gaia.vcu.edu

- Virginia Commonwealth University -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number f1:16:1d:57:55:5d:56:26:b9:4c:f1:3d:5b:74:42:9b was issued on by Internet2.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Virginia Commonwealth University

Organization: Virginia Commonwealth University
State / Province: Virginia
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): f1:16:1d:57:55:5d:56:26:b9:4c:f1:3d:5b:74:42:9b
Serial Number (int): 320458772624200198990969442741798584987
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 0d:c2:b2:2d:c9:6f:63:16:76:b5:b4:21:62:ab:d4:51:83:d7:64:6c
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): 26:98:61:43:40:bc:08:bb:5c:05:a1:5a:0e:b5:b6:d6:c1:a6:f6:1d
Fingerprint (sha256): 06:e8:3f:40:90:05:cf:8c:20:ac:b6:35:d2:ff:59:0c:59:b8:12:29:ea:94:ba:70:8b:ec:76:65:9d:7c:3c:fd

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate gaia.vcu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gaia.vcu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gaia.vcu.edu

Other certificates including the domain name vcu.edu

(limited to 100 certificates)
v8.t4.vcu.edu
momspi-devel.vmc.vcu.edu
inb.vcu.edu
waf2.offcampuspartners.com
president.vcu.edu
interdisciplinarystudies.vcu.edu
uc.vcu.edu
focusedinquiry.vcu.edu
tisw.slwk.vcu.edu
dyn.vcu.edu
commonbook.vcu.edu
www.planning2.fmd.vcu.edu
onlinesocialwork.vcu.edu
pubapps.vcu.edu
dms.vcu.edu
aimdev.vcu.edu
ecrtprod.vcu.edu
pubinfo.vcu.edu
webdirect.vcu.edu
aimdev.vcu.edu
rampages.us
rallybound.com
uc.vcu.edu
*.stage.pharmacy.vcu.edu
ces.vcu.edu
qatar.vcu.edu
interdisciplinarystudies.vcu.edu
dms.vcu.edu
uc.vcu.edu
hastech.has.vcu.edu
obgyn.vcu.edu
interdisciplinarystudies.vcu.edu
n002.offcampuspartners.com
chipc.vcu.edu
filelocker.vcu.edu
n002.offcampuspartners.com
xymon.ucc.vcu.edu
tisw.slwk.vcu.edu
quikfm.vcu.edu
offcampushousing.fau.edu
simlabiis.vcu.edu
www.vcu.edu
info.onlinewilder.vcu.edu
obgyn.vcu.edu
ramsvpn.vcu.edu
rallybound.com
digital.library.vcu.edu
credant2.vcu.edu
interdisciplinarystudies.vcu.edu
redcap.vcu.edu
securessl-est2.tessituranetworkhost.com
clare.vcu.edu
altlab.vcu.edu
online.vcu.edu
touchnet.vcu.edu
focusedinquiry.vcu.edu
n002.offcampuspartners.com
jupiter.vcu.edu
rallybound.com
securessl-est2.tessituranetworkhost.com
clse.vcu.edu
ces.vcu.edu
securessl-est2.tessituranetworkhost.com
login.vcu.edu
apps.library.vcu.edu
adm111.vcu.edu
interdisciplinarystudies.vcu.edu
offcampushousing.fau.edu
pmdc.som.vcu.edu
vcuqise.qatar.vcu.edu
app.art.vcu.edu
shibboleth.vcu.edu
dyerlab.ces.vcu.edu
protonnew.cctr.vcu.edu
gaia.vcu.edu
cbds.vcu.edu
offcampushousing.fau.edu
filelocker.vcu.edu
clse.vcu.edu
grantsstage.research.vcu.edu
cbds.vcu.edu
www.people.vcu.edu
www.support.vcu.edu
apps.parking.vcu.edu
www.pubinfo.vcu.edu
cdc.cameras.police.vcu.edu
tasmeemarchive.com
starrez.housing.vcu.edu
ces.vcu.edu
tisw.slwk.vcu.edu
eid.vcu.edu
courseeval.vcu.edu
www.continuingstudies.vcu.edu
ces.vcu.edu
jamf.ts.vcu.edu
sdyn.vcu.edu
*.pharmacy.vcu.edu
securessl-est2.tessituranetworkhost.com
hastech.has.vcu.edu
aspen2w.vcu.edu

