devops-eda.campus.stonybrook.edu

- Stony Brook University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number b2:90:c7:97:64:a1:bb:2b:0c:28:81:1b:21:e0:54:d6 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stony Brook University

Organization: Stony Brook University
State / Province: New York
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b2:90:c7:97:64:a1:bb:2b:0c:28:81:1b:21:e0:54:d6
Serial Number (int): 237354322191451728807426236373278938326
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: dc:3e:4e:d6:20:ce:a4:f7:b0:f6:c5:89:97:a4:7f:1b:05:36:35:22
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): ba:fe:b1:39:d8:34:b7:a9:48:e9:d4:cb:cf:07:ba:3f:00:b9:2d:69
Fingerprint (sha256): 07:6d:3e:d1:51:35:80:62:cd:62:20:47:8e:f2:ab:2c:02:8f:12:ab:9f:ac:b4:1d:5f:71:b7:0d:0c:50:b2:8a

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate devops-eda.campus.stonybrook.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for devops-eda.campus.stonybrook.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

devops-eda.campus.stonybrook.edu

Other certificates including the domain name stonybrook.edu

(limited to 100 certificates)
svn.cs.stonybrook.edu
sql-tmates16-p.uhmc.sbuh.stonybrook.edu
answers.library.stonybrook.edu
statuspage.io
5098030885765120-fe4.pantheonsite.io
givingday.stonybrook.edu
cloud-status.typesense.org
guides.library.stonybrook.edu
statuspage.io
statuspage.io
rdpgw-2fa.cc.stonybrook.edu
5745710343389184-fe4.pantheonsite.io
grading.cse356.compas.cs.stonybrook.edu
sunapsistest.campus.stonybrook.edu
5098030885765120-fe4.pantheonsite.io
5098030885765120-fe4.pantheonsite.io
5707532110659584-fe2.pantheonsite.io
arrive.cs.stonybrook.edu
sbmta2.cc.stonybrook.edu
vsst.stonybrook.edu
webappys.cc.stonybrook.edu
5721185543258112-fe3.pantheonsite.io
nanocas.ece.stonybrook.edu
clubred.stonybrook.edu
5717119551406080-fe2.pantheonsite.io
sqlnode2-p.campus.stonybrook.edu
seniorclasslegacy.stonybrook.edu
5707532110659584-fe2.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5719980670713856-fe1.pantheonsite.io
6250489796624384-fe1.pantheonsite.io
teams.stonybrook.edu
its.msudenverstatus.com
5707532110659584-fe2.pantheonsite.io
testhighsierra01.sinc.stonybrook.edu
sbmatters.stonybrook.edu
sql-ips16-p1.uhmc.sbuh.stonybrook.edu
icdm2015.stonybrook.edu
5765867027562496-fe4.pantheonsite.io
webapp1.cc.stonybrook.edu
5765867027562496-fe4.pantheonsite.io
enroll.stonybrook.edu
5737664527466496-fe3.pantheonsite.io
redcap.stonybrook.edu
ascomaxess.uhmc.sbuh.stonybrook.edu
sdmwc.uhmc.sbuh.stonybrook.edu
research-pp.stonybrook.edu
stemsoftclinic.uhmc.sbuh.stonybrook.edu
xsrv2.mm.cs.stonybrook.edu
policymanagerd.uhmc.sbuh.stonybrook.edu
testsmg.cc.stonybrook.edu
5717119551406080-fe2.pantheonsite.io
statuspage.io
statuspage.io
coi.myresearch.stonybrook.edu
statuspage.io
dsfrey.javits.stonybrook.edu
statuspage.io
sql-spkctrm16p1.uhmc.sbuh.stonybrook.edu
uhmc-xapp-sf-d.uhmc.sbuh.stonybrook.edu
5759778777202688-fe2.pantheonsite.io
chartcompletion.hospital.stonybrook.edu
6250489796624384-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
statuspage.io
you.stonybrook.edu
grants.myresearch.stonybrook.edu
mysbfiles.stonybrook.edu
5765867027562496-fe4.pantheonsite.io
disaster.studies.stonybrook.edu
5721185543258112-fe3.pantheonsite.io
5745710343389184-fe4.pantheonsite.io
statuspage.io
cucmpub-ms.cewit.stonybrook.edu
p250.cc.stonybrook.edu
classroomfinder.tlt.stonybrook.edu
statuspage.io
p250.cc.stonybrook.edu
icdm2015.stonybrook.edu
liberalarts.ss.pacific.edu
5766380947243008-fe1.pantheonsite.io
statuspage.io
addc2.campus.stonybrook.edu
5765867027562496-fe4.pantheonsite.io
mypasswords.stonybrook.edu
myresearch.stonybrook.edu
expeditions.sandiegozoo.org
6250489796624384-fe1.pantheonsite.io
adfs01.cs.stonybrook.edu
5714902542974976-fe3.pantheonsite.io
api.stonybrook.edu
statuspage.io
ip-e.stonybrook.edu
5714902542974976-fe3.pantheonsite.io
sp-db16-p.uhmc.sbuh.stonybrook.edu
housing.stonybrook.edu
sql-vsync16-p.uhmc.sbuh.stonybrook.edu
mobile.cc.stonybrook.edu
hctestapp2.campus.stonybrook.edu
addc3.campus.stonybrook.edu

