dhs2.ca.sandia.gov

- Sandia National Laboratories -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 18:8e:46:91:46:14:a1:19:e8:22:6e:73:b2:ad:3a:ac was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sandia National Laboratories

Organization: Sandia National Laboratories
Organization unit: Hosted by Sandia National Laboratories
Address: 1515 Eubank Blvd SE
Postal code: 87123
State / Province: NM
Locality: Albuquerque
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 18:8e:46:91:46:14:a1:19:e8:22:6e:73:b2:ad:3a:ac
Serial Number (int): 32640209331194636640987171955992771244
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 50:98:16:dd:a5:f3:5b:ce:93:90:1b:d3:59:c9:42:de:e7:be:ec:15
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 90:60:ed:79:a3:00:1f:c3:50:46:99:7d:68:e8:4a:26:e0:e0:dd:4d
Fingerprint (sha256): 06:34:44:16:23:0d:b4:41:ec:56:99:e6:b0:47:fc:9a:f1:57:d8:43:99:ba:3b:af:6c:76:b1:28:3e:42:db:44

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate dhs2.ca.sandia.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dhs2.ca.sandia.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dhs2.ca.sandia.gov
www.dhs2.ca.sandia.gov

Other certificates including the domain name sandia.gov

(limited to 100 certificates)
remote.sandia.gov
as1013snllx.sandia.gov
al.sandia.gov
fmdiri1.webdev.sandia.gov
h2zilla.sandia.gov
cchdsupport-son.sandia.gov
as3101snllx.sandia.gov
remote-ca.sandia.gov
ccmelcor.sandia.gov
esheta-dev.sandia.gov
accountpasswords.sandia.gov
ws1682lxz.sandia.gov
xfracas.sandia.gov
rocket.web.sandia.gov
hpcn-www.ca.sandia.gov
ebid-search.sandia.gov
slycat-scn.sandia.gov
rpwmesh-web2.sandia.gov
swas-q.sandia.gov
testing-dev.sandia.gov
kscredrepo.webdev.sandia.gov
msntstsvr.webdev.sandia.gov
accountpasswords.sandia.gov
vast.sandia.gov
primavera.webqual.sandia.gov
xfracas.sandia.gov
isp.sandia.gov
nts.webdev.sandia.gov
psc03nma.sandia.gov
eimsiis.sandia.gov
nagios.gibson.sandia.gov
as3012snllx.sandia.gov
cobrap6jobs.webqual.sandia.gov
as1019snllx.sandia.gov
oud1.webdev.sandia.gov
ebprod.sandia.gov
safer.sandia.gov
wls122emw3.web.sandia.gov
ebwebe2.web.ca.sandia.gov
terminal.web.ca.sandia.gov
catest4.webdev.ca.sandia.gov
foobarmsn.webdev.sandia.gov
cbapce2.webdev.sandia.gov
cert.sandia.gov
wls122emw1.web.sandia.gov
as1008snllx.sandia.gov
radtrain.sandia.gov
gms-webhooks.sandia.gov
*.sandia.gov
datasea-qual.sandia.gov
sregistry.ca.sandia.gov
ebapce2.webdev.ca.sandia.gov
ux-registry.sandia.gov
nwisapiqual.sandia.gov
rtc.sandia.gov
met-eoc.sandia.gov
ick.sandia.gov
vzadmi1.webdev.sandia.gov
tagnsdd.sandia.gov
ws451snlnt.sandia.gov
wildfly27psf.webdev.sandia.gov
*.sandia.gov
ickdev.sandia.gov
msnfoobar.webdev.sandia.gov
wls122emw3.webqual.sandia.gov
moveitmobile-d.sandia.gov
mlserver-dev.sandia.gov
wcvis-q.sandia.gov
pointtest.ca.sandia.gov
rp-linux01.ca.sandia.gov
supplierportal-qual.sandia.gov
dancer.ca.sandia.gov
msntstrostra.webdev.sandia.gov
fmsoai1.webdev.sandia.gov
caf.web.sandia.gov
prodtools.sandia.gov
dhs2.ca.sandia.gov
ebid-role.sandia.gov
eo12333-qual.sandia.gov
sip.sandia.gov
vnge.sandia.gov
foiax.sandia.gov
sccmexternal.sandia.gov
lb-qual-2.sandia.gov
dancer.ca.sandia.gov
getridofit-p.sandia.gov
ebid-help.sandia.gov
range-vpn-1.sandia.gov
hackmd.sandia.gov
lapsmq15.webdev.sandia.gov
ebfrmi2.webdev.ca.sandia.gov
config1.ca.sandia.gov
nexus.web.sandia.gov
ebccmi1.webqual.sandia.gov
map.sandia.gov
supplierportal-dev.sandia.gov
tagnsdd.sandia.gov
fmfnr.webqual.sandia.gov
870dev.sandia.gov
nexus.web.sandia.gov

