mychart.bcm.edu

- Baylor College of Medicine -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number e2:6d:6a:7a:52:45:d5:e7:3c:92:cf:8c:1d:02:07:d2 was issued on by Internet2.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Baylor College of Medicine

Organization: Baylor College of Medicine
State / Province: Texas
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): e2:6d:6a:7a:52:45:d5:e7:3c:92:cf:8c:1d:02:07:d2
Serial Number (int): 300973647031687294121611561043629311954
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 11:78:42:03:70:83:25:82:d9:b3:6c:df:56:13:39:b0:54:6a:46:38
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): 73:e7:91:d2:37:50:7b:49:11:46:68:f3:24:82:27:6e:7c:51:2c:ee
Fingerprint (sha256): 09:3c:69:e4:53:27:6f:d1:4b:31:27:f3:32:16:0e:3c:a5:2c:18:ec:0f:82:72:25:17:0a:f4:35:af:99:0a:75

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate mychart.bcm.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mychart.bcm.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mychart.bcm.edu

Other certificates including the domain name bcm.edu

(limited to 100 certificates)
forms.bcm.edu
sapintportal.bcm.edu
intranet-calendar.bcm.edu
semaphore-qa.bcm.edu
alphaphinetwork.com
bcmess.bcm.edu
connect.bcm.edu
webmail.hnl.bcm.edu
vpn.bcm.edu
lyncfepool1.bcm.edu
redcap.research.bcm.edu
acsconnects.org
docuware.admin.bcm.edu
password.bcm.edu
cvd.hgsc.bcm.edu
aceconnection.org
aatlconnected.com
media.bcm.edu
hgsc-hcp-aw.hgsc.bcm.edu
pwss.bcm.tmc.edu
vpn01.bcm.edu
tst-slicerdicer.clinical.bcm.edu
anscsp.research.bcm.edu
myappsdev.bcm.edu
alumniucsh.com
sigauth.bcm.edu
evault.bcm.edu
oncoredev.dldcc.bcm.edu
deku.dldcc.bcm.edu
www.bcm.edu
connect.bcm.edu
cryoemdb.bcm.edu
mychart.bcm.edu
cams.bcm.edu
pdxportal-stg.dldcc.bcm.edu
aceconnection.org
blake.bcm.edu
biobank.research.bcm.edu
www.hgsc.bcm.edu
fmog.bcm.edu
tcrbbiobank.research.bcm.edu
tls.automattic.com
aatlconnected.com
epa-safegx0-p01.ad.bcm.edu
ictr-qa.research.bcm.edu
sug-angus.hgsc.bcm.edu
careeverywhere.bcm.edu
vpn02.bcm.edu
mychart.bcm.edu
epicapps.bcm.edu
vpn01.bcm.edu
mobid.analytics.bcm.edu
claimsmanager-dev.clinical.bcm.edu
collaborate.bcm.edu
mhgretreat.research.bcm.edu
cpd.education.bcm.edu
ahlafoundationconnect.com
cas.research.bcm.edu
mobi.analytics.bcm.edu
ecw-calabrio-p01.bcm.edu
progeny-fhq-dev.dldcc.bcm.edu
tls.automattic.com
apps.bcm.edu
vpn02.bcm.edu
tls.automattic.com
tls.automattic.com
iron-ea.bcm.edu
oncoredev.dldcc.bcm.edu
hgsc-vmweb-08.hgsc.bcm.edu
ahlafoundationconnect.com
halo-esxi.lssbc.bcm.edu
careeverywhere.bcm.edu
primordial.clinical.bcm.edu
igap.research.bcm.edu
connect.bcm.edu
connect.bcm.edu
biobank.research.bcm.edu
oncore-stg.dldcc.bcm.edu
sharepoint.bcm.edu
hsweb-trn.clincal.bcm.edu
dev-slicerdicer.clinical.bcm.edu
ecl-uprint-p01.ad.bcm.edu
tls.automattic.com
mediasrc.bcm.edu
tls.automattic.com
metrics.apps.bcm.edu
fmog-qa.bcm.edu
access.fortefoundation.org
cams.bcm.edu
brain.bcm.edu
nadcdev.bcm.edu
mhgretreat.research.bcm.edu
primordial.clinical.bcm.edu
ictr-dev.research.bcm.edu
acquire2-cats-stg.research.bcm.edu
epicapps-dev.bcm.edu
myappsdev.bcm.edu
cas.research.bcm.edu
aatlconnected.com
oncore-dev.dldcc.bcm.edu

