aspera-staging.mdanderson.org
- The University of Texas M.D. Anderson Cancer Center -
Issued by InCommon RSA Server CA 2
About this certificate
This digital certificate with serial number a3:69:61:6c:dc:46:00:95:07:62:08:f6:6c:b7:34:68 was issued on by Internet2.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
The University of Texas M.D. Anderson Cancer Center
Organization:
The University of Texas M.D. Anderson Cancer Center
State / Province:
Texas
Country: US
Country: US
Internet2
Organization:
Internet2
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): a3:69:61:6c:dc:46:00:95:07:62:08:f6:6c:b7:34:68Serial Number (int): 217211330501631879654061639631252173928
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 71:fe:f4:95:8e:e6:c5:a5:cb:90:6b:0f:05:94:12:08:34:40:4f:b9
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9
Fingerprint (sha1): 4b:dc:ad:f0:5e:c3:6e:fd:39:34:b4:df:42:ac:91:07:47:64:4d:52
Fingerprint (sha256): 0c:7e:8c:56:c7:11:d7:04:09:31:1a:1e:ff:83:b7:b4:ab:88:db:7e:8e:1c:f7:74:38:77:36:8f:02:e3:6a:11
Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl
Check the revocation status for certificate aspera-staging.mdanderson.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aspera-staging.mdanderson.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aspera-staging.mdanderson.org
dosrlaspera1.mdanderson.edu
dosrlaspera1.mdanderson.edu
Other certificates including the domain name mdanderson.org
(limited to 100 certificates)
icmobile.mdanderson.edu
emmdev.mdanderson.org
tmupdates.mdanderson.org
suag.mdanderson.org
lync.mdanderson.org
mda02plt.mdanderson.org
www3dev.mdanderson.org
mdanderson.org
mailbox.mdanderson.org
mobileaccess.mdanderson.org
iroc.mdanderson.org
spores.mdanderson.org
www.mdanderson.org
1mcintconzoom02.mdanderson.edu
mylinkply.mdanderson.org
men.mdanderson.org
rds.mdanderson.org
collaborate.mdanderson.org
www2dev.mdanderson.org
careers.mdanderson.org
isapp07sv01.mdanderson.org
test.mdanderson.org
rmx.mdanderson.org
dcdwliacucapp.mdanderson.org
my.mdanderson.org
roadstest.mdanderson.edu
dopwldibrainlab.mdanderson.edu
cge.mdanderson.org
ccgfamilyhistory.mdanderson.edu
rds.mdanderson.org
enroll-device.mdanderson.edu
lyncdcg.mdanderson.org
mobilemaildev.mdanderson.org
medhistorynp.mdanderson.org
webscheduler1.mdanderson.org
prodsp2013.mdanderson.edu
shib-staging.mdanderson.org
gifts.mdanderson.org
livestreaming.mdanderson.org
www3dev.mdanderson.org
atthetable.mdanderson.org
zoom.mdanderson.org
www3.mdanderson.org
atthetable.mdanderson.org
zebrafisharchievemanager.mdanderson.org
aspera-staging.mdanderson.org
access.mdanderson.org
pct.mdanderson.org
aware-phenotype-stage.mdanderson.org
men2.mdanderson.org
d1pwlipcttbcrc.mdanderson.edu
stats-ssl.mdanderson.org
shib.mdanderson.org
ippvip.mdanderson.org
ehricmychstga01.mdanderson.edu
ehrcarelnkrbld1.mdanderson.edu
pocdsk.mdanderson.org
