vpn.jh.edu

- Johns Hopkins University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number d1:3a:99:8e:73:b0:07:ab:0a:b2:cc:c8:a1:17:31:c1 was issued on by Internet2.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Johns Hopkins University

Organization: Johns Hopkins University
Organization unit: JH
Address: 5801 Smith Avenue
Postal code: 21209
State / Province: Maryland
Locality: Baltimore
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d1:3a:99:8e:73:b0:07:ab:0a:b2:cc:c8:a1:17:31:c1
Serial Number (int): 278112918831714456455897624576624374209
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 64:f5:c4:91:ab:48:cb:e3:2a:08:90:b1:49:ee:0a:2a:d8:28:a8:e3
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): e6:32:36:aa:ca:df:ef:18:e8:fe:aa:1c:86:e6:82:2e:3f:f7:66:95
Fingerprint (sha256): 0a:10:7f:26:9d:f5:ca:30:c5:aa:23:48:72:ef:d1:af:01:43:7e:82:f5:d5:66:3c:e5:20:54:cd:52:80:e4:59

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate vpn.jh.edu

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.jh.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.jh.edu
ebpulse1.jh.edu
ebpulse2.jh.edu
ebpulse3.jh.edu
ebpulse4.jh.edu
esvpn.jh.edu
mwpulse1.jh.edu
mwpulse2.jh.edu
mwpulse3.jh.edu
mwpulse4.jh.edu
netvpn.jh.edu

Other certificates including the domain name jh.edu

(limited to 100 certificates)
ndes3.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
vpntest.jh.edu
jhutnt.jh.edu
mycloud.jh.edu
mycloudtestint.jh.edu
jhsessmgr.jh.edu
jhmsgtextweb.wintest.adtest.jhu.edu
lists04.jh.edu
devrpad.jhu.edu
schakravartilab.jh.edu
devrpad.jhu.edu
mwpulsetest1.jh.edu
idp.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhdrtisepsn1.win.ad.jhu.edu
vpn.jh.edu
sp13test.jho365.jh.edu
myit.jh.edu
jhbomgarbeta1.win.ad.jhu.edu
polymea.jhu.edu
adfsazdev.jh.edu
mobiletest.johnshopkins.edu
myit.jh.edu
mobile.johnshopkins.edu
code.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
mdev.jh.edu
jhutnt.jh.edu
schakravartilab.jh.edu
adfed.jh.edu
mobile.johnshopkins.edu
offwebapps.johnshopkins.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
idp.jh.edu
ewsgithub.jh.edu
mobiletestmail.johnshopkins.edu
jhutnt.jh.edu
dnstest.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
mobile.johnshopkins.edu
my.jh.edu
mrpmpolyad01.hosts.jhmi.edu
azdevshib.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
ewspuppet19.jh.edu
idp.jh.edu
devvirtualvisit.jhmi.edu
mwpulselic1.jh.edu
mwpulselic1.jh.edu
vpndev.jh.edu
jh.edu
devrpad.jhu.edu
radar-base.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
jhutnt.jh.edu
ndes3.jh.edu
mobile.johnshopkins.edu
bme.phd.council.students.jh.edu
sickbay-test.jh.edu
ebaccess.jhu.edu
ndes3.jh.edu
m.jh.edu
jhutnt.jh.edu
mobile.johnshopkins.edu
testidp.jh.edu
gstage.tic.jh.edu
jhutnt.jh.edu
policies.jhu.edu
t.jh.edu
mobiletestmail.johnshopkins.edu
jhbomgarprod1.hosts.jhmi.edu
san-30-s12.tlsprovisioning.exacttarget.com
mwpulsetest1.jh.edu
pistg.jh.edu
mrpmpolyrm02.hosts.jhmi.edu
testidp.jh.edu
jhutnt.jh.edu
fodtest.jh.edu
idp.jh.edu
jh.edu
mysupportbeta.jh.edu
azuredev.jh.edu
jhutnt.jh.edu
mysoftware.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
mysupportbeta.jh.edu
api.jh.edu
mycloudtestint.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
mrdmpolydma01.hosts.jhmi.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhbomgarprod1.hosts.jhmi.edu
trac.jh.edu
jh.edu

Certificate

The complete raw certificate details for vpn.jh.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxVnkH7O5AUJLcSDvqzI
WBGCNuH37iW2op6EEv+coCPonuk0kqd5goHa73AgX/utr7CEA7mtOJZg/0E0sQka
SLEbaZMVhkUb90R1wBMMzc5u3rcSnJZtef6J17oazrab7TZ5zhKeNiV1PhT+cbnw
i9on3g2j8t6qF1G66Kl5uC0v4pI9ZHppd94568gWZuKsenBveaXfPOMmWclFnwuQ
SPFQdA7lTVhCHLNbZuZLmJMzOErganLDe7yMlvoEJigo2FaISvPthf2v3RYmRmoI
p78gznVo3qkRzuYJgThKyLXnoIDADvcFuZ5g423mg57c0NLGqq4BRcfcJEGeKGhr
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278112918831714456455897624576624374209
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '21209'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baltimore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5801 Smith Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johns Hopkins University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.jh.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25636930884401083896543573660220051320585046717236590728262244676252104001676853465253493606237105171336167114369370538819651459477270226769712636595711101504264368767253034718495329205023688356096813160954415199712277015342838249430066173946344718572843608629297901841007194000193331843877251644740076602052826471078312231822198451232545037682243938369521935221512877993112328411079115547859939531201347723644110191245809358188449540960571244796768248901476864585740551366015639212191354571674890826462480542866551894370682581819867385206546252729455204234451675862323320944314655796871751981238949357913434655058891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64f5c491ab48cbe32a0890b149ee0a2ad828a8e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (180 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.jh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebpulse1.jh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebpulse2.jh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebpulse3.jh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebpulse4.jh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esvpn.jh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mwpulse1.jh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mwpulse2.jh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mwpulse3.jh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mwpulse4.jh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netvpn.jh.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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