mobiletest.johnshopkins.edu

- Johns Hopkins University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 72:28:3e:c9:cb:74:e5:3b:fe:cf:8a:c4:9a:55:00:ef was issued on by Internet2.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Johns Hopkins University

Organization: Johns Hopkins University
Organization unit: JH
