app.icerm.brown.edu
- Brown University -
Issued by InCommon RSA Server CA
About this certificate
This digital certificate with serial number 7f:a8:77:4b:fd:79:52:d8:8a:85:5d:1b:74:e5:4e:97 was issued on by Internet2.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Brown University
Organization:
Brown University
Organization unit: Academics Departments
Organization unit: Academics Departments
Address:
Brown University
Postal code: 02912
State / Province: RI
Locality: Providence
Country: US
Postal code: 02912
State / Province: RI
Locality: Providence
Country: US
Internet2
Organization:
Internet2
Organization unit: InCommon
Organization unit: InCommon
State / Province:
MI
Locality: Ann Arbor
Country: US
Locality: Ann Arbor
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 7f:a8:77:4b:fd:79:52:d8:8a:85:5d:1b:74:e5:4e:97Serial Number (int): 169686680964219568756485863548935032471
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 24:5b:5a:1c:54:ef:b1:a6:ec:e3:db:11:b3:c9:ec:60:42:7a:64:90
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38
Fingerprint (sha1): d0:8b:03:c1:a0:85:65:d9:40:94:0a:ac:01:b9:78:0c:96:46:af:8f
Fingerprint (sha256): 06:2f:62:f2:92:c0:44:40:46:c2:15:ed:42:12:50:50:4a:8d:72:16:52:dd:a3:10:29:6f:4e:40:72:2c:b7:83
Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl
Check the revocation status for certificate app.icerm.brown.edu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for app.icerm.brown.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
app.icerm.brown.edu
Other certificates including the domain name brown.edu
(limited to 100 certificates)
carpepm.almonds.com
familyweekend.brown.edu
image.ma.mirashiru.dai-ichi-life.co.jp
particleastro.brown.edu
sni.cloudflaressl.com
tls.automattic.com
pampcit1.ad.brown.edu
5750683647082496-fe3.pantheonsite.io
2020.brown.edu
cluster3.technolutions.net
5656540782526464-fe4.pantheonsite.io
sni.cloudflaressl.com
blug.brown.edu
remotion.cs.brown.edu
blog.cs.brown.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mturk.cs.brown.edu
cme-learning.brown.edu
illiad.brown.edu
logiscorp.ch
cdn-test.battlefields.org
directory.cis-dev.brown.edu
vaina.club
citeak.multidevcom.uaf.edu
cluster3.technolutions.net
pdctrackcit.services.brown.edu
bannernav.cis-dev.brown.edu
josiah.brown.edu
pli2002.cs.brown.edu
qbmcssocit.ad.brown.edu
5656540782526464-fe4.pantheonsite.io
continuingeducation.brown.edu
lists.cs.brown.edu
franck.engin.brown.edu
publichealth.brown.edu
serre-lab.clps.brown.edu
chns120.courseresource.yale.edu
*.jupyter.brown.edu
crm-qa.advancement.brown.edu
systems-git.cs.brown.edu
www.genialinfo.com
proteinarium.brown.edu
africana.brown.edu
goedel.stronghold.brown.edu
5750683647082496-fe3.pantheonsite.io
webapps.cis-qas.brown.edu
mediacapture.brown.edu
reslife.brown.edu
sni.cloudflaressl.com
medicine.at.brown.edu
5750683647082496-fe3.pantheonsite.io
revproxy.brown.edu
emergency.brown.edu
frpreq.brown.edu
bejih.com
sni.cloudflaressl.com
i2s.brown.edu
docs.ccv.brown.edu
library.brown.edu
www.clarkxie.com
bgtlab.econ.brown.edu
pli2002.cs.brown.edu
med.brown.edu
www.cs.brown.edu
livestream.brown.edu
chns168.courseresource.yale.edu
rosettastone.brown.edu
web-auth.brown.edu
franck.engin.brown.edu
5644979804307456-fe3.pantheonsite.io
compbio.cs.brown.edu
test.clinical-psychology.med.brown.edu
seekdeep.brown.edu