Certificate

The complete raw certificate details for gaia.vcu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGzTCCBTWgAwIBAgIRAPEWHVdVXVYmuUzxPVt0QpswDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCVVMxEjAQBgNVBAoTCUludGVybmV0MjEhMB8GA1UEAxMYSW5D
b21tb24gUlNBIFNlcnZlciBDQSAyMB4XDTIzMTEwMjAwMDAwMFoXDTI0MTEwMTIz
NTk1OVowYjELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMSkwJwYDVQQK
EyBWaXJnaW5pYSBDb21tb253ZWFsdGggVW5pdmVyc2l0eTEVMBMGA1UEAxMMZ2Fp
YS52Y3UuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKXUNx+u
BKsPjl+wmipXwd8un5Fqh1zUqTDHbpXo4IS2jsDZoap2sb/dPMcM0hEHfUF3+vnt
1REAh9B6o13TGjWvZjnl4Y19Ke0fAY7XNXORLECsFM8dLWlXXmVqp4lx6jCht3Et
8AsZXF0WhsLAgpt5n2OFReUsRaNTz2mbppJxJPFY9NtvCjI/+KvUOsF9JXczAk+N
z6EFp2T+uFxVXjkhPLCAir4jafhbIFBhlq9A2q1ngVUfkm2gCiyV0+GGiLND2cys
rAIilm4upFrs1qPBRzqFgBXV9zVj+p77fIrSrV+DoLVKobA7t3eX6O6fqo1JSAi2
nCgl8n1aZORuCwIDAQABo4IDGjCCAxYwHwYDVR0jBBgwFoAU70wAkqb7di5eleLJ
X4cbGdVN4tkwHQYDVR0OBBYEFA3Csi3Jb2MWdrW0IWKr1FGD12RsMA4GA1UdDwEB
/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgJnMCUwIwYIKwYBBQUHAgEWF2h0
dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjBABgNVHR8EOTA3MDWgM6Ax
hi9odHRwOi8vY3JsLnNlY3RpZ28uY29tL0luQ29tbW9uUlNBU2VydmVyQ0EyLmNy
bDBwBggrBgEFBQcBAQRkMGIwOwYIKwYBBQUHMAKGL2h0dHA6Ly9jcnQuc2VjdGln
by5jb20vSW5Db21tb25SU0FTZXJ2ZXJDQTIuY3J0MCMGCCsGAQUFBzABhhdodHRw
Oi8vb2NzcC5zZWN0aWdvLmNvbTAXBgNVHREEEDAOggxnYWlhLnZjdS5lZHUwggF9
BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AHb/iD8KtvuVUcJhzPWHujS0pM27Kdxo
Qgqf5mdMWjp0AAABi4/PVTUAAAQDAEYwRAIgTSRmmExGczzWPlTSbx4qIPO7EK3h
0SVqaPHPoT/Ir5ACIA9HFNDi8bEnLf/KZWSyOll+Iw3yek+VqJyhe2BJlLIjAHYA
2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGLj89ViwAABAMARzBF
AiAuHjzGAwfHvyrRPWEkYvL4Yf6sOh6l0oPE8ixkVetJBQIhAPJwI2SbwqiCdPsf
QB2KWysFwXHBTfq3oEXChyvXpitlAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7D
UUhZRnEftZsAAAGLj89VZQAABAMARzBFAiEAvNdp1IK6EV/Qu/T2gnQROQ0sxsRI
jkhhE5Ekdxsuo2wCIDQqyjvEEkX/hgnOrGS/xXr3zZPh/HBvAoC+/Yz1i7+gMA0G
CSqGSIb3DQEBDAUAA4IBgQAsBPnvi2CqlMtbMCZvCgCVzxZzHukSUgdQKxTBsbur
bcL9ABH6rE375Peblw5oIh0RvIGUIRTQNMrVWEfbALRcEwIvV0QF7o8XQ0YbFdEO
K9vbIYFlsbvqv7iEWMbxAoRzzJJ31ir6TdOiL+QLTShPBHK2+232/vwRB3gG9HHE
YFgOo75J7fH7+7AFem+o/jf7O6h7Q+fdjiuHNcSgxo9lwaUEZSP+e3jP9tFPM/vJ
1fX91hPZqaU1ZC2QEB2ztJWOQVDPi3rSg49aplAsRv6U8Vs8+nOs0wwdS1uBM6z+
OQ5+QzouCX3fwVrH9eScjNgYo8pWetLF6NktRAl6kCyx1W9EihRo/0kYsROYlbGQ
