oceanlab.rsmas.miami.edu

- University of Miami -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 5c:bb:3b:d7:3b:91:85:90:10:62:0b:36:fb:3f:7e:fd was issued on by Internet2.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Miami

Organization: University of Miami
Organization unit: IT
Address: 1320 S Dixie Hwy
Postal code: 33124
State / Province: FL
Locality: Coral Gables
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:bb:3b:d7:3b:91:85:90:10:62:0b:36:fb:3f:7e:fd
Serial Number (int): 123261148839415369644630414804310261501
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 7c:94:8f:9d:09:16:12:cb:48:27:e4:d2:52:ad:67:86:4a:d2:92:0c
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 52:6b:27:bd:c2:b1:5c:32:55:ec:ab:6d:f8:79:1e:a4:2e:d6:7c:c9
Fingerprint (sha256): 08:44:e3:e5:24:b6:4c:7f:27:ad:92:b6:3a:d9:7c:cb:07:83:40:8f:ba:5f:6d:41:60:20:bc:02:73:26:25:43

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate oceanlab.rsmas.miami.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oceanlab.rsmas.miami.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oceanlab.rsmas.miami.edu
sealion.rsmas.miami.edu

Other certificates including the domain name miami.edu

(limited to 100 certificates)
welcome3.staging.miami.edu
genomics.med.miami.edu
myuhealthchart.com
enet.miami.edu
frostonline.miami.edu
canelink.miami.edu
projectconf.miami.edu
joo.coe.miami.edu
apply.miami.edu
amploadvance.com
cacti.tel.miami.edu
blog2.miami.edu
enet.miami.edu
welcome.miami.edu
uconnectlabs.com
testuchart.med.miami.edu
m.canelinktst.miami.edu
welcome.miami.edu
com.miami.edu
umeeweb1d.cgcent.miami.edu
tptp.cs.miami.edu
redcap.med.miami.edu
viacomp.miami.edu
*.it.miami.edu
*.fcdslmsdemo.med.miami.edu
welcome.staging.miami.edu
www.miami.edu
devices.miami.edu
uh-emr-intlbprd.med.miami.edu
fcdsnew.med.miami.edu
anthurium.miami.edu
umculture.miami.edu
welcome3.miami.edu
asb.as.miami.edu
netauth.miami.edu
careers.med.miami.edu
umchat.miami.edu
frostonline.miami.edu
www.sa.miami.edu
hemba.mbs.miami.edu
welcome3.dev.miami.edu
uh05maesdbsp00.cgcent.miami.edu
fcdsfw.med.miami.edu
lawapps.law.miami.edu
viacomp.miami.edu
oceanlab3.rsmas.miami.edu
dev1.itlabs.miami.edu
webmail.bus.miami.edu
sbarms.bus.miami.edu
uconnectlabs.com
uhclintapp1p.cgcent.miami.edu
tls.automattic.com
canelink.miami.edu
canelink.miami.edu
uh05bsobappt00.cgcent.miami.edu
*.library.miami.edu
web.offcampuspartners.com
uconnectlabs.com
scccsolr.cgcent.miami.edu
clinicalapps.med.miami.edu
welcome3.staging.miami.edu
teststacks.library.miami.edu
welcome3.miami.edu
webmail.law.miami.edu
tls.automattic.com
fcdsmoodle.med.miami.edu
bootcamp.miami.edu
tls.automattic.com
n001.offcampuspartners.com
internal-canelink.miami.edu
canelinktst.miami.edu
ever-brighter.miami.edu
mycanes.miami.edu
m.canelinkpst.miami.edu
uhemrbcwb1t.cgcent.miami.edu
crmdev.miami.edu
velostraining.med.miami.edu
globalemba.mbs.miami.edu
healthyu.med.miami.edu
*.courses.miami.edu
amploadvance.com
www.sarc.miami.edu
uh05cbdldbst00.cgcent.miami.edu
*.miami.edu
wss.law.miami.edu
welcome.miami.edu
clairvia.med.miami.edu
www.globalacademy.miami.edu
coedev.miami.edu
mcsl.med.miami.edu
magec.med.miami.edu
uhemrprovapp1p.cgcent.miami.edu
coll.ubiquitypress.com
welcome4.miami.edu
www.courses.miami.edu
osha.mededu.miami.edu
oceanlab.rsmas.miami.edu
welcome.staging.miami.edu
goabroad.miami.edu
welcome3.dev.miami.edu

Certificate

The complete raw certificate details for oceanlab.rsmas.miami.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr7wc5d8tEpTqRWx8l8J
IphW+vPWVrTnYv4FHQi9rGn0Gvy+ZaNFSHj61dSuZ7UiMXp6uwqxI+GMvg5z64SH
VMxOa63XObuRw0konTZ5yK5ep10Uh4Ut+wBNjqtt7rnZ297f+FIdQ8/XA/k9oEIr
TP2Z172wVMapEWnncyiwgK7mPFz3VtqcV2s7qCpaNwMbWCtUbrEmfTbtj5tUbW7/
Sn7HPxN0tu4oMYlOHxIWgOPEtr3cnV4knn67kCcMER6mrPTMnO37y2UkUg2uEId6
DScvxNlSxSF4sKIxYZGxbCFmOSY9qQr2RS6BIpnsNasvGnhKPD+f+q5Ivvl4ioMA
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 123261148839415369644630414804310261501
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '33124'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coral Gables'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1320 S Dixie Hwy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Miami'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oceanlab.rsmas.miami.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23069527164027070216506808606382687213657909421068230433631531303797751946935930074374756705129490474145372439340407289473084818934992747285383053642921638985940172771849893700090605595096885872564843901428730151722695444762335782625512157693395538639644653818451656573738233232211264367184893437491828492226732120813045601705799045314699412303962064427889784086602978156466368858900123279366582655520363775927231530700004851889728312839930504250244218771843461797219315212995929518754715494334157440164986078511363515279160741762462417107444660947639693105859355507351838369952940133261810086934220482557902579761339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c948f9d091612cb4827e4d252ad67864ad2920c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanlab.rsmas.miami.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sealion.rsmas.miami.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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