myaccount-test.ucdenver.edu

- University of Colorado Denver -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number a1:02:7a:15:7d:7f:f7:cd:cd:0e:b0:32:43:08:95:6b was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Colorado Denver

Organization: University of Colorado Denver
State / Province: Colorado
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): a1:02:7a:15:7d:7f:f7:cd:cd:0e:b0:32:43:08:95:6b
Serial Number (int): 214018568071691913523751745292853613931
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e4:cf:fd:6f:6d:0e:b5:12:03:63:9a:fc:b5:0b:52:9d:33:7a:a0:ee
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 14:f9:81:7c:29:ab:ba:91:3d:67:f1:13:bb:20:d2:6b:1a:17:e7:d2
Fingerprint (sha256): 06:b8:ee:23:28:d7:c6:71:48:fa:ee:d3:a8:78:b6:17:ad:7f:08:03:5d:23:a2:1e:2f:33:01:21:12:92:23:95

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate myaccount-test.ucdenver.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for myaccount-test.ucdenver.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

myaccount-test.ucdenver.edu
myaccount-test.cuanschutz.edu

Other certificates including the domain name ucdenver.edu

(limited to 100 certificates)
profiles.ucdenver.edu
cluster3.technolutions.net
architectureandplanning.ucdenver.edu
skyline.ucdenver.edu
waf2.offcampuspartners.com
tls.automattic.com
myaccount.ucdenver.edu
sehdforms.ucdenver.edu
webapps-int-test.ucdenver.edu
buildinginspections.ucdenver.edu
forms.ucdenver.edu
citeak.multidevcom.uaf.edu
skyline.ucdenver.edu
da-prod.sdm.ucdenver.edu
cluster3.technolutions.net
source.ucdenver.edu
ucdenver.edu
gem.business.ucdenver.edu
chns120.courseresource.yale.edu
profiles.ucdenver.edu
remote.ucdenver.edu
educationsurvey.ucdenver.edu
survey.alumni.ucdenver.edu
tls.automattic.com
dc-acs.ucdenver.edu
dhharedcap.ucdenver.edu
dev.wellness.yale.edu
n002.offcampuspartners.com
n002.offcampuspartners.com
vpn.ucdenver.edu
gp-vpn.ucdenver.edu
cuoform.ucdenver.edu
cuonlineblog.ucdenver.edu
eap.international.ucdenver.edu
offcampushousing.fau.edu
live.ucdavis.edu
ogc.ucdenver.edu
application.admissions.ucdenver.edu
hslibraryguides.ucdenver.edu
chns168.courseresource.yale.edu
dhharedcap.ucdenver.edu
n002.offcampuspartners.com
mycusouth.atelinttest.ucdenver.edu
psoa-ucd.ucdenver.edu
murpjobs.ucdenver.edu
liberalarts.ss.pacific.edu
dev.embody.yale.edu
club.kjzz.org
phenogen.ucdenver.edu
offcampushousing.fau.edu
oncoreval.researchadmin.ucdenver.edu
myaccount-test.ucdenver.edu
dev.wellness.yale.edu
offcampushousing.fau.edu
idfinder.ucdenver.edu
oncorerss.researchadmin.ucdenver.edu
gem.business.ucdenver.edu
connectmeeting.ucdenver.edu
cytometry.som.ucdenver.edu
fe-26.ucdenver.edu
mydesktop.ucdenver.edu
cuonlineblog.ucdenver.edu
v-fe26-2017.ucdenver.edu
mybabymymove.ucdenver.edu
webapps-test.ucdenver.edu
cuonline.edu
ucdenver-wireless.ucdenver.edu
clinicaltrials.ucdenver.edu
cluster3.technolutions.net
208.lsnc.net
remote.ucdenver.edu
ldap-ad.ucdenver.edu
forms.ucdenver.edu
live.bme.cornell.edu
hslibraryguides.ucdenver.edu
n002.offcampuspartners.com
n002.offcampuspartners.com
oitsupport.ucdenver.edu
educationsurvey.ucdenver.edu
onlinelearning.ucdenver.edu
legacy.hq.philabundance.org
banking-business-review.com
som.ucdenver.edu
remote.ucdenver.edu
application.admissions.ucdenver.edu
news.ucdenver.edu
connect.iadb.org
www1.ucdenver.edu
jira.ucdenver.edu
star.ucdenver.edu
hsl-ezproxy.ucdenver.edu
5637869485948928-fe4.pantheonsite.io
n002.offcampuspartners.com
auth-prod.ucdenver.edu
virtue.ucdenver.edu
offcampushousing.fau.edu
som.ucdenver.edu
cophin.ucdenver.edu
impulse.ucdenver.edu
cluster3.technolutions.net

