apps.usg.edu

- University System of Georgia -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number ab:64:af:6c:c7:1d:c5:c2:e8:c5:59:c4:d6:01:0a:7c was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University System of Georgia

Organization: University System of Georgia
Organization unit: Information Technology Services
Address: 270 Washington Street, S.W.
Postal code: 30334
State / Province: Geogia
Locality: Atlanta
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ab:64:af:6c:c7:1d:c5:c2:e8:c5:59:c4:d6:01:0a:7c
Serial Number (int): 227820775005019797317131587443790776956
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 74:bf:86:29:1b:9c:88:9a:fe:5d:4c:f7:96:db:e3:fd:48:53:c2:6a
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 88:cf:e8:d6:4f:89:e6:94:cc:c2:96:8c:50:8d:63:9f:18:a6:b2:38
Fingerprint (sha256): 09:15:ee:03:8b:7a:37:5c:e1:7a:08:be:a7:82:83:c9:e0:98:f5:88:2e:c2:7c:9f:46:de:de:d3:9b:9b:f1:38

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate apps.usg.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apps.usg.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apps.usg.edu

Other certificates including the domain name usg.edu

(limited to 100 certificates)
statuspage.io
apistatus.pitneybowes.com
statuspage.io
statuspage.io
statuspage.io
gil.uga.edu
spexternal.bor.usg.edu
*.proxygsu-sbul.galileo.usg.edu
epay.usg.edu
filestest.usg.edu
ap1.bor.usg.edu
statuspage.io
idp-demo-prod.bor.usg.edu
gil.uga.edu
jirafeau.galileo.usg.edu
*.hprod.onehcm.usg.edu
www.usg.edu
elver.adm.usg.edu
giluc.usg.edu
gitlab.usg.edu
*.proxygsu-dal1.galileo.usg.edu
ocs-prod-cwa.uso.bor.usg.edu
statuspage.io
statuspage.io
statuspage.io
asurams.gabest.usg.edu
statuspage.io
statuspage.io
*.onehcm.usg.edu
blog.dlg.galileo.usg.edu
oer.galileo.usg.edu
statuspage.io
*.proxygsu-psnd.galileo.usg.edu
dlg.usg.edu
*.proxygsu-gwt1.galileo.usg.edu
statuspage.io
gil.usg.edu
*.fprod.gafirst.usg.edu
statuspage.io
pauth.usg.edu
pauth.usg.edu
adfs.ssc.usg.edu
statuspage.io
statuspage.io
apistatus.pitneybowes.com
apistatus.pitneybowes.com
statuspage.io
bi123.usg.edu
*.dev.usg.edu
*.proxygsu-seff.galileo.usg.edu
ftp.ssc.usg.edu
statuspage.io
statuspage.io
statuspage.io
*.proxygsu-sgai.galileo.usg.edu
statuspage.io
tlsv12-only.bor.usg.edu
exchcas-prod.uso.bor.usg.edu
*.aufdev2.gafirst.usg.edu
*.proxygsu-mac2.galileo.usg.edu
analytics.usg.edu
retiree-info.usg.edu
apps.usg.edu
statuspage.io
ftp.ssc.usg.edu
statuspage.io
www.bor.usg.edu
*.proxygsu-nega.galileo.usg.edu
*.view.usg.edu
apistatus.pitneybowes.com
statuspage.io
www.ssc.usg.edu
statuspage.io
app.usg.edu
ssl.ssc.usg.edu
statuspage.io
access.ssc.usg.edu
sharepoint.ssc.usg.edu
*.gafirst.usg.edu
statuspage.io
apistatus.pitneybowes.com
statuspage.io
emajor.usg.edu
statuspage.io
statuspage.io
gsw.gabest.usg.edu
*.proxygsu-sfor.galileo.usg.edu
statuspage.io
statuspage.io
statuspage.io
apistatus.pitneybowes.com
*.proxygsu-pswf.galileo.usg.edu
statuspage.io
dataviz.usg.edu
statuspage.io
ducs-con.adm.usg.edu
statuspage.io
statuspage.io
statuspage.io
usgtrackit.bor.usg.edu

Certificate

The complete raw certificate details for apps.usg.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEHcYFQNnMvHE+zQrMA9
tkLW3SfPJIXpwuawz8Kbj7TH67kWpufYWdSfRWthS+TdzIxlIS/5bfH9KMPU9lIE
/mLFM76mGKBVE/9QIuoDlMmLGU6ZBWHJPbHFijPaTIPyo76Vfqj2NRGNXnPsSrQs
kzf3TFtbPtF+ttQDi4KTOUqIelFYhyuP0I77D1Z/Bzfp342/Tgp/CVnposSRRD1h
MAEHH1nVHYzPi3p6SzfTRHEpOFYjQWOG2xo8FeJTIYfqlmYx5//grEAr8eeE9yOO
2vSx+Dc8k+ML3Gcv7hnU2J/mLZGRbRP6WAsM63egcBQZTEkgGdJu5sZ1EAMBXLxr
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 227820775005019797317131587443790776956
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '30334'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geogia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '270 Washington Street, S.W.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University System of Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apps.usg.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24270231746522180712212781347888663053164127649152263983774875402526439741099164481544053445264840527768625447235559893002083318082195810519211102040024174902627630066676517259114036167637975089347428649831966284819710522682679831796665899683501511446457355187361247637736387294906714215222267197790347202565430198810214044407876384667903458869610576723249022605703711222948214579390884386425637430872663999589384618507752890099483175311701795470497725664148614187002789041871609569171003721841728802631280425462465606053152007606015683007055997731875471731638371808572613488390615857158034896167502457635822360095683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74bf86291b9c889afe5d4cf796dbe3fd4853c26a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.usg.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016683fc65310000040300473045022100a2c4cb524c224aaf5443a796c8a7f4964baeaef837ca74111d52249ae3a8cd0202203521081787e8cfad13149293b63049b7989d73f15cfa774c6cf45658977c1f6d007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016683fc658c000004030047304502201c81634072e6f679e8f70ea51745459f378732346aa71117c9783410769dbfb902210092c6a43b6125bd677f8f2f9f976118898badd5751d8246979e8713d7e2008b6d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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