0As76WzdLneohZSjsn/6yKVf9azJGUr75QZnWmaI9CVFkZvawqY3l/44qF9Yy/Hq
8lmHHGSeIk9Q8K1YXSONRMafgXIvX5J7ldi7VeMfuCOjldb+60zTFdqSx8ltDjch
JdscTEegYxuVoaqi8BvNuwk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKXUNx+uBKsPjl+wmipX
wd8un5Fqh1zUqTDHbpXo4IS2jsDZoap2sb/dPMcM0hEHfUF3+vnt1REAh9B6o13T
GjWvZjnl4Y19Ke0fAY7XNXORLECsFM8dLWlXXmVqp4lx6jCht3Et8AsZXF0WhsLA
gpt5n2OFReUsRaNTz2mbppJxJPFY9NtvCjI/+KvUOsF9JXczAk+Nz6EFp2T+uFxV
XjkhPLCAir4jafhbIFBhlq9A2q1ngVUfkm2gCiyV0+GGiLND2cysrAIilm4upFrs
1qPBRzqFgBXV9zVj+p77fIrSrV+DoLVKobA7t3eX6O6fqo1JSAi2nCgl8n1aZORu
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320458772624200198990969442741798584987
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia Commonwealth University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gaia.vcu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23309621424682412349056391032063312059690661145687762842688298529446010782042073846302996029518008206486587302492161652791445844565346154568153276943371742710511028374873605718502679329586151497306372122710285858412025625516248601148132337442725662466866185591431808172538150502690607114418228730569692395481899721295697374704246471087106094360705689097612367842656646707149641193950409351046286509277234707028848381401876119614758156370999080271153217814993632788013416914492970062421931055736270269098950240747752347892570296224902651882886307295945504947689661358198450028483229532641905492162413949134904108543499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0dc2b22dc96f631676b5b42162abd45183d7646c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaia.vcu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		002c04f9ef8b60aa94cb5b30266f0a0095cf16731ee9125207502b14c1b1bbab6dc2fd0011faac4dfbe4f79b970e68221d11bc81942114d034cad55847db00b45c13022f574405ee8f1743461b15d10e2bdbdb218165b1bbeabfb88458c6f1028473cc9277d62afa4dd3a22fe40b4d284f0472b6fb6df6fefc11077806f471c460580ea3be49edf1fbfbb0057a6fa8fe37fb3ba87b43e7dd8e2b8735c4a0c68f65c1a5046523fe7b78cff6d14f33fbc9d5f5fdd613d9a9a535642d90101db3b4958e4150cf8b7ad2838f5aa6502c46fe94f15b3cfa73acd30c1d4b5b8133acfe390e7e433a2e097ddfc15ac7f5e49c8cd818a3ca567ad2c5e8d92d44097a902cb1d56f448a1468ff4918b1139895b190d00b3be96cdd2e77a88594a3b27ffac8a55ff5acc9194afbe506675a6688f42545919bdac2a63797fe38a85f58cbf1eaf259871c649e224f50f0ad585d238d44c69f81722f5f927b95d8bb55e31fb823a395d6feeb4cd315da92c7c96d0e372125db1c4c47a0631b95a1aaa2f01bcdbb09