Certificate

The complete raw certificate details for devops-eda.campus.stonybrook.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHxjCCBq6gAwIBAgIRALKQx5dkobsrDCiBGyHgVNYwDQYJKoZIhvcNAQELBQAw
djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix
EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT
FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMjIxMjAyMDAwMDAwWhcNMjQwMTAy
MjM1OTU5WjBsMQswCQYDVQQGEwJVUzERMA8GA1UECBMITmV3IFlvcmsxHzAdBgNV
BAoTFlN0b255IEJyb29rIFVuaXZlcnNpdHkxKTAnBgNVBAMTIGRldm9wcy1lZGEu
Y2FtcHVzLnN0b255YnJvb2suZWR1MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
CgKCAgEAsfoHzFgy5HoAWFpoww/wdZYRN3zSpCiDESVXB634Tqy2SUSCCWBUwtq3
BGTIDAPvAeVoTuxkDayOoG14au+Ccl1QWcvS5KmlYBqAlgsI1jDF+gR0NVgGm4eY
Yb8BMr82+pgbDFiy5CbvhisdlaVpXF1/OXI/woEi/hK6JIOUmx/8Bh6Mo0NWXruw
dipE7AKBghPB8+GpZubDdggn2ZHjQRIyBScn+8O/5k2xKnObKoDX6m4J5ZpGMGt4
o59uQBQPO/rZuxQ3xwKvs0U8I8SFmmwh3JkpaOyi92qRQ2qn+DDvzYSIiaRE+Epl
08ecXRCMm13qUg7kDF+cfn1pKUxQkV4wgllmikPTxVBFRrz7ZuzigWJs22kSkW0d
R0vcyYohTphR56eZqj8Zjiy6dz2BSgjVL1gJwTxoGZasQSbCMyTDLa36txnJD0Ch
D/8ZGoY0Ab3jkWH+cf2SIhV/kHNfKKGJ23bRB1d2PO9nNaZUiQcvrL9AvdprQrCT
g9bXiEUctWj2lf9SjU/OKa3dCTV3JfarlY4c0iS5ekM+yq8AMfQkgcMEVRyIEfQ2
M6Y2LUxIyetbOcXqIMv3HcR9xz0v28IsCQt6QYe7PZg0HNJ1YIImqrkVtuA9H4XI
It3OLW3uC/F/jRnujMK0gtl7g5hC0FcUA9C+pxYmkB1gtB5MIJkCAwEAAaOCA1cw
ggNTMB8GA1UdIwQYMBaAFB4Fo3ePbJbiW4dLprSGrHEADOc4MB0GA1UdDgQWBBTc
Pk7WIM6k97D2xYmXpH8bBTY1IjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIw
ADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwZwYDVR0gBGAwXjBSBgwr
BgEEAa4jAQQDAQEwQjBABggrBgEFBQcCARY0aHR0cHM6Ly93d3cuaW5jb21tb24u
b3JnL2NlcnQvcmVwb3NpdG9yeS9jcHNfc3NsLnBkZjAIBgZngQwBAgIwRAYDVR0f
BD0wOzA5oDegNYYzaHR0cDovL2NybC5pbmNvbW1vbi1yc2Eub3JnL0luQ29tbW9u
UlNBU2VydmVyQ0EuY3JsMHUGCCsGAQUFBwEBBGkwZzA+BggrBgEFBQcwAoYyaHR0
cDovL2NydC51c2VydHJ1c3QuY29tL0luQ29tbW9uUlNBU2VydmVyQ0FfMi5jcnQw
JQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVzZXJ0cnVzdC5jb20wKwYDVR0RBCQw
IoIgZGV2b3BzLWVkYS5jYW1wdXMuc3Rvbnlicm9vay5lZHUwggF/BgorBgEEAdZ5
AgQCBIIBbwSCAWsBaQB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0
AAABhNOXwlsAAAQDAEcwRQIgRocOUWjC10bd4sHPAP31OFlzSU40ovo/vALp5o2S
Kv4CIQDX752+W7YJV5j9NojZADxCLhK+bUal1HJVQmNQH+9HXQB3ANq2v2s/tbYi
n5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABhNOXwkkAAAQDAEgwRgIhAIbKO9Kb
9149lrJHcqBteXn6D+w9RAS6K9D4c57LMd42AiEA9xElB1hb20r1PWniVRvjQFGX
vn4E3onLzz82jvUMRicAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1
mwAAAYTTl8IZAAAEAwBHMEUCIEazZqPGP6xtiOh2zMHqJxtGP7cfbtUeocGBR655
EoTdAiEA8d2nDW6a8u254Vc7Wxd3mOLYuMSmn9qQpAQiAZAQbFYwDQYJKoZIhvcN
AQELBQADggEBAF1jwNsrRfEJ6dBe1YD46Q32Lo2JjWMOZUAJcveitFRxAYFD+gw/
ztoun4Pnr8Bee9kgTvPeTj9VuqAsxLcVVRttR27eho7iwK4Zb6oCS40PdubSj26F
c8O/t4+Go17oZgrJOyOLlMZo4Pi+pByvltVKOgtIYBtxLRhD/5qpTRwvDqyWZaWv
j5SF/yWms6flurjf16a7DA7xXZO/XxM1cAabkSVPVOcAPUdO2NIaBMFGyftwNX+B
QDvSOdcz33HHZ3uUvEHms6DqHARiJJMwh2eRt90geR6TCkQNF/ac3KN3mYOLv2oB
nSw+PBwJm7dVYnxxwPd6pE39W+IXPQRh0Ck=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsfoHzFgy5HoAWFpoww/w
