catalog.grinnell.edu
- Grinnell College -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 05:10:77:21:7e:3a:de:d3:e4:1c:f9:db:f5:63:64:ef was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Grinnell College
Organization:
Grinnell College
State / Province:
Iowa
Locality: Grinnell
Country: US
Locality: Grinnell
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:10:77:21:7e:3a:de:d3:e4:1c:f9:db:f5:63:64:efSerial Number (int): 6731632988999615335165724781036397807
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 4a:3d:7b:27:a0:4f:6a:4b:f3:d5:26:66:d3:70:c1:96:1d:96:59:c2
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): 8b:10:13:e1:d7:8b:92:5d:82:d9:af:fc:66:6a:ad:61:1b:f3:0e:21
Fingerprint (sha256): 06:9d:fa:a7:f8:0f:91:a6:67:ec:e9:04:ae:43:74:00:d2:c6:37:9f:47:df:51:70:47:15:d2:95:1a:8d:ed:34
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate catalog.grinnell.edu
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for catalog.grinnell.edu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
catalog.grinnell.edu
m.catalog.grinnell.edu
m.catalog.grinnell.edu
Other certificates including the domain name grinnell.edu
(limited to 100 certificates)
shiny.grinnell.edu
cluster.technolutions.net
sites.grinnell.edu
lgbtoralhistories.sites.grinnell.edu
www.grinnell.edu
growingbeisbol.sites.grinnell.edu
magazine.grinnell.edu
idp.grinnell.edu
dataweek.sites.grinnell.edu
securedns1.planmygift.org
fall2018.museumstudies.sites.grinnell.edu
labs.grinnell.edu
dansinykin.sites.grinnell.edu
absentshakespeare.sites.grinnell.edu
koreanatgrinnell.sites.grinnell.edu
summer2017.digitalbridgestodance.sites.grinnell.edu
digital.grinnell.edu
MAILFILTER.GRINNELL.EDU
edge-uc2.peopleadmin.com
wilsonspark.sites.grinnell.edu
haenfler.sites.grinnell.edu
golf.grinnell.edu
haenfler.sites.grinnell.edu
confrontinghate.sites.grinnell.edu
hum101.sites.grinnell.edu
deathsexandmoney.sites.grinnell.edu
cluster.technolutions.net
cito.sites.grinnell.edu
travel.global.grinnell.edu
yoosebj.sites.grinnell.edu
cluster.technolutions.net
vpn.grinnell.edu
codecamp.sites.grinnell.edu
uconnectlabs.com
cluster.technolutions.net
comm.sites.grinnell.edu
edge-uc2.peopleadmin.com
toddarmstrong.sites.grinnell.edu
bferguson.sites.grinnell.edu
dla.sites.grinnell.edu
gcdata.sites.grinnell.edu
www-temp.cs.grinnell.edu
maipvu.sites.grinnell.edu
bookstore.grinnell.edu
lewiscar.sites.grinnell.edu
sandbox.digitalbridgestodance.sites.grinnell.edu
absentshakespeare.sites.grinnell.edu
discoveringdiaries.sites.grinnell.edu
golf.grinnell.edu
racingiowa.sites.grinnell.edu
mapping.calebelfenbein.sites.grinnell.edu
cluster.technolutions.net
vostinar.sites.grinnell.edu
remotehelp.grinnell.edu
loganmlee.sites.grinnell.edu
securedns1.planmygift.org
catalog.grinnell.edu
www-temp.cs.grinnell.edu
omeka-s.grinnell.edu
digitalbridgestodance.sites.grinnell.edu
edge_uc2.peopleadmin.com
pioneers.grinnell.edu
securedns1.planmygift.org
anger.sites.grinnell.edu
growingbeisbol.sites.grinnell.edu
isle-stage.grinnell.edu
golf.grinnell.edu
dataweek.sites.grinnell.edu