Certificate

The complete raw certificate details for mychart.bcm.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGyzCCBTOgAwIBAgIRAOJtanpSRdXnPJLPjB0CB9IwDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCVVMxEjAQBgNVBAoTCUludGVybmV0MjEhMB8GA1UEAxMYSW5D
b21tb24gUlNBIFNlcnZlciBDQSAyMB4XDTI0MDQyOTAwMDAwMFoXDTI1MDUzMDIz
NTk1OVowXDELMAkGA1UEBhMCVVMxDjAMBgNVBAgTBVRleGFzMSMwIQYDVQQKExpC
YXlsb3IgQ29sbGVnZSBvZiBNZWRpY2luZTEYMBYGA1UEAxMPbXljaGFydC5iY20u
ZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1brNpfMQdyVA69K
vOLXvfQ3cqoIaHUb/Gd4DPaReSVgylR4e+86ygqPBQuJrbVISKtuW6Ov/f9GNKBm
zFWpX6AGDd31Lsps5uOxXLFS2hzX36Dp4UqdrPKHAPdaBo/e5mMiGOH+wkoIg6pA
Dlx6fmItzTPaQjB7/8S2EQ/QG+bIZT21CvcmhHBTw58TLw3CU5+yBLjHo261Z7+N
zFdjCobVprAeTKqaOMR4+853oIhEdSrK6mCkEeoOFE0Vlx5Xp6qnAH9/oe9TMPxA
jmAZKIPIi2kmxe7QsrMz/tbcn96zhhNbjY2O0du+86VSkNgrVbqtKh933wHDDpz7
qywneQIDAQABo4IDHjCCAxowHwYDVR0jBBgwFoAU70wAkqb7di5eleLJX4cbGdVN
4tkwHQYDVR0OBBYEFBF4QgNwgyWC2bNs31YTObBUakY4MA4GA1UdDwEB/wQEAwIF
oDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJ
BgNVHSAEQjBAMDQGCysGAQQBsjEBAgJnMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8v
c2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjBABgNVHR8EOTA3MDWgM6Axhi9odHRw
Oi8vY3JsLnNlY3RpZ28uY29tL0luQ29tbW9uUlNBU2VydmVyQ0EyLmNybDBwBggr
BgEFBQcBAQRkMGIwOwYIKwYBBQUHMAKGL2h0dHA6Ly9jcnQuc2VjdGlnby5jb20v
SW5Db21tb25SU0FTZXJ2ZXJDQTIuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2Nz
cC5zZWN0aWdvLmNvbTAaBgNVHREEEzARgg9teWNoYXJ0LmJjbS5lZHUwggF+Bgor
BgEEAdZ5AgQCBIIBbgSCAWoBaAB3AM8RVu7VLnyv84db2Wkum+kacWdKsBfsrAHS
W3fOzDsIAAABjyn520IAAAQDAEgwRgIhAOqCOrcA/3Sj9IOcjpn6EIG9pMkBkJyj
MyJvZ7kfM4NEAiEAxaf3U4MMkbjvPCx49k6iVUN5yH8/sj5zY9gxY5Dp0T8AdQCi
4wrkRe+9rZt+OO1HZ3dT14JbhJTXK14bLMS5UKRH5wAAAY8p+dr5AAAEAwBGMEQC
IE5gR0Jxz9XwCaRMfG8doLWfh+6bO3ej30qFdVWWoW5gAiAfaJMOTXRlJo3cECh/
BIn208O8m1u11z1G0L9BQsq/3AB2AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6
ZLFimjnfAAABjyn52t8AAAQDAEcwRQIgEwT91BPjRRI/oU2zhlnJ9TT2t9yqpmAO
TQLWQJ+KEmACIQC+/6b2BeAOJF4Uc+n9GIF7KcAMNSMA4r6cwhmJXYgfDDANBgkq
hkiG9w0BAQwFAAOCAYEAJdBiKkVS1w5YH2WQhDCfn8CM1I6Pwgm3s/tqX4wjXwlZ
d2DahI2/wsfi7hfFYf3y4JWjbX01HRi9sDKyiJC0nNrNA4friK0rJbCQ83jBEzm6
6hWBg3LlPUVkfJnfwcLX4nAhEwrAYq/wNojHGSjgZg3CZQoEgI9xbyQe+LmkVFGz
8EtCUBnEq5DlWP/c3hAkOcM40IjAWuglUBZyymSwaDVdmVSygVKgAO+nPXYO4JDM
c2PU8hdEVb85OS2Kr/UT5rl3Mp7n0XSQCv9nRU8K6o2+/JGPViJN5WCXHUePaEaF
L4SZgfibDIsSRql0F9UrC1y3QEf+prER1eKL+zbYhfVf5sWFbXyQipeoE+d/+khA
