express.northeastern.edu

- Northeastern University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number d0:4a:74:5b:15:1a:1a:c7:9f:8b:de:f8:be:bc:78:e5 was issued on by Internet2.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Northeastern University

Organization: Northeastern University
Organization unit: CampusPress
Address: 360 Huntington Ave.
Postal code: 02115
State / Province: MA
Locality: Boston
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d0:4a:74:5b:15:1a:1a:c7:9f:8b:de:f8:be:bc:78:e5
Serial Number (int): 276866013066601634941812403874788309221
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 8f:51:6f:40:af:b9:4d:57:e8:b4:24:9b:58:ac:4a:a6:8d:3f:3f:be
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): e1:65:99:48:65:c5:38:e4:1d:bf:bb:d9:57:f7:95:a6:f9:d1:48:97
Fingerprint (sha256): 09:14:c7:b2:75:b0:9c:6c:3e:92:0b:ae:67:4b:15:8a:f8:36:f3:fe:f2:8e:6b:e0:b8:7e:a6:ca:43:86:a0:3f

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate express.northeastern.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for express.northeastern.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

express.northeastern.edu
cio.northeastern.edu
www.cio.northeastern.edu

Other certificates including the domain name northeastern.edu

(limited to 100 certificates)
damore-mckim.northeastern.edu
blackactivism.library.northeastern.edu
bouve.northeastern.edu
securedns2.planmygift.org
express.northeastern.edu
5640082467848192-fe3.pantheonsite.io
5640082467848192-fe3.pantheonsite.io
eventregistration.northeastern.edu
academicplan.northeastern.edu
llmonline.northeastern.edu
absn.northeastern.edu
5640082467848192-fe3.pantheonsite.io
5635949232914432-fe1.pantheonsite.io
amploadvance.com
express.northeastern.edu
cio.northeastern.edu
cancurecancer.northeastern.edu
arader.library.northeastern.edu
moniotrlab.ccis.northeastern.edu
sslvs06.igloosoftware.com
news.northeastern.edu
5640082467848192-fe3.pantheonsite.io
express.northeastern.edu
5640082467848192-fe3.pantheonsite.io
camd.northeastern.edu
servicedesk.gerkencompanies.com
c3helpdesk.c3insurance.com
kb.northeastern.edu
5725851488354304-fe3.pantheonsite.io
securedns2.planmygift.org
huskychat.northeastern.edu
5640082467848192-fe3.pantheonsite.io
communityimpact.northeastern.edu
accomplishments.northeastern.edu
5635949232914432-fe1.pantheonsite.io
ecda.northeastern.edu
n002.offcampuspartners.com
n002.offcampuspartners.com
www.academicplan.northeastern.edu
web.offcampuspartners.com
facilities.northeastern.edu
5635949232914432-fe1.pantheonsite.io
bishop.ccs.neu.edu
sslvs06.igloosoftware.com
ats.northeastern.edu
snpl.northeastern.edu
api.sail.northeastern.edu
ecda.northeastern.edu
plusone.northeastern.edu
5727270706610176-fe1.pantheonsite.io
alteryx.northeastern.edu
n002.offcampuspartners.com
testweb.neu.edu
myvisa.northeastern.edu
*.pearson-navigator.com
5725851488354304-fe3.pantheonsite.io
5725851488354304-fe3.pantheonsite.io
faculty.northeastern.edu
status.library.northeastern.edu
offcampus.northeastern.edu
news.northeastern.edu
amploadvance.com
5640082467848192-fe3.pantheonsite.io
pool02.nunet.neu.edu
nb4775.neu.edu
givingday.northeastern.edu
neche.northeastern.edu
magazine.northeastern.edu
amploadvance.com
careers.hrm.northeastern.edu
faculty.northeastern.edu
sslvs06.igloosoftware.com
5640082467848192-fe3.pantheonsite.io
huskyhelper.northeastern.edu
5640082467848192-fe3.pantheonsite.io
integrate.sail-demo.northeastern.edu
5725851488354304-fe3.pantheonsite.io
express.northeastern.edu
5640082467848192-fe3.pantheonsite.io
news.northeastern.edu
riels.northeastern.edu
ill.lib.neu.edu
5727270706610176-fe1.pantheonsite.io
5640082467848192-fe3.pantheonsite.io
nahant.northeastern.edu
5725851488354304-fe3.pantheonsite.io
geo.northeastern.edu
resdev.northeastern.edu
helpdesk.rdek.bc.ca
studentsupportinitiative.northeastern.edu
spectrumarchive.northeastern.edu
news.northeastern.edu
n002.offcampuspartners.com
n002.offcampuspartners.com
5727270706610176-fe1.pantheonsite.io
5635949232914432-fe1.pantheonsite.io
5725851488354304-fe3.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
graduatecertsonline.northeastern.edu
securedns2.planmygift.org

