chef.alaska.edu

- University of Alaska Statewide System -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number c5:c3:63:57:8b:1f:46:24:c7:f6:7a:93:68:0f:c9:7c was issued on by Internet2.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Alaska Statewide System

Organization: University of Alaska Statewide System
Organization unit: OIT Technical Services
Address: PO Box 755320
Postal code: 99775
State / Province: AK
Locality: Fairbanks
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c5:c3:63:57:8b:1f:46:24:c7:f6:7a:93:68:0f:c9:7c
Serial Number (int): 262872427951499842915703223492839197052
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 72:5c:e8:2c:26:3a:3e:28:9b:e1:4f:b8:a2:61:4c:95:7f:bd:df:21
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 6c:f1:9a:1a:37:22:86:e3:a1:8a:41:ce:f7:1a:f3:a6:4e:1a:69:73
Fingerprint (sha256): 0a:23:19:16:99:40:42:35:8a:bc:91:b4:6d:93:a6:99:40:e3:ae:0a:28:cc:55:40:39:cb:f1:de:cb:0c:91:a9

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate chef.alaska.edu

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chef.alaska.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chef.alaska.edu
chef.aws.alaska.edu
chef.awssb.alaska.edu
sw-chef-wp1.alaska.edu
sw-chef-wp1.aws.alaska.edu
sw-chef-wp1.awssb.alaska.edu
sw-chef-wp2.alaska.edu
sw-chef-wp2.aws.alaska.edu
sw-chef-wp2.awssb.alaska.edu
sw-chef-wp3.alaska.edu
sw-chef-wp3.aws.alaska.edu
sw-chef-wp3.awssb.alaska.edu
sw-chef-wp4.alaska.edu
sw-chef-wp4.aws.alaska.edu
sw-chef-wp4.awssb.alaska.edu

Other certificates including the domain name alaska.edu

(limited to 100 certificates)
tls.automattic.com
glaciers.gi.alaska.edu
merchantstatus.paysafecard.com
mediaspace.uaa.alaska.edu
writersconf.kpc.alaska.edu
uas.alaska.edu
elastic.giseis.alaska.edu
writersconf.kpc.alaska.edu
cumulus.asf.alaska.edu
banking-business-review.com
banking-business-review.com
authserv.alaska.edu
sw-redheada.apps.ad.alaska.edu
ellucian-mobile-test.alaska.edu
community.uaf.edu
www.kpc.alaska.edu
epay.alaska.edu
sites.kpc.alaska.edu
officeonlineapps.alaska.edu
banking-business-review.com
ezdiharstatus.mambu.com
akclimate.org
matter.uaa.alaska.edu
elmo.uas.alaska.edu
fbk-ombfm.apps.ad.alaska.edu
web.kpc.alaska.edu
ise-mnt-2.alaska.edu
www.asf.alaska.edu
uas.alaska.edu
161511-web1.vilcek.org
jlc-web-test.uaa.alaska.edu
community.uaf.edu
wifi-mat.uaa.alaska.edu
ezdiharstatus.mambu.com
collegiatelink.studentvoice.com
share.sikuliaq.alaska.edu
id.gina.alaska.edu
odd.net.gi.alaska.edu
anc-shcc-wb.ua.ad.alaska.edu
5755034180517888-fe4.pantheonsite.io
eu-status.titan.email
akenergygateway.alaska.edu
merchantstatus.paysafecard.com
myua.alaska.edu
fbk-toolik2.apps.ad.alaska.edu
anc-express-core-01.uaa.alaska.edu
currentcatalog.uaa.alaska.edu
sbb.kpc.alaska.edu
edir.alaska.edu
www.dtn.alaska.edu
jlc-service.uaa.alaska.edu
wiki.sikuliaq.alaska.edu
merchantstatus.paysafecard.com
collegiatelink.studentvoice.com
accs.uaa.alaska.edu
sbb.kpc.alaska.edu
yukon.alaska.edu
id.gina.alaska.edu
rocketchat-prod.compute.asf.alaska.edu
jlc-web.uaa.alaska.edu
paysearch.gi.alaska.edu
eu-status.titan.email
cas.alaska.edu
psi.alaska.edu
accs.uaa.alaska.edu
3dspace.alaska.edu
geomatics.uaa.alaska.edu
facilities.alaska.edu
dotson.uaa.alaska.edu
www.explore-ice.gi.alaska.edu
giwebsite-dev.rcs.alaska.edu
chef.alaska.edu
redirect.web.alaska.edu
eu-status.titan.email
5755034180517888-fe4.pantheonsite.io
api.daac.asf.alaska.edu
casc.alaska.edu
qmenu.alaska.edu
nutrients.alaska.edu
nanuna.gi.alaska.edu
geoforce.alaska.edu
id.gina.alaska.edu
eseagrant.alaska.edu
rl6-hosting-status.rldatix.com
anc-surplus-vpn.uaa.alaska.edu
chef.alaska.edu
accscatalog.uaa.alaska.edu
uaa-od.ua.ad.alaska.edu
www.alaska.edu
elmo.uas.alaska.edu
akclimate.org
loadbalancer.uaa.alaska.edu
san-9-s12.tlsprovisioning.exacttarget.com
anc-express-edge.uaa.alaska.edu
sit-arcgis.uas.alaska.edu
jun-vpn.uas.alaska.edu
nga.lternet.edu
campaignmanager.uaa.alaska.edu
degreeworksuaf.alaska.edu
sw-ise-demo.alaska.edu

