primate-prod.tulane.edu

- Tulane University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number dd:58:46:5f:03:8f:d8:16:02:08:3f:6e:84:64:28:7d was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tulane University

Organization: Tulane University
Organization unit: Technology/Infrastructure
Address: Suite 1400
Address: 1555 Poydras Street
Postal code: 70112
State / Province: Louisiana
Locality: New Orleans
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): dd:58:46:5f:03:8f:d8:16:02:08:3f:6e:84:64:28:7d
Serial Number (int): 294217736488467519073897825068116093053
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 00:8d:1a:e0:a2:fd:30:d7:8e:7f:76:3f:96:09:82:7c:65:17:1c:f5
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): fc:aa:87:06:04:b6:b0:84:67:a2:3c:42:a9:ad:ed:82:1b:2a:6d:30
Fingerprint (sha256): 06:17:c1:aa:cb:a6:3d:7f:ad:9a:07:43:f7:a1:b1:7d:d4:fd:94:5e:83:fc:23:2f:60:6a:38:52:dd:34:ba:87

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate primate-prod.tulane.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for primate-prod.tulane.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

primate-prod.tulane.edu

Other certificates including the domain name tulane.edu

(limited to 100 certificates)
www.stmaryelyria.org
sfunder1cert.net
wfmo.tulane.edu
bannerinfo.tulane.edu
visix.tulane.edu
libguides.law.tulane.edu
tulane.edu
sspr.tulane.edu
ems.law.tulane.edu
listserv.tulane.edu
sni31194.cloudflaressl.com
stjameswashington.org
www.stmaryelyria.org
matas-lib.tulane.edu
bbreports.tulane.edu
securedns.planmygift.org
alliance.tulane.edu
applysopa.tulane.edu
taylor.tulane.edu
cluster2.technolutions.net
tuoms2p02.tcs.tulane.edu
degrees.tulane.edu
apply.tulane.edu
adfs.tulane.edu
sni31194.cloudflaressl.com
stjameswashington.org
socialwork.tulane.edu
greek.tulane.edu
stjameswashington.org
violenceprevention.tulane.edu
liberalarts.tulane.edu
entapps.test.tulane.edu
plannedgiving.zaytuna.edu
pcfmindandbody.tulane.edu
library.tulane.edu
stjameswashington.org
sni31194.cloudflaressl.com
securedns.planmygift.org
polyrmc.tulane.edu
sopahmls.tulane.edu
plannedgiving.zaytuna.edu
sni31194.cloudflaressl.com
n002.offcampuspartners.com
tulaneurbanbuild.com
ars.test.tulane.edu
5629499534213120-fe1.pantheonsite.io
sopahw.tulane.edu
discover.sopa.tulane.edu
clue.tcs.tulane.edu
wfds.tulane.edu
requestinfo.publichealth.tulane.edu
n002.offcampuspartners.com
5629499534213120-fe1.pantheonsite.io
biloxi.tulane.edu
stem.summer.tulane.edu
stjameswashington.org
primate-prod.tulane.edu
www.stmaryelyria.org
amploadvance.com
r6phtc.sph.tulane.edu
cluster2.technolutions.net
info.law.tulane.edu
digitaldesign.tulane.edu
*.tulane.edu
emsapi.tulane.edu
sopaundergrad.tulane.edu
www.stmaryelyria.org
apply.tulane.edu
centerforsport.tulane.edu
cmvss.tulane.edu
stjameswashington.org
nextcatalog.tulane.edu
securedns.planmygift.org
sopa.tulane.edu
stjameswashington.org
tuebsdb1d01.tcs.tulane.edu
tls.automattic.com
cluster2.technolutions.net
giving.tulane.edu
tugms1p09.tcs.tulane.edu
api.tulane.edu
sni31194.cloudflaressl.com
securedns.planmygift.org
5629499534213120-fe1.pantheonsite.io
5629499534213120-fe1.pantheonsite.io
sni31194.cloudflaressl.com
cluster3.technolutions.net
sfunder1cert.net
publichealth.tulane.edu
apply.tulane.edu
tubanda1t01.tcs.tulane.edu
www.stmaryelyria.org
vce7.tulane.edu
idp.tulane.edu
cps.tulane.edu
sphfieldstudy.tulane.edu
tubxeadm1t01.tcs.tulane.edu
culinarymedicine.tulane.edu
tudwapp1t01.tcs.tulane.edu
libguides.law.tulane.edu

Certificate

The complete raw certificate details for primate-prod.tulane.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvueCTvqqERGDs7OULR/2
/bBKkceUGgw2L2UPcVJxr4ppbmQRyfSjhjFNDZqxLLw487Fjvh6FKfTpzbi5Hgik
/EGOSGZTuPSHJOV8Vg7MJjroBBDv1UlNkEAn9pwxvLGvJvzF6hCL2q3izusjqMxt
5ug8DDtt9nEP9SvOIUn9yiK8DM0Zmhn+2AaET6wSEnGXmJbZ8L4oGmWD4hafljIA
uTbtqiKSsKj/Evhcyro7wrwqbXo9a8aPuzInuODEH++bg0z5GwcKiKosU43MHJgv
7OViyFCR0bbUVlrgVwUU7zW/Aqo4GibDvbtCpDUfNXhxiH/gVxGsUO/QxrYM35XZ
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294217736488467519073897825068116093053
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '70112'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Louisiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Orleans'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Suite 1400'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1555 Poydras Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tulane University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technology/Infrastructure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'primate-prod.tulane.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24099439294994505834866604105661807275047049323865290774932399249367019281786863653171874832271058131892100752274658392448589536146135562611153544205855355690184229681884593098438516089067837483386369198729126742810098954020977199313596725005932357981279232566818362407695188271326847441727959077110782054956526761941864434191501245666111033841092831158875505594881727247146228619929937675284718639410994470481294544323136958092478463399525693474977102576627364598738814662384078458076054392792707481202093193129378436887736357952230983096288051918317150083926868805793490227265865927457236533370268762967772428097901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							008d1ae0a2fd30d78e7f763f9609827c65171cf5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primate-prod.tulane.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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