dZYRN3zSpCiDESVXB634Tqy2SUSCCWBUwtq3BGTIDAPvAeVoTuxkDayOoG14au+C
cl1QWcvS5KmlYBqAlgsI1jDF+gR0NVgGm4eYYb8BMr82+pgbDFiy5CbvhisdlaVp
XF1/OXI/woEi/hK6JIOUmx/8Bh6Mo0NWXruwdipE7AKBghPB8+GpZubDdggn2ZHj
QRIyBScn+8O/5k2xKnObKoDX6m4J5ZpGMGt4o59uQBQPO/rZuxQ3xwKvs0U8I8SF
mmwh3JkpaOyi92qRQ2qn+DDvzYSIiaRE+Epl08ecXRCMm13qUg7kDF+cfn1pKUxQ
kV4wgllmikPTxVBFRrz7ZuzigWJs22kSkW0dR0vcyYohTphR56eZqj8Zjiy6dz2B
SgjVL1gJwTxoGZasQSbCMyTDLa36txnJD0ChD/8ZGoY0Ab3jkWH+cf2SIhV/kHNf
KKGJ23bRB1d2PO9nNaZUiQcvrL9AvdprQrCTg9bXiEUctWj2lf9SjU/OKa3dCTV3
JfarlY4c0iS5ekM+yq8AMfQkgcMEVRyIEfQ2M6Y2LUxIyetbOcXqIMv3HcR9xz0v
28IsCQt6QYe7PZg0HNJ1YIImqrkVtuA9H4XIIt3OLW3uC/F/jRnujMK0gtl7g5hC
0FcUA9C+pxYmkB1gtB5MIJkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 237354322191451728807426236373278938326
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stony Brook University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'devops-eda.campus.stonybrook.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 726081512892323461185333614793586163301251580070443746440516226858805269893182040492525301040537553539251752365498264102647537951030327619858041728802564738027587156285328292939902792411498678167807108654920966715195514897845042014880144024671478380137968096690599811259675902188377052452666294644743329038623379875759453765281373588089373932875717841174152882295457754769048226401133486731796228813516966974278260886338033753911921095384102382730709995067763691391783384225991955960475035043168811441976409516672980223173206663224653175706195078700954991286107896627122141337284054604051054679722048267781781170906992460489021747684024087186259513288615734666716066500598989479416576423512705821803191112782990516538750320417410553833362491095631758403663916617344281853526612532609953599714694876872483809812159616258119267745180879288838678740298197095131849384832189960683182592844130695662073490000996265015414357386369921615077363522407022863061093811169334248350673398995659412772460715382262315305598472508758324562942684156901784561650166321669050610993504338265443218155242751630241735100198741622850614739600160440416596181400445378742107423376487928332686894109423280414399499835677888326217094755909880342610099370205337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc3e4ed620cea4f7b0f6c58997a47f1b05363522
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devops-eda.campus.stonybrook.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005d63c0db2b45f109e9d05ed580f8e90df62e8d898d630e65400972f7a2b45471018143fa0c3fceda2e9f83e7afc05e7bd9204ef3de4e3f55baa02cc4b715551b6d476ede868ee2c0ae196faa024b8d0f76e6d28f6e8573c3bfb78f86a35ee8660ac93b238b94c668e0f8bea41caf96d54a3a0b48601b712d1843ff9aa94d1c2f0eac9665a5af8f9485ff25a6b3a7e5bab8dfd7a6bb0c0ef15d93bf5f133570069b91254f54e7003d474ed8d21a04c146c9fb70357f81403bd239d733df71c7677b94bc41e6b3a0ea1c0462249330876791b7dd20791e930a440d17f69cdca37799838bbf6a019d2c3e3c1c099bb755627c71c0f77aa44dfd5be2173d0461d029