Certificate

The complete raw certificate details for dhs2.ca.sandia.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6ClzyiBRKzZw1UYoutL4
60oy1p+2QhWMSP8/1d5IavRwuUll0y0IjgvUSIhMwPGVIpycoJLMH2tD/D6isWWd
00c0d64sQHR5p+19gyIdbPOCItFaFwtckFJ2FySbqboB1kGj1Lw0fncWe6LFoZnT
S1nLkTzYyi6rx79YKi5xDteC9+xht/ajBzDkCPbMMJdM0QN31KqQ37GA2MDZvPNI
8Dfm3VaXVzaz2jy4CxBsxgkUAo6wuvqauC2162v6yFoyCzrU7cKZiKiGtO22uvK/
mOM9q/gmjxapED8YSsj8I2TRRAeMQgotXhTF4LgyEx0AdHUiIsCVcSDvRit4F8Rc
wylup4dEjS0yxbaGPHrSJP/B1aR2axSBC59a2Eydpr4t/stfdlZK4uaR49P3cSLv
TFxGdO2untJJpj6GWJaTu+N12q8VwgTAabxHFXftAwq34HiQTQ8vMaD/xB4R2lVd
wIv4xV+bYf9q16kX4XZNZBnEkERxtD6kcrdlK0kb2YAtU2OKkkEvfwxEyymhgCfk
OLnYXvPDv/6RkP483OuAXxXo1YNaWByx+DWkTeNCAFL0bBCCbxw18imyNvRggBJV
2I/OV91SfGwC/u8qT0EmA3j4T6CrG20K/lQC1R3jKsOsKssl9vHBMhzqyDUgSGeQ
DH/T5a4bJ0DPiP1K6bslfSsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32640209331194636640987171955992771244
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '87123'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Albuquerque'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1515 Eubank Blvd SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sandia National Laboratories'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Sandia National Laboratories'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dhs2.ca.sandia.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 947138012225366422162621928146894109282328380613355004847034530700247867438162200897273346085833683682246872650917189942347848734750858595324776002184364407460628114026838464219878702462625839878525867753848969514699607555847202489699491801838737123353271942368964844417153354645596573839563378211709119973043350455100033993141671156150964573137341306573256971957010731636161962046590339276270106762574611472403910372791602262644286093914445677555043114595331410329649317069465611786251632648674879881781415308177588460614128662494597597786722811414042955102118172482368156968822713443133006252784209188454168812218492814230143906418168183538296640997855096701812744822911809362852394557530849252496322218183916082213997334624642593260119530380330018372191072686495220957830122945136017700898985220106475528407193985017427691926387811776419707510859184990376504251913995549222560448925793763716877972838480917492713342773499628593276089333450333547564309269011960117939249590462273468281141942710781776574364059276056265317501655976511060590336554716079031410092787339104340860864277176050604175817275319862310053058195463224736714587429978241910904714824279243955003256691988119459735261444598382988371711383007740478943493284527403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							509816dda5f35bce93901bd359c942dee7beec15
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhs2.ca.sandia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dhs2.ca.sandia.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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