pioneerweekend.sites.grinnell.edu
summer2017.digitalbridgestodance.sites.grinnell.edu
cluster.technolutions.net
unclesam.sites.grinnell.edu
idp.grinnell.edu
his100.sarahjpurcell.sites.grinnell.edu
mailfilter.grinnell.edu
organicchem.sites.grinnell.edu
eriksimpson.sites.grinnell.edu
securedns1.planmygift.org
pioneers.grinnell.edu
idp.grinnell.edu
absentshakespeare.sites.grinnell.edu
grinnell.edu
unclesam.sites.grinnell.edu
stat2games.sites.grinnell.edu
researchcomputing.sites.grinnell.edu
pioneers.grinnell.edu
dlac.grinnell.edu
cluster.technolutions.net
lavermark.sites.grinnell.edu
sga.grinnell.edu
oxs.grinnell.edu
digital-crossroads.fredorivera.sites.grinnell.edu
qualdata.sites.grinnell.edu
securedns1.planmygift.org
eriksimpson.sites.grinnell.edu
pioneers.grinnell.edu
uconnectlabs.com
steveandrews.sites.grinnell.edu
dansinykin.sites.grinnell.edu
BBLMSTEST.grinnell.edu
cluster.technolutions.net
sites.grinnell.edu
lgbtoralhistories.sites.grinnell.edu
www.grinnell.edu
growingbeisbol.sites.grinnell.edu
magazine.grinnell.edu
idp.grinnell.edu
dataweek.sites.grinnell.edu
securedns1.planmygift.org
fall2018.museumstudies.sites.grinnell.edu
labs.grinnell.edu
dansinykin.sites.grinnell.edu
absentshakespeare.sites.grinnell.edu
koreanatgrinnell.sites.grinnell.edu
summer2017.digitalbridgestodance.sites.grinnell.edu
digital.grinnell.edu
MAILFILTER.GRINNELL.EDU
edge-uc2.peopleadmin.com
wilsonspark.sites.grinnell.edu
haenfler.sites.grinnell.edu
golf.grinnell.edu
haenfler.sites.grinnell.edu
confrontinghate.sites.grinnell.edu
hum101.sites.grinnell.edu
deathsexandmoney.sites.grinnell.edu
cluster.technolutions.net
cito.sites.grinnell.edu
travel.global.grinnell.edu
yoosebj.sites.grinnell.edu
cluster.technolutions.net
vpn.grinnell.edu
codecamp.sites.grinnell.edu
uconnectlabs.com
cluster.technolutions.net
comm.sites.grinnell.edu
edge-uc2.peopleadmin.com
toddarmstrong.sites.grinnell.edu
bferguson.sites.grinnell.edu
dla.sites.grinnell.edu
gcdata.sites.grinnell.edu
www-temp.cs.grinnell.edu
maipvu.sites.grinnell.edu
bookstore.grinnell.edu
lewiscar.sites.grinnell.edu
sandbox.digitalbridgestodance.sites.grinnell.edu
absentshakespeare.sites.grinnell.edu
discoveringdiaries.sites.grinnell.edu
golf.grinnell.edu
racingiowa.sites.grinnell.edu
mapping.calebelfenbein.sites.grinnell.edu
cluster.technolutions.net
vostinar.sites.grinnell.edu
remotehelp.grinnell.edu
loganmlee.sites.grinnell.edu
securedns1.planmygift.org
catalog.grinnell.edu
www-temp.cs.grinnell.edu
omeka-s.grinnell.edu
digitalbridgestodance.sites.grinnell.edu
edge_uc2.peopleadmin.com
pioneers.grinnell.edu
securedns1.planmygift.org
anger.sites.grinnell.edu
growingbeisbol.sites.grinnell.edu
isle-stage.grinnell.edu
golf.grinnell.edu
dataweek.sites.grinnell.edu
pioneerweekend.sites.grinnell.edu
summer2017.digitalbridgestodance.sites.grinnell.edu
cluster.technolutions.net
unclesam.sites.grinnell.edu
idp.grinnell.edu
his100.sarahjpurcell.sites.grinnell.edu
mailfilter.grinnell.edu
organicchem.sites.grinnell.edu
eriksimpson.sites.grinnell.edu
securedns1.planmygift.org
pioneers.grinnell.edu