Certificate

The complete raw certificate details for express.northeastern.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHNTCCBh2gAwIBAgIRANBKdFsVGhrHn4ve+L68eOUwDQYJKoZIhvcNAQELBQAw
djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix
EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT
FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMTkwMzE1MDAwMDAwWhcNMjEwMzE0
MjM1OTU5WjCBtDELMAkGA1UEBhMCVVMxDjAMBgNVBBETBTAyMTE1MQswCQYDVQQI
EwJNQTEPMA0GA1UEBxMGQm9zdG9uMRwwGgYDVQQJExMzNjAgSHVudGluZ3RvbiBB
dmUuMSAwHgYDVQQKExdOb3J0aGVhc3Rlcm4gVW5pdmVyc2l0eTEUMBIGA1UECxML
Q2FtcHVzUHJlc3MxITAfBgNVBAMTGGV4cHJlc3Mubm9ydGhlYXN0ZXJuLmVkdTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJueu10MXsDu1grkimwP7Br2
TQqWS6KF0KhXA9D6NKLcoWkxbDzr7OaGCxk8vwuRMB21IbgaDRMMIVtdwbkax899
Ln0jQ/oqWhUH2Fh0R6DnMehZ5zGChU3f+ZDUsCOnF1Jrx1YDAQWOAgUr9uObQZcm
2XkDgvLphmFag2vfCL9StefzK9IkvIZbKyWYeNaNkOtr4nBl/tosTH73V2+j/X9E
SUXCwPZU5wdkyl6yVTcmd4PmwaP8SueVlnv2UwNwp6jGRZlDLJfgIxGdb7ajannY
QqN06O5SoXYOayW+J4eB23GUyGL8abhwOJrwZBkg/cYccb8Q7TkIbTb/+/hxsCsC
AwEAAaOCA30wggN5MB8GA1UdIwQYMBaAFB4Fo3ePbJbiW4dLprSGrHEADOc4MB0G
A1UdDgQWBBSPUW9Ar7lNV+i0JJtYrEqmjT8/vjAOBgNVHQ8BAf8EBAMCBaAwDAYD
VR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwZwYDVR0g
BGAwXjBSBgwrBgEEAa4jAQQDAQEwQjBABggrBgEFBQcCARY0aHR0cHM6Ly93d3cu
aW5jb21tb24ub3JnL2NlcnQvcmVwb3NpdG9yeS9jcHNfc3NsLnBkZjAIBgZngQwB
AgIwRAYDVR0fBD0wOzA5oDegNYYzaHR0cDovL2NybC5pbmNvbW1vbi1yc2Eub3Jn
L0luQ29tbW9uUlNBU2VydmVyQ0EuY3JsMHUGCCsGAQUFBwEBBGkwZzA+BggrBgEF
BQcwAoYyaHR0cDovL2NydC51c2VydHJ1c3QuY29tL0luQ29tbW9uUlNBU2VydmVy
Q0FfMi5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVzZXJ0cnVzdC5jb20w
UwYDVR0RBEwwSoIYZXhwcmVzcy5ub3J0aGVhc3Rlcm4uZWR1ghRjaW8ubm9ydGhl
YXN0ZXJuLmVkdYIYd3d3LmNpby5ub3J0aGVhc3Rlcm4uZWR1MIIBfQYKKwYBBAHW
eQIEAgSCAW0EggFpAWcAdwC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7R
hQAAAWmCHLDJAAAEAwBIMEYCIQCR2nh5lk7jzcbLe4H6XY/TY5Fu7zJ7NysNiRrW
H2CudgIhAPtMzL8st5rLN4jyCLw95Ss/SmvIMIFUr3CwhHQToF00AHYARJRlLrDu
zq/EQAfYqP4owNrmgr7YyzG1P9MzlrW2gagAAAFpghyw8QAABAMARzBFAiEA6Nf5
amrW2EsUu/1vWr7A37EUv+zX/KugDUFFPtbJOasCIBceafE0/hRY20fpm7ZWEc8G
QMbiU9upgcU92WFqpbWZAHQAXNxDkv7mq0VEsV6a1FbmEDf71fpH3KFzlLJe5vbH
DsoAAAFpghyxGQAABAMARTBDAiANdQKuJRRoaZ4xdlXvBBYcHslUo/rURFmbi3Nk
MGxPpQIfZIBRFf77ZoI0AkYNkm5xiXp/Cwlg7WGuoz8BkzdPgTANBgkqhkiG9w0B