giving.brown.edu
tramcit1.ad.brown.edu
dark.cs.brown.edu
pldi14-aec.cs.brown.edu
facgov.brown.edu
canvas.brown.edu
app.icerm.brown.edu
icfp2002.cs.brown.edu
pnesscan1cit.net.brown.edu
pfmgisappcit.ad.brown.edu
tlfb.brown.edu
club.kjzz.org
newton.math.brown.edu
pfmgiswbcit.ad.brown.edu
software.cs.brown.edu
xrootd.brux11.hep.brown.edu
neuroscience.brown.edu
dev.college.brown.edu
bejih.com
idmreg.cis-qas.brown.edu
5656540782526464-fe4.pantheonsite.io
*.cs.brown.edu
ucexpresse.uc.brown.edu
5656540782526464-fe4.pantheonsite.io
webgazer.cs.brown.edu
familyweekend.brown.edu
image.ma.mirashiru.dai-ichi-life.co.jp
particleastro.brown.edu
sni.cloudflaressl.com
tls.automattic.com
pampcit1.ad.brown.edu
5750683647082496-fe3.pantheonsite.io
2020.brown.edu
cluster3.technolutions.net
5656540782526464-fe4.pantheonsite.io
sni.cloudflaressl.com
blug.brown.edu
remotion.cs.brown.edu
blog.cs.brown.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mturk.cs.brown.edu
cme-learning.brown.edu
illiad.brown.edu
logiscorp.ch
cdn-test.battlefields.org
directory.cis-dev.brown.edu
vaina.club
citeak.multidevcom.uaf.edu
cluster3.technolutions.net
pdctrackcit.services.brown.edu
bannernav.cis-dev.brown.edu
josiah.brown.edu
pli2002.cs.brown.edu
qbmcssocit.ad.brown.edu
5656540782526464-fe4.pantheonsite.io
continuingeducation.brown.edu
lists.cs.brown.edu
franck.engin.brown.edu
publichealth.brown.edu
serre-lab.clps.brown.edu
chns120.courseresource.yale.edu
*.jupyter.brown.edu
crm-qa.advancement.brown.edu
systems-git.cs.brown.edu
www.genialinfo.com
proteinarium.brown.edu
africana.brown.edu
goedel.stronghold.brown.edu
5750683647082496-fe3.pantheonsite.io
webapps.cis-qas.brown.edu
mediacapture.brown.edu
reslife.brown.edu
sni.cloudflaressl.com
medicine.at.brown.edu
5750683647082496-fe3.pantheonsite.io
revproxy.brown.edu
emergency.brown.edu
frpreq.brown.edu
bejih.com
sni.cloudflaressl.com
i2s.brown.edu
docs.ccv.brown.edu
library.brown.edu
www.clarkxie.com
bgtlab.econ.brown.edu
pli2002.cs.brown.edu
med.brown.edu
www.cs.brown.edu
livestream.brown.edu
chns168.courseresource.yale.edu
rosettastone.brown.edu
web-auth.brown.edu
franck.engin.brown.edu
5644979804307456-fe3.pantheonsite.io
compbio.cs.brown.edu
test.clinical-psychology.med.brown.edu
seekdeep.brown.edu
giving.brown.edu
tramcit1.ad.brown.edu
dark.cs.brown.edu
pldi14-aec.cs.brown.edu
facgov.brown.edu
canvas.brown.edu
app.icerm.brown.edu
icfp2002.cs.brown.edu
pnesscan1cit.net.brown.edu
pfmgisappcit.ad.brown.edu
tlfb.brown.edu
club.kjzz.org
newton.math.brown.edu
pfmgiswbcit.ad.brown.edu
software.cs.brown.edu
xrootd.brux11.hep.brown.edu
neuroscience.brown.edu
dev.college.brown.edu
bejih.com
idmreg.cis-qas.brown.edu
5656540782526464-fe4.pantheonsite.io
*.cs.brown.edu
ucexpresse.uc.brown.edu
5656540782526464-fe4.pantheonsite.io
webgazer.cs.brown.edu
Certificate
The complete raw certificate details for app.icerm.brown.