Certificate

The complete raw certificate details for myaccount-test.ucdenver.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArw8M5RGkYgGwrpeSmbFX
wiK3QlGxcvocZ8S47NqDnxvy1T25vtORElxHGE0PypX1ncyLeM7nYD8TLoSdTXoI
7wWZE23HCa/inKxpFxm1ccHBOHe4RxdX3AMNmS1eAd5i4Y3gRXHUHznzDvP7BfZ5
zwGFY/6WnMfgfCv3MWN892tGnHWBHfzWq9R2YSezQhxLpuQBraT4yR4lK/YCE1ZO
k13s6T/NJWKi/Wfuy1WFvif5cxmiNy05IxK8TxkBq9NaUwGy3jASl9V6IyKMWu2X
FuI6s3E7hWWkxF5EnPBlIg/qBaAHyCTq2lJ72adItV5tTjvV+KDCrJEurSgfkhM9
t93b+0pg+YPqgUn1d45VK7kuZmZuytPOi8YZUR8txN1d9NbLfOmSfMsPPbvym4k9
/TC7E4ZM5Rh67LqTKvDxktpQLKGcACFhuQ5kL2fFG4Od6Uhhb0hC6uoVlwWodCWr
maRiOVT0AIJw8gGeXEfEaugfdH1dK4GqO/7NMpZ0MrgcVEPxoo6lYgKR3RoJgbwa
AfHhslenDOxu4bnp8Gp8f30QWH1pSs6JUg3BMUoJHL5PRqBRvlw0u52bn0duiUpB
h3MtNydcvNVIrOVhkbtwWiuOhEQq51vZkHhFVooJ0jAvxA1Hus4nLUZm8lWF2+pd
FOjbC3aSXAc1CQt2dGf1y/8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 214018568071691913523751745292853613931
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Colorado Denver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'myaccount-test.ucdenver.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714177556254983262705163526151824503993623163741900750655736545150809919170121061012671196400495623210958444925694031154961167246120955567497671479035027336244362941086672971470559521781575775963700238931105060110663177482377753505038884340763513706240116652150631193920063471570869648022975983808865403009151121787873878239443790603831358339178986586169495477800477480175454355205292927201270857946076498956097811442199887644893452633367226137827991510745304311678558619225358154388656867608632822259507940822477216739411049396403922279536133687443782585150795211897377130084432611545609595852946484037482834899995206081135481418118766325654834011197498402763041119916509059853110836313455534519297200354318314130772558252143471692857844204766707721325932658151299082419906218990935915441582330619200694109417346094691443471887823422168771138438969678295238909766641754701086587780194267358581051651005363524708665688296201841435742089051619474795894890988635126945917020357776160339525721088220300043669403704361322405055916395646348463173876056251704989413306421793612621333594022721985142599333495628351569062837673421382873998014094951314529987272574895195698132365324300705745840421114024997784717920121355125453222128326659071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e4cffd6f6d0eb51203639afcb50b529d337aa0ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount-test.ucdenver.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount-test.cuanschutz.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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