AQsFAAOCAQEAiFyTGNb/SMWdtJ1MkObNC8Utmx88WqP9fFZw7DBS/+uPjWsvUzGI
CliEU+gr9+rPgHrw5XTtRzShAb9HIjBRPZb7LAR+h/qCsn3ACHHfkFxGnlg7Wu7I
UYWhp4Mn3YLqG7VV4ffIlifoVYc5iwys/0npWKtD6u5fpUTPzptcFth6ztfCHGV1
RMnsI9oKEtppKWoLWArjQzshuQYDisg6f/vLSeiGTuAGfVfKWs8Aj/WmXTwthIfe
e0qxknVMJGRVf9FANmveIIMgL+fhO84MzoY2FeiHndpyWTOh4Lig+2K5rAWo3LFy
ncNkDdqWxJrYTg7pjKUwyq35JDduM6Sbtg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm567XQxewO7WCuSKbA/s
GvZNCpZLooXQqFcD0Po0otyhaTFsPOvs5oYLGTy/C5EwHbUhuBoNEwwhW13BuRrH
z30ufSND+ipaFQfYWHRHoOcx6FnnMYKFTd/5kNSwI6cXUmvHVgMBBY4CBSv245tB
lybZeQOC8umGYVqDa98Iv1K15/Mr0iS8hlsrJZh41o2Q62vicGX+2ixMfvdXb6P9
f0RJRcLA9lTnB2TKXrJVNyZ3g+bBo/xK55WWe/ZTA3CnqMZFmUMsl+AjEZ1vtqNq
edhCo3To7lKhdg5rJb4nh4HbcZTIYvxpuHA4mvBkGSD9xhxxvxDtOQhtNv/7+HGw
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276866013066601634941812403874788309221
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02115'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Boston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '360 Huntington Ave.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Northeastern University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CampusPress'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'express.northeastern.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19645210881282862473667147394708161440320137616538397288388465822382470485527208030610870822369313413911890614034553874920635476129015868339805581866543288447340931715813425611289081222496644555774184331228971722104175973753476541508965170420164932297442414050103265804406249981266249137251624173166128438404205807755878423019816993422236930395945620575551198498974026132853644127990926398591262234836294757681647025347539203587758949232969268289226595040639518090807171057586158886069964486601149741643253005349135718720588468741585888536318145302319735927872440989299140924985324037426024599381503459433990740619307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f516f40afb94d57e8b4249b58ac4aa68d3f3fbe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'express.northeastern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cio.northeastern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cio.northeastern.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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