cypress.forestry.oregonstate.edu

- Oregon State University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number fb:0f:70:69:ad:5f:3f:1f:b9:04:55:36:2a:b0:6d:8f was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oregon State University

Organization: Oregon State University
Organization unit: College of Forestry
Address: Oregon State University
Address: 154 Peavy Hall
Postal code: 97331
State / Province: OR
Locality: Corvallis
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fb:0f:70:69:ad:5f:3f:1f:b9:04:55:36:2a:b0:6d:8f
Serial Number (int): 333716391397380632244351907211248692623
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 18:3e:fd:d2:7a:b9:ff:df:c6:e2:68:08:08:ef:56:67:ee:e8:3d:eb
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): c2:86:19:d6:09:11:e1:71:b2:1d:8b:b1:a8:82:e0:d8:51:4f:61:66
Fingerprint (sha256): 09:55:21:c4:81:bd:08:1c:bf:ab:92:97:b7:81:53:02:d7:3f:ab:a1:48:be:f2:c6:47:73:83:e6:74:02:d5:79

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate cypress.forestry.oregonstate.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cypress.forestry.oregonstate.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cypress.forestry.oregonstate.edu

Other certificates including the domain name oregonstate.edu

(limited to 100 certificates)
hopper.science.oregonstate.edu
support.oregonstate.edu
workspace.oregonstate.edu
webdev8.acsmi.com
login.oregonstate.edu
3.7.prod.bubbleup.com
media.oregonstate.edu
webdev3.acsmi.com
webdev8.acsmi.com
nrtige.oregonstate.edu
engineering.oregonstate.edu
*.cass.oregonstate.edu
fchreporting-staging.extension.oregonstate.edu
cob-viewcs01.bus.oregonstate.edu
smtp.science.oregonstate.edu
science.oregonstate.edu
websites.bubbleup.net
open.oregonstate.education
*.proxy.library.oregonstate.edu
oscar.oregonstate.edu
5767874312404992-fe2.pantheonsite.io
engrprn.engr.oregonstate.edu
access.library.oregonstate.edu
emedia.tss.oregonstate.edu
sni.cloudflaressl.com
hyams.ceoas.oregonstate.edu
nagios.cws.oregonstate.edu
view-connect.css.oregonstate.edu
csacs2.nws.oregonstate.edu
constructionmap.fa.oregonstate.edu
rstudio.cosine.oregonstate.edu
uconnectlabs.com
glidernas1.coas.oregonstate.edu
hyams.ceoas.oregonstate.edu
uconnectlabs.com
wiki.cosine.oregonstate.edu
secure.engr.oregonstate.edu
ehsc.oregonstate.edu
*.nws.oregonstate.edu
ipconnect.oregonstate.edu
ombi.oregonstate.edu
sni.cloudflaressl.com
airwave.nws.oregonstate.edu
webtrac.recsports.oregonstate.edu
science.oregonstate.edu
appstest.engr.oregonstate.edu
blogs.oregonstate.edu
astro.nws.oregonstate.edu
airwave.nws.oregonstate.edu
3.7.prod.bubbleup.com
hopper.science.oregonstate.edu
code.oregonstate.edu
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
midpoint.iam.oregonstate.edu
burrows.chem.oregonstate.edu
osu-cm-sql.oregonstate.edu
webdev8.acsmi.com
hopper.science.oregonstate.edu
sni.cloudflaressl.com
emergency.oregonstate.edu
bfpsystems.oregonstate.edu
webdev8.acsmi.com
sni.cloudflaressl.com
motorpool.oregonstate.edu
mycard.oregonstate.edu
5718016125829120-fe1.pantheonsite.io
math.oregonstate.edu
barcode.campusops.oregonstate.edu
agsci.oregonstate.edu
lmsadm.ucsadm.oregonstate.edu
sharepoint.cloud.oregonstate.edu
cypress.forestry.oregonstate.edu
dev.ecampus.oregonstate.edu
3.7.prod.bubbleup.com
subramanian.science.oregonstate.edu
5718016125829120-fe1.pantheonsite.io
reports.osuf.oregonstate.edu
mail.pacificbath.webdev14.acsmi.com
sevisprod.nws.oregonstate.edu
helpdesk.oregonstate.edu
airwave.nws.oregonstate.edu
uconnectlabs.com
geoviz.ceoas.oregonstate.edu
sni.cloudflaressl.com
edge-uc4.peopleadmin.com
wilson.coas.oregonstate.edu
secure.oregonstate.edu
helpdesk.oregonstate.edu
sni.cloudflaressl.com
becommunity.oregonstate.edu
prism.nacse.org
classes.oregonstate.edu
*.library.oregonstate.edu
5767874312404992-fe2.pantheonsite.io
websites.bubbleup.net
sni.cloudflaressl.com
admtn.ucsadm.oregonstate.edu
my.risk.oregonstate.edu
gis.oregonstate.edu

Certificate

The complete raw certificate details for cypress.forestry.oregonstate.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2UR1iVn9r1tJdIS8UqW
DR7Yjkx/p2rdcekhRfWXXdx6TFjesaglPL7euxKDC/lS28avKq58kkeIbtutLj+z
u+YEPjZ636vQfgpsmO0eFZhPkdZRPAGuGaScJQxJHhJw9bhTDWTH603GQ9w/vdgN
MOUV8NfTpuXPul8ToLvDPxEIWyuFywxVlqHx5Bu9R3mQeNhqI8d7xnoE3zotHOdT
raZK2I1e93ecW9JlV9ApVdolHtHJAMloJ4TfsD8weMsECDMxJAd9NuGOPadwTFqa
wz73SHwI4hZcCGhbiq0XWpz2P00e9NKB6xFmQaB3spsa4o506yGL6nRl5Zhip9fW
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333716391397380632244351907211248692623
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '97331'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corvallis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oregon State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '154 Peavy Hall'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oregon State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'College of Forestry'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cypress.forestry.oregonstate.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18606870143727859482393353834126172611408187838298923382515004894334996202868922733100181467092631722713794615152145067145851418250423252091471181848514324045316132474781296008448158479792846799924382813999636419278908746188865929354644943717377851956770418849422355673774901494214605744652502535194431333293044091374712133238072170230287260689675638871898648158968220196293811160605953688068287105566586177302262906495938252976564957329375725063585435160952186133702502350078717004548936121424428722079433471937465788377510932920704635517615459868556147047203360366843268349921696953130126302824441049247701796378343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							183efdd27ab9ffdfc6e2680808ef5667eee83deb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cypress.forestry.oregonstate.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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