tq71cRQHyt7lfE0FI/C/4qKX902xOYS4jTvEdg4KvGmR4r6rRyXkZPIIGhhA5lc+
0z7lMslFQ2CFzsqkliJz/T2RH/5L2yDgKMY/5dimjoN0xug2hGYdpfR91JowDWCS
zMMaf9vmK47obyddcCc4
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1brNpfMQdyVA69KvOLX
vfQ3cqoIaHUb/Gd4DPaReSVgylR4e+86ygqPBQuJrbVISKtuW6Ov/f9GNKBmzFWp
X6AGDd31Lsps5uOxXLFS2hzX36Dp4UqdrPKHAPdaBo/e5mMiGOH+wkoIg6pADlx6
fmItzTPaQjB7/8S2EQ/QG+bIZT21CvcmhHBTw58TLw3CU5+yBLjHo261Z7+NzFdj
CobVprAeTKqaOMR4+853oIhEdSrK6mCkEeoOFE0Vlx5Xp6qnAH9/oe9TMPxAjmAZ
KIPIi2kmxe7QsrMz/tbcn96zhhNbjY2O0du+86VSkNgrVbqtKh933wHDDpz7qywn
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300973647031687294121611561043629311954
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baylor College of Medicine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mychart.bcm.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21629611407811013561177841647078937911175416940936424494364149493952325109845893615476624831726668538701731768332699070124026101695216105355960859545420474213346784419616539753231683656112787356340245271528667068927666937474452718217043406781144776679562357512789955768945161339459515471498043116517251006736073766012456833126577392591823382725132743682030772241142723822692954587858287725896852517246518448742388368917692220484716549423017555635790884652273981453483688841308118398204233377627325410300687505947080387574460726201915973656549111793201277385509983885606682282419640850158207924643633997906361243674489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1178420370832582d9b36cdf561339b0546a4638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mychart.bcm.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		0025d0622a4552d70e581f659084309f9fc08cd48e8fc209b7b3fb6a5f8c235f09597760da848dbfc2c7e2ee17c561fdf2e095a36d7d351d18bdb032b28890b49cdacd0387eb88ad2b25b090f378c11339baea15818372e53d45647c99dfc1c2d7e27021130ac062aff03688c71928e0660dc2650a04808f716f241ef8b9a45451b3f04b425019c4ab90e558ffdcde102439c338d088c05ae825501672ca64b068355d9954b28152a000efa73d760ee090cc7363d4f2174455bf39392d8aaff513e6b977329ee7d174900aff67454f0aea8dbefc918f56224de560971d478f6846852f849981f89b0c8b1246a97417d52b0b5cb74047fea6b111d5e28bfb36d885f55fe6c5856d7c908a97a813e77ffa4840b6aef5711407cadee57c4d0523f0bfe2a297f74db13984b88d3bc4760e0abc6991e2beab4725e464f2081a1840e6573ed33ee532c945436085cecaa4962273fd3d911ffe4bdb20e028c63fe5d8a68e8374c6e83684661da5f47dd49a300d6092ccc31a7fdbe62b8ee86f275d702738