idm-prod-epic-rest.mdanderson.edu

- The University of Texas M.D. Anderson Cancer Center -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number 50:a2:77:fb:30:02:c1:c6:3f:c6:c5:0f:23:64:28:85 was issued on by Internet2.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

The University of Texas M.D. Anderson Cancer Center

Organization: The University of Texas M.D. Anderson Cancer Center
State / Province: Texas
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 50:a2:77:fb:30:02:c1:c6:3f:c6:c5:0f:23:64:28:85
Serial Number (int): 107181825261746150934101581061939275909
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 0b:2b:50:61:f2:87:4a:36:7b:bc:dd:01:14:de:27:70:c0:e2:68:34
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): 3d:cc:d7:e5:22:fa:52:02:56:a5:a4:06:8c:87:72:58:c4:e5:a5:28
Fingerprint (sha256): 0a:2d:7c:6b:d2:6a:c8:32:61:d9:57:a5:d3:8a:f4:aa:85:e2:2b:29:be:5f:58:f3:97:3c:f7:82:b8:68:fa:33

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate idm-prod-epic-rest.mdanderson.edu

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for idm-prod-epic-rest.mdanderson.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

idm-prod-epic-rest.mdanderson.edu
adprloaidm3.mdanderson.edu
adsrloaidm3.mdanderson.edu
aodrloaidm1.mdanderson.edu
aoprloaidm2.mdanderson.edu
aosploaidm1.mdanderson.edu
aosrloaidm1.mdanderson.edu
aosrloaidm2.mdanderson.edu
aotrloaidm1.mdanderson.edu

Other certificates including the domain name mdanderson.edu

(limited to 100 certificates)
icmobile.mdanderson.edu
1mcdcprd004.mdanderson.edu
lync.mdanderson.org
bcaweb.mdanderson.edu
mda02plt.mdanderson.org
qcdwldev-web.mdanderson.edu
snowinv-dev.mdanderson.edu
dcgdcprd007.mdanderson.edu
icmychart.mdanderson.edu
copwldocmps1.mdanderson.edu
moclia-stage.mdanderson.edu
mailbox.mdanderson.org
ehrsdwebrelbvb.mdanderson.edu
qiacapi.mdanderson.edu
dcswlmesaview.mdanderson.edu
dcgdcprd004.mdanderson.edu
snow.mdanderson.edu
1access.mdanderson.edu
stage-qiacapi.mdanderson.edu
dosrlredcap01s.mdanderson.edu
cpbonbaseroi.mdanderson.edu
sapbidev.mdanderson.edu
doprlredcap02p.mdanderson.edu
onbaseroipoc.mdanderson.edu
dcgdcprd006.mdanderson.edu
oc.mdanderson.edu
dopwlrdsserver.mdanderson.edu
1mcintconzoom02.mdanderson.edu
biobank-stage.mdanderson.edu
cpbdcprd003.mdanderson.edu
weiji.mdanderson.edu
men.mdanderson.org
mdasign.mdanderson.edu
cpbdcprd003.mdanderson.edu
acadtech-dev.mdanderson.edu
scpapfwapp.mdanderson.edu
doprlstreaming.mdanderson.edu
mobileaccessendpoint.mdanderson.edu
dcgdcprd004.mdanderson.edu
mdawireless-fs.mdanderson.edu
1mconbaseroi.mdanderson.edu
v-armada.mdanderson.edu
1mcdcprd001.mdanderson.edu
iscvwebtst.mdanderson.edu
pacs.mdanderson.edu
hswstg.mdanderson.edu
ehrsdwebbkrv.mdanderson.edu
dopwlps1web.mdanderson.edu
dcpalcsc5m.mdanderson.edu
d1prlcscui3.mdanderson.edu
dcgdcprd008.mdanderson.edu
dcgonbasepro01.mdanderson.edu
roadstest.mdanderson.edu
ehrsdwebprdvc.mdanderson.edu
mylink-sup.mdanderson.edu
ehrbirestrelbva.mdanderson.edu
cpbsnowmgrdev1.mdanderson.edu
dopwldibrainlab.mdanderson.edu
cpbdcprd002.mdanderson.edu
dcpalcsc5w6.mdanderson.edu
ccgfamilyhistory.mdanderson.edu
enroll-device.mdanderson.edu
scpaptmeddi02.mdanderson.edu
cpbdcprd006.mdanderson.edu
1mconbaseapp01.mdanderson.edu
snowinv.mdanderson.edu
webqa.mdanderson.edu
idm-prod-epic-rest.mdanderson.edu
qa-qiac.mdanderson.edu
prodsp2013.mdanderson.edu
d1twlicttest.mdanderson.edu
dopwlinowapp2a.mdanderson.edu
dev-qiac.mdanderson.edu
4info.mdanderson.edu
dcgdcprd003.mdanderson.edu
zoom.mdanderson.org
oneaccesspwrs-staging.mdanderson.edu
aspera-staging.mdanderson.org
webstagep.mdanderson.edu
apistage.mdanderson.edu
dcgintconmed01.mdanderson.edu
idm-prod-epic-rest.mdanderson.edu
dev-qiac.mdanderson.edu
4info.mdanderson.edu
dcgdcprd008.mdanderson.edu
ehrsdwebtstva.mdanderson.edu
d1pwlipcttbcrc.mdanderson.edu
cpbdcprd004.mdanderson.edu
carelinktr.mdanderson.edu
emprss.mdanderson.edu
eps.mdanderson.edu
ehrwelwebrel1.mdanderson.edu
ehricmychstga01.mdanderson.edu
ehrcarelnkrbld1.mdanderson.edu
epm.mdanderson.edu
nonprddskpsc.mdanderson.edu
dopwldlpenf.mdanderson.edu
pocdsk.mdanderson.org
ehrmychrbld1.mdanderson.edu
dcgintconzoom01.mdanderson.edu