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIQf6h3S/15UtiKhV0bdOVOlzANBgkqhkiG9w0BAQsFADB2 MQswCQYDVQQGEwJVUzELMAkGA1UECBMCTUkxEjAQBgNVBAcTCUFubiBBcmJvcjES MBAGA1UEChMJSW50ZXJuZXQyMREwDwYDVQQLEwhJbkNvbW1vbjEfMB0GA1UEAxMW SW5Db21tb24gUlNBIFNlcnZlciBDQTAeFw0xNjA4MTIwMDAwMDBaFw0xOTA4MTIy MzU5NTlaMIGzMQswCQYDVQQGEwJVUzEOMAwGA1UEERMFMDI5MTIxCzAJBgNVBAgT AlJJMRMwEQYDVQQHEwpQcm92aWRlbmNlMRkwFwYDVQQJExBCcm93biBVbml2ZXJz aXR5MRkwFwYDVQQKExBCcm93biBVbml2ZXJzaXR5MR4wHAYDVQQLExVBY2FkZW1p Y3MgRGVwYXJ0bWVudHMxHDAaBgNVBAMTE2FwcC5pY2VybS5icm93bi5lZHUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn29RTKbkOKQh9veGRI/mm2JP/ ceCLEA14bHrJbapg5gtXuwUx8EcFj2GczZ2+54ph17/mkxATwwHDlyt5KuLVSgUn 3gHj/ZijfC02ogzGMHCr+PaURMIFlUhocFCN6HFpzMVUJ0AQphPzZ7FX0sSvmfg8 3y6tZsr8tt2HhQnEgnrP2Yof7vfDl9PfpiLa7AFzeJmnLunOob3ZRD0oDr54WHNd gEVRBtI0QS/6L+OoX2rAmHNrJaieUBJyB/L3r25puwExUZ2wRA6n99T47EkKuiT7 c6TwBXhknlICWmUDNbIHG9ToXTwR/xmFbT1Llf5OAamkPboS8HrxTnCCQHvdAgMB AAGjggHHMIIBwzAfBgNVHSMEGDAWgBQeBaN3j2yW4luHS6a0hqxxAAznODAdBgNV HQ4EFgQUJFtaHFTvsabs49sRs8nsYEJ6ZJAwDgYDVR0PAQH/BAQDAgWgMAwGA1Ud EwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGcGA1UdIARg MF4wUgYMKwYBBAGuIwEEAwEBMEIwQAYIKwYBBQUHAgEWNGh0dHBzOi8vd3d3Lmlu Y29tbW9uLm9yZy9jZXJ0L3JlcG9zaXRvcnkvY3BzX3NzbC5wZGYwCAYGZ4EMAQIC MEQGA1UdHwQ9MDswOaA3oDWGM2h0dHA6Ly9jcmwuaW5jb21tb24tcnNhLm9yZy9J bkNvbW1vblJTQVNlcnZlckNBLmNybDB1BggrBgEFBQcBAQRpMGcwPgYIKwYBBQUH MAKGMmh0dHA6Ly9jcnQudXNlcnRydXN0LmNvbS9JbkNvbW1vblJTQVNlcnZlckNB XzIuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMB4G A1UdEQQXMBWCE2FwcC5pY2VybS5icm93bi5lZHUwDQYJKoZIhvcNAQELBQADggEB ADj+jU0JSAUZB2f3L1dNDnGnIYa1gBU4qW779k1bq/Cq08+68vC++b58U7proli0 LMEFiCN0UBqIeWX0BgCpdlTsk3ZpmRPqxQbTBN/o/so4BXY8UrmpXcEiVozh5rJv TwF5JeQdIk4R9kmQmd864jfP9sJF/XHP7KYlnF0p5QtzBsDNrg1vjN+FQ+JN+BF8 hCctwJXFB7vfYwl0hupT1+PZCsRs9NwyqLobs0PZbJyfYGh/jzZdVE4W9tjMeK9w vTrk8Q+leFl5u7E4LmWpktLyFnRknXnhfuw0Zf3c/7Cl0+UwVfjs3+Rdi3g3U3DH 8kvZaLk1NgQP02gF0E1FAMw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59vUUym5DikIfb3hkSP5 ptiT/3HgixANeGx6yW2qYOYLV7sFMfBHBY9hnM2dvueKYde/5pMQE8MBw5creSri 1UoFJ94B4/2Yo3wtNqIMxjBwq/j2lETCBZVIaHBQjehxaczFVCdAEKYT82exV9LE r5n4PN8urWbK/Lbdh4UJxIJ6z9mKH+73w5fT36Yi2uwBc3iZpy7pzqG92UQ9KA6+ eFhzXYBFUQbSNEEv+i/jqF9qwJhzayWonlAScgfy969uabsBMVGdsEQOp/fU+OxJ Crok+3Ok8AV4ZJ5SAlplAzWyBxvU6F08Ef8ZhW09S5X+TgGppD26EvB68U5wgkB7 3QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 169686680964219568756485863548935032471 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02912' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Providence' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brown University' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brown University' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Academics Departments' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.icerm.brown.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29269450361519035332532779497596771419847030864290853297047069691343816220927417862333966725321046892122298468778048383685840116894436556353575379232459010698996779783191469764987871843330758925604379167786274133912802017490085444195647652495022486755824833460615939456463754185355821213245451887571651890976336102257239468016116042891838457690287689732720071949006151134606961183398811117268101284406981458455348905999606074464368522688637360497956020343069967487569853266421107859029956277542630272257103970060510456864061538532040308976207990838717988571250529676346248974413469765504163973103525928951608846089181 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 245b5a1c54efb1a6ece3db11b3c9ec60427a6490 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.icerm.brown.edu' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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