Certificate

The complete raw certificate details for chef.alaska.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynk9T956OafPe3lBXFjW
6Gd3CaZeRfV6Sk6+Vn4sYGlYmaqbIyG+m+X3TueMM+TQiP9R3crroV8VbB4IfNTI
oUYYYlNDp2g+NFA7wIY/vsXG8b3g4ufH2hdU44lHsaWf7+bO2XC/U2wjyOzEwY6g
KYEbFwT/ObsE11hfVu/26eqC4MOireLX9ef8g991uhPF+fIvpPtd6W5yqpsUsq3F
cYMymVFjDJVbuFiGMIGsA22lQTesnN0P6z5ddGEBGn0RbPZ3kU++FSgGU6vjWf6X
Hwi999a2WY9xagL48uvdaRYx2HKi18KCAed/J/m6gk4I/eZL2geS2rja9qJZr+Z0
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262872427951499842915703223492839197052
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '99775'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fairbanks'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PO Box 755320'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Alaska Statewide System'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OIT Technical Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chef.alaska.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25559923028804993565721070497184740264660643991616928308807296556980989355407817772930210299176805928332119252397491335980681056727009323197313907872550700212086848548825372786791696746638863072980010245667309912870223362947152037876642660110367946620909428508499143187269453729875765751085643049275818307928785675413474347974131236832006015116126216323651736122554708550790868669529963239515383302867947769743118733978138766246768477775646578015010625456514278168327040597237137111397655673169789324213799460159690823164086419594178245487149293674337006584637793497326874689400725167972450157628116460274805234889879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							725ce82c263a3e289be14fb8a2614c957fbddf21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (393 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef.alaska.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef.aws.alaska.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef.awssb.alaska.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sw-chef-wp1.alaska.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sw-chef-wp1.aws.alaska.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sw-chef-wp1.awssb.alaska.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sw-chef-wp2.alaska.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sw-chef-wp2.aws.alaska.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sw-chef-wp2.awssb.alaska.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sw-chef-wp3.alaska.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sw-chef-wp3.aws.alaska.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sw-chef-wp3.awssb.alaska.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sw-chef-wp4.alaska.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sw-chef-wp4.aws.alaska.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sw-chef-wp4.awssb.alaska.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00422ce7098162b0df3e995dd1030672564d2cd293d746f0793e0dd1deef20d1883d7761874f4880ac391ce0b3fa71a0045718af1579eb893c3df8c482de312243dab4d8603602dfb8cc5aa32c168eeb3349239253922f28c559235bf7d61b09b28c4a38df0169442b94311893851e5aba7c25c6daac85b9a7cb404a860b7adc02972592a098f19c91e7fddc4cc41b121cd9b6c0f7ed04540cdb654137fb0a0c3b219c5221c2db60368beabdb0bf99fe253dbd4ac782db04e9aa99fdcb1191cb76157fb734a88deb14ea377f59add03f4a0789a48a41216829a8cd50db7605d028a32e06047fbc6e8aca8f1402bf45f6620bb39a0f83552adedeb13ac744875960