isapp08pv01.mdanderson.org
ehrmychrbld1.mdanderson.edu
support.mdanderson.org
dcgintconzoom01.mdanderson.edu
webapp.mdanderson.org
vsupport.mdanderson.org
www3.mdanderson.org
mobileaccessdev.mdanderson.org
rds.mdanderson.org
tmupdates.mdanderson.org
pct.mdanderson.org
www2.mdanderson.org
etwscpb.mdanderson.org
dcdwlibcapp.mdanderson.org
alertustest.mdanderson.org
rpad1.mdanderson.org
jamfmdm2.mdanderson.org
ediweba-dev-v03.mdanderson.edu
iccareeverywhere.mdanderson.edu
rpad1.mdanderson.org
ftps.mdanderson.org
isapp08pv01.mdanderson.org
emmdev.mdanderson.org
san-35-s12.tlsprovisioning.exacttarget.com
shop.mdanderson.org
study.mdanderson.org
mailbox.mdanderson.org
test-vpn-router.mdanderson.org
skypeedge.mdanderson.edu
canvas.mdanderson.org
splunk01-stage.mdanderson.edu
chimera.mdanderson.org
zoom.mdanderson.org
ehricmobbkr1.mdanderson.edu
ivew.mdanderson.org
hsw.mdanderson.edu
ccgfamilyhistory.mdanderson.org
rpa.mdanderson.org
xtend.mdanderson.org
www.mdanderson.org
collaborate.mdanderson.org
myprojects.mdanderson.org
dopwldibrainlab.mdanderson.edu
emmdev.mdanderson.org
tmupdates.mdanderson.org
suag.mdanderson.org
lync.mdanderson.org
mda02plt.mdanderson.org
www3dev.mdanderson.org
mdanderson.org
mailbox.mdanderson.org
mobileaccess.mdanderson.org
iroc.mdanderson.org
spores.mdanderson.org
www.mdanderson.org
1mcintconzoom02.mdanderson.edu
mylinkply.mdanderson.org
men.mdanderson.org
rds.mdanderson.org
collaborate.mdanderson.org
www2dev.mdanderson.org
careers.mdanderson.org
isapp07sv01.mdanderson.org
test.mdanderson.org
rmx.mdanderson.org
dcdwliacucapp.mdanderson.org
my.mdanderson.org
roadstest.mdanderson.edu
dopwldibrainlab.mdanderson.edu
cge.mdanderson.org
ccgfamilyhistory.mdanderson.edu
rds.mdanderson.org
enroll-device.mdanderson.edu
lyncdcg.mdanderson.org
mobilemaildev.mdanderson.org
medhistorynp.mdanderson.org
webscheduler1.mdanderson.org
prodsp2013.mdanderson.edu
shib-staging.mdanderson.org
gifts.mdanderson.org
livestreaming.mdanderson.org
www3dev.mdanderson.org
atthetable.mdanderson.org
zoom.mdanderson.org
www3.mdanderson.org
atthetable.mdanderson.org
zebrafisharchievemanager.mdanderson.org
aspera-staging.mdanderson.org
access.mdanderson.org
pct.mdanderson.org
aware-phenotype-stage.mdanderson.org
men2.mdanderson.org
d1pwlipcttbcrc.mdanderson.edu
stats-ssl.mdanderson.org
shib.mdanderson.org
ippvip.mdanderson.org
ehricmychstga01.mdanderson.edu
ehrcarelnkrbld1.mdanderson.edu
pocdsk.mdanderson.org
isapp08pv01.mdanderson.org
ehrmychrbld1.mdanderson.edu
support.mdanderson.org
dcgintconzoom01.mdanderson.edu
webapp.mdanderson.org
vsupport.mdanderson.org
www3.mdanderson.org
mobileaccessdev.mdanderson.org
rds.mdanderson.org
tmupdates.mdanderson.org
pct.mdanderson.org
www2.mdanderson.org
etwscpb.mdanderson.org
dcdwlibcapp.mdanderson.org
alertustest.mdanderson.org
rpad1.mdanderson.org
jamfmdm2.mdanderson.org
