonybrook.edu
5765867027562496-fe4.pantheonsite.io
mypasswords.stonybrook.edu
myresearch.stonybrook.edu
expeditions.sandiegozoo.org
6250489796624384-fe1.pantheonsite.io
adfs01.cs.stonybrook.edu
5714902542974976-fe3.pantheonsite.io
api.stonybrook.edu
statuspage.io
ip-e.stonybrook.edu
5714902542974976-fe3.pantheonsite.io
sp-db16-p.uhmc.sbuh.stonybrook.edu
housing.stonybrook.edu
sql-vsync16-p.uhmc.sbuh.stonybrook.edu
mobile.cc.stonybrook.edu
hctestapp2.campus.stonybrook.edu
addc3.campus.stonybrook.edu

Certificate

The complete raw certificate details for p250.cc.stonybrook.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DcKzpbjViQym9uIfe1H
aRFvDvjTjwMkIYtQTwSVieusSQgFQx+WAQkrwxi8HklQTHmyeX40j0a/cezz4wGy
lFZNtLDgmnSjbCOBWCa5hLcmZnj86HtGHqvEtg+3mo4ggo+6WFw77oK0Gb0UfZnU
vd4iO6Tl/tUZaKIKgIgLoCRzZFQa5RqWnEz3yJlSzPKy8vbUaSzA2+qJi8pbI80+
YRoCEC7l+zLty6ymVW2krQhK38/EbFgZRlVuJ2piusbYPsKio2VGqXsfv7HPdWnf
q0w5uxb5ZXg6xGRjc+czjAIVzNsjdo2vwLViDrgcXfsXdoxsn+67mi58BOBs0xyn
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333373186761623142922607983142291042426
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '11794-2400'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stony Brook'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stony Brook University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Computing Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stony Brook University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Computing Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'p250.cc.stonybrook.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27799569420261243329760682266840972880855477950157762786435549348059594188147008460446051401728942093837036362891130578819409462176768231315301183134741023237028921784468763606343926017937989669749191288262355146197632325343980854331538598574008213373114024078964311260739144572149643426655779847936553688667142221190785193315148720897884364720937414993966227443307195038447634921042104238829540336136626859022414248698027609464282710775069679300916178798330823556872258550410951393735244004922598642475935677340906354486831354515699584804082838217499192279917457217704872433830739525440916632761047516259581750454207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 484f5afa2f4a9a5ee050f36b7b55a5def5be345d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5e3aa31940a902e55a6c65e96b05d0a0e5509534
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon.org/InCommonServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.incommon.org/InCommonServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.incommon.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p250.cc.stonybrook.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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