Certificate

The complete raw certificate details for idm-prod-epic-rest.mdanderson.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbiVLrTaRcQ0/I/tpAX6
2HzM7kRQt11SqL9fO+JRWkru7a3vq2DZKsE8U9Nn6wEjb7ZLtqD0X2ijRvopDezP
TGwd9bmBKl4Q90irk1+acg4FzSNfNfH/lgrPwFDzz/1tHkZHBVaYQYrRXXyVsxfJ
1bp9d6N7P6Kpa8sxis3YWLKSoIi/CVe1MFiyTmTpV1k0FQMaUsASTpoa7AztNO5E
p/VKmlkDzzHl1g16OG4leQeIdsMWjWRssIyqY4gFBKKxbJhomvn2xe+eYwbyhaU5
QAkIe6KPQ396uGJgMOHJqhClZvcLMb8I1MKBHysAsuMWAdXqpxeiZ6XFs7aVmVkd
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 107181825261746150934101581061939275909
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of Texas M.D. Anderson Cancer Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'idm-prod-epic-rest.mdanderson.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24455014001887620054833991860599843430699152909144882543889569284652973180226178090093109769645572550619127456715927828946219404545988731874972599015419825884408106848999100441496100797896176330092161276667720137189921154507877023020086310712553042497343374922559916198504110419191168117154570232531918450901382867569374396068832209834424059202856512046948842675655996208621041627826772466185972327871842600806720449564200582604292179583312845908634318394069190363996768703227399911391685222328512713119522341825551521833878280136610472789283302939305720439844374840820801274911748013723050771148695818875095276395853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b2b5061f2874a367bbcdd0114de2770c0e26834
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (263 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idm-prod-epic-rest.mdanderson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adprloaidm3.mdanderson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adsrloaidm3.mdanderson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aodrloaidm1.mdanderson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aoprloaidm2.mdanderson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aosploaidm1.mdanderson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aosrloaidm1.mdanderson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aosrloaidm2.mdanderson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aotrloaidm1.mdanderson.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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