ediweba-dev-v03.mdanderson.edu
iccareeverywhere.mdanderson.edu
rpad1.mdanderson.org
ftps.mdanderson.org
isapp08pv01.mdanderson.org
emmdev.mdanderson.org
san-35-s12.tlsprovisioning.exacttarget.com
shop.mdanderson.org
study.mdanderson.org
mailbox.mdanderson.org
test-vpn-router.mdanderson.org
skypeedge.mdanderson.edu
canvas.mdanderson.org
splunk01-stage.mdanderson.edu
chimera.mdanderson.org
zoom.mdanderson.org
ehricmobbkr1.mdanderson.edu
ivew.mdanderson.org
hsw.mdanderson.edu
ccgfamilyhistory.mdanderson.org
rpa.mdanderson.org
xtend.mdanderson.org
www.mdanderson.org
collaborate.mdanderson.org
myprojects.mdanderson.org
dopwldibrainlab.mdanderson.edu
Certificate
The complete raw certificate details for aspera-staging.mdanderson.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHHzCCBYegAwIBAgIRAKNpYWzcRgCVB2II9my3NGgwDQYJKoZIhvcNAQEMBQAw RDELMAkGA1UEBhMCVVMxEjAQBgNVBAoTCUludGVybmV0MjEhMB8GA1UEAxMYSW5D b21tb24gUlNBIFNlcnZlciBDQSAyMB4XDTI0MDYwMzAwMDAwMFoXDTI1MDcwNDIz NTk1OVowgYMxCzAJBgNVBAYTAlVTMQ4wDAYDVQQIEwVUZXhhczE8MDoGA1UEChMz VGhlIFVuaXZlcnNpdHkgb2YgVGV4YXMgTS5ELiBBbmRlcnNvbiBDYW5jZXIgQ2Vu dGVyMSYwJAYDVQQDEx1hc3BlcmEtc3RhZ2luZy5tZGFuZGVyc29uLm9yZzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL716joYG7+AtFsTTD4C6iU/pZFc NiAqYYmal4JwunerjT4Tx/BQcwxIW5PlYr0kljFGiuuWD6i2I1CqKUyy+WyZ+RZj hhYaRhGWu78F010ZRdw/TBn4eMqrUJvI816a+qKH3J/ajW9qKz1s8mu4pwYd0Q/U +l5IPU5bdUg1HzNlQG/jJaoFLR9KMpf+WFdFn1KKuTS8r/nhGObNvM4uFr3PutdQ pDfGugB0HPam/xAvUoYTCjfXOwAYSPSc+eE0rI7siUYNkEw9hcyTuZxO7zM/fCbt xUIwGvRgjxBG/aZRztbz6aOWCBDLSI9EUI/6Fg13gLX89HLi/UbtIzuxr7MCAwEA AaOCA0owggNGMB8GA1UdIwQYMBaAFO9MAJKm+3YuXpXiyV+HGxnVTeLZMB0GA1Ud DgQWBBRx/vSVjubFpcuQaw8FlBIINEBPuTAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0T AQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIw QDA0BgsrBgEEAbIxAQICZzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28u Y29tL0NQUzAIBgZngQwBAgIwQAYDVR0fBDkwNzA1oDOgMYYvaHR0cDovL2NybC5z ZWN0aWdvLmNvbS9JbkNvbW1vblJTQVNlcnZlckNBMi5jcmwwcAYIKwYBBQUHAQEE ZDBiMDsGCCsGAQUFBzAChi9odHRwOi8vY3J0LnNlY3RpZ28uY29tL0luQ29tbW9u UlNBU2VydmVyQ0EyLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGln by5jb20wggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AN3cyjSV1+EWBeeVMvrH n/g9HFDf2wA6FBJ2Ciysu8gqAAABj9+iDYgAAAQDAEcwRQIhAOE76YpMAJZgFQar vFrZYj5scV5s1fC5Cwlo0qIZYDOkAiBt+wxNlDbGyG5U4pLBJkbDKedZ6Vd5ji50 XaJQp+GhAAB3AA3h8jAr0w3BQGISCepVLvxHdHyx1+kw7w5CHrR+Tqo0AAABj9+i DTgAAAQDAEgwRgIhAKqUmk8VzAG2DmWTDMLIq6WsJdx7LJXPuaD1Y6il6s/QAiEA qFNR2bRx/PEORgl+9JR9zbp4zdoXm9n6tpKwfHqT2UkAdgAS8U40vVNyTIQGGcOP P3oT+Oe1YoeInG0wBYTr5YYmOgAAAY/fog0aAAAEAwBHMEUCIFnbbAytzam59Z7f jzO+ByYiUsQbGoj3jkDAIoL81SXGAiEA1DslLVE7iBDCYeFKjv0qoaIya0tjgDOY qfmMgTdqIp0wRQYDVR0RBD4wPIIdYXNwZXJhLXN0YWdpbmcubWRhbmRlcnNvbi5v cmeCG2Rvc3JsYXNwZXJhMS5tZGFuZGVyc29uLmVkdTANBgkqhkiG9w0BAQwFAAOC AYEAVose+y7mEkmIfme62n/w563Ewgbj/mVdeX+MVxfFGhl1NHe4buRtElfjsu72 /qYe73oG9bz5iBOhUyDJASbFgXam1S6DSirxdFVX0KrMbtsIipA8mKrTUeBoAAXr 0EeGv3TYXhRlSF5OAi+Q5hQ0RbkjNddsXEBBTQvEh+S5rGi0EN/0yhkrSDidWOCj cnnMBzcXkzIv4yin/i1QeFtVLB3mtvE46BK9tCO/+lKKIX5OOL0KYbdTeEWHZJeG vanlAbpxvI0dAHykkXWvsb85l1XGn80rqimScvX8TTEvd6oD73rF4lnEX9KTjbgE lAiYG+jEpMITaGY7++jiM3mWJ2f/F0KW/3cz9uvLupNV8YjZ88OFh19nG5NOmz5O M4dOwbCxkeX3zcS81NLj6cGjqw8TK0HMSsYAnB0FToW7sDXQrSqpksW+xheRAbme P7ErfzZ5ib4PAjHsm/rINYXopYFpKuCf875N1AK/u1q8tV3x+0Ds/pxaFhpuGvdc l4Gc -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvXqOhgbv4C0WxNMPgLq JT+lkVw2ICphiZqXgnC6d6uNPhPH8FBzDEhbk+VivSSWMUaK65YPqLYjUKopTLL5 bJn5FmOGFhpGEZa7vwXTXRlF3D9MGfh4yqtQm8jzXpr6oofcn9qNb2orPWzya7in Bh3RD9T6Xkg9Tlt1SDUfM2VAb+MlqgUtH0oyl/5YV0WfUoq5NLyv+eEY5s28zi4W vc+611CkN8a6AHQc9qb/EC9ShhMKN9c7ABhI9Jz54TSsjuyJRg2QTD2FzJO5nE7v Mz98Ju3FQjAa9GCPEEb9plHO1vPpo5YIEMtIj0RQj/oWDXeAtfz0cuL9Ru0jO7Gv swIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 217211330501631879654061639631252173928 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of Texas M.D. Anderson Cancer Center' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aspera-staging.mdanderson.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24106543124491962489079532445703808751776648240644330940078141837844938468254671948139068293723654435841325682971869701789915751339621824832519322446372215108969812747572787548793840959119655047163035308745146338757453708687132550187645861059153938227744133070839688926627731131299687362246032419482122151224969828500872182784857808242270493859794758001473083644040638541480573886955402295627228617592132069636699191415141615074389420179712760592061371990119947941276230463001243979947165916166629119931429605661422048217265295200829810498819432871821618592892451643280164597490559018187087368069271283228238190587827 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 71fef4958ee6c5a5cb906b0f0594120834404fb9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspera-staging.mdanderson.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dosrlaspera1.mdanderson.edu' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (3072 bits) 00568b1efb2ee61249887e67bada7ff0e7adc4c206e3fe655d797f8c5717c51a19753477b86ee46d1257e3b2eef6fea61eef7a06f5bcf98813a15320c90126c58176a6d52e834a2af1745557d0aacc6edb088a903c98aad351e0680005ebd04786bf74d85e1465485e4e022f90e6143445b92335d76c5c40414d0bc487e4b9ac68b410dff4ca192b48389d58e0a37279cc07371793322fe328a7fe2d50785b552c1de6b6f138e812bdb423bffa528a217e4e38bd0a61b753784587649786bda9e501ba71bc8d1d007ca49175afb1bf399755c69fcd2baa299272f5fc4d312f77aa03ef7ac5e259c45fd2938db8049408981be8c4a4c21368663bfbe8e23379962767ff174296ff7733f6ebcbba9355f188d9f3c385875f671b934e9b3e4e33874ec1b0b191e5f7cdc4bcd4d2e3e9c1a3ab0f132b41cc4ac6009c1d054e85bbb035d0ad2aa992c5bec6179101b99e3fb12b7f367989be0f0231ec9bfac83585e8a581692ae09ff3be4dd402bfbb5abcb55df1fb40ecfe9c5a161a6e1af75c97819c