idp.grinnell.edu
absentshakespeare.sites.grinnell.edu
grinnell.edu
unclesam.sites.grinnell.edu
stat2games.sites.grinnell.edu
researchcomputing.sites.grinnell.edu
pioneers.grinnell.edu
dlac.grinnell.edu
cluster.technolutions.net
lavermark.sites.grinnell.edu
sga.grinnell.edu
oxs.grinnell.edu
digital-crossroads.fredorivera.sites.grinnell.edu
qualdata.sites.grinnell.edu
securedns1.planmygift.org
eriksimpson.sites.grinnell.edu
pioneers.grinnell.edu
uconnectlabs.com
steveandrews.sites.grinnell.edu
dansinykin.sites.grinnell.edu
BBLMSTEST.grinnell.edu
Certificate
The complete raw certificate details for catalog.grinnell.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIH0TCCBrmgAwIBAgIQBRB3IX463tPkHPnb9WNk7zANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjA4MzEwMDAwMDBa Fw0yMzA5MDUyMzU5NTlaMGkxCzAJBgNVBAYTAlVTMQ0wCwYDVQQIEwRJb3dhMREw DwYDVQQHEwhHcmlubmVsbDEZMBcGA1UEChMQR3Jpbm5lbGwgQ29sbGVnZTEdMBsG A1UEAxMUY2F0YWxvZy5ncmlubmVsbC5lZHUwggIiMA0GCSqGSIb3DQEBAQUAA4IC DwAwggIKAoICAQCzgFceEG/z/ExGkCwQwN4w+KpEmNjKH4bL8zrTPYlRf0AB0Z7E oBtCjF1EWPazTO4Dy9NK16nnYtCxUq64qwqH6bjkxf+1dQFoXAxSCBtOIoaSCGnn DxLCPmYopZNZmDJ4qFz3jXiVb3EzDo22/XcXxieA4fXAO3WzHs4GL74VOCx9keM5 Wg+ypq4dzbcUBK4LJql9B4W1z9zWgHnZ0fXtxv99KEe+GbqTOIkZMtI7maPivsFr u82FXqP14hummGT9YhvL22RW1EIyAAGVpYV/deLLvzK7PgKCAKEKai5XwfhqeXN9 Z4hZsH/k7n5pZptS1SxLvuLZeaNYDdizlv0lfcWNrRXk25vLNf70+rqeGp+NB9X1 Nk/Cn5eU1mbbDi3g1uZpV31soVA/FGNAV5aiERXKBEwBVARt0DHRGX9JSgCq1lbO wok0Lyo90Tz8K4AOCz++sQqgQ+/iB+vpVjtjjlXnbT9cCvq2hVBQXwXOvkSok/Vp 6AIhtXX65zb3z+sl7/u9gYPJiTL3UWFhDwS+i0EdRiS1nrE7MtysbCzh6hA3tW7E FuOu04hM3WI1/xVQDEfrrjt1ABECATp2iI76oA/Ft9Kbs5rUYQiVq2Kw8xmetuof 8L+EZOxNBHemxgbTqIad6fhbDZrSwRCs9qb719mSU9MLvgNIrJ+ok68+AwIDAQAB o4IDjTCCA4kwHwYDVR0jBBgwFoAUt2ui6qiqhIx56rTaD5iyxZV2ufQwHQYDVR0O BBYEFEo9eyegT2pL89UmZtNwwZYdllnCMDcGA1UdEQQwMC6CFGNhdGFsb2cuZ3Jp bm5lbGwuZWR1ghZtLmNhdGFsb2cuZ3Jpbm5lbGwuZWR1MA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgY8GA1UdHwSBhzCBhDBA oD6gPIY6aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hB MjU2MjAyMENBMS00LmNybDBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29t L0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00LmNybDA+BgNVHSAENzA1MDMG BmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9D UFMwfwYIKwYBBQUHAQEEczBxMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp Y2VydC5jb20wSQYIKwYBBQUHMAKGPWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNv bS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQwCQYDVR0TBAIwADCC AX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcA6D7Q2j71BjUy51covIlryQPTy9ER a+zraeF3fW0GvW4AAAGC9IYlaQAABAMASDBGAiEAj8x5eDkmOl6zhsO76TWUf1ZS jlXmd+cfq/outkm6sz4CIQD8sPee5+POqrEM0nK6qHgAsV3S0oEYCAUUot5Ri64g wAB1ADXPGRu/sWxXvw+tTG1Cy7u2JyAmUeo/4SrvqAPDO9ZMAAABgvSGJUsAAAQD AEYwRAIgCExN02zJBnaG+aGXEWdPs8ijtp2GxDM6smS8GVUqE8MCIHD6+5jVRTw3 79PIrVhLnVNetMcGL8XF0L8ONvKo3KK7AHcAs3N3B+GEUPhjhtYFqdwRCUp5LbFn DAuH3PADDnk2pZoAAAGC9IYlsgAABAMASDBGAiEA9ow29wOBPCD4H054HQq585XU HC7va8wbpTSMpWl4w4MCIQCYG+x71v3rAs+XFCxm9+HzLx/RhtlT5HOiTSUx2qdu 1TANBgkqhkiG9w0BAQsFAAOCAQEAtANOBR+R68nf5vInWezsl4D+spj5jw7H27iK W3CKasyJGauWhCv6o9lrgDlRJYD5e7SYVW4S9tIGKLSK7B8utjB/kmD6vLu7zkF2 Q5TR4VjwMBoncgoc07Is+BPvQr7+Mu8ExK/gY4WOoD4XHVs+Tqve2hGhCZScUqrT xDRIh0R8k/D1wNJYzMMMAM1w0DIIIFgtOkI6XEUz1XFGQpLWqEfMHiFuadqkH4bk wKJcXmJ3ALApIGQqtiW74/SoqKRHHc1VLww4dBfDN8W1um9328L+3zgNpLbjqt7r +SynQqFBbxwf5vF4fxK/XKQpEiD0Qyh1RNF6aVlnrCYwfzKPPQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs4BXHhBv8/xMRpAsEMDe MPiqRJjYyh+Gy/M60z2JUX9AAdGexKAbQoxdRFj2s0zuA8vTStep52LQsVKuuKsK h+m45MX/tXUBaFwMUggbTiKGkghp5w8Swj5mKKWTWZgyeKhc9414lW9xMw6Ntv13 F8YngOH1wDt1sx7OBi++FTgsfZHjOVoPsqauHc23FASuCyapfQeFtc/c1oB52dH1 7cb/fShHvhm6kziJGTLSO5mj4r7Ba7vNhV6j9eIbpphk/WIby9tkVtRCMgABlaWF f3Xiy78yuz4CggChCmouV8H4anlzfWeIWbB/5O5+aWabUtUsS77i2XmjWA3Ys5b9 JX3Fja0V5NubyzX+9Pq6nhqfjQfV9TZPwp+XlNZm2w4t4NbmaVd9bKFQPxRjQFeW ohEVygRMAVQEbdAx0Rl/SUoAqtZWzsKJNC8qPdE8/CuADgs/vrEKoEPv4gfr6VY7 Y45V520/XAr6toVQUF8Fzr5EqJP1aegCIbV1+uc298/rJe/7vYGDyYky91FhYQ8E votBHUYktZ6xOzLcrGws4eoQN7VuxBbjrtOITN1iNf8VUAxH6647dQARAgE6doiO +qAPxbfSm7Oa1GEIlatisPMZnrbqH/C/hGTsTQR3psYG06iGnen4Ww2a0sEQrPam +9fZklPTC74DSKyfqJOvPgMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6731632988999615335165724781036397807 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Iowa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grinnell' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grinnell College' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'catalog.grinnell.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 732301533307458815955253410881714079635729077923941367125204930530195783330080914818678521765746847601403198349122916967191577068397915735223144341892596295554446516589542955094379564808311029645449303068732587887734328957670446857752315378212424803340812933046774297382920981154896583629074689855892378361365354497238756060873072525215475156334001308579887579672043413720038046489306083120920787952358471565785691056093474605171249281706704371127520489976841491851014616132669079852493510291040506939308831714860588128955225356558054170319402510319786171094957682822817689597012521215663482387722539766242168065100917096217252541938271270803907046852714886370204640524302050814881648904467658745566772573723275518725658174233934445465515459911314086414970730527128383223806382869523705841515205366067746536683040109718095692183948461713141320930351167964412613936002119588166573523290580008776862626665326951597904912409334086026338326294835465008107873807280598466802271304463585287173539514144917590551633593881043330091319885416227993259087668245035301199467440190755682369831137812675324365069372114281788854766442047314943649443783289401253965036129783566745149078686041240234364817973184416727079122524616070809561947247164931 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4a3d7b27a04f6a4bf3d52666d370c1961d9659c2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.grinnell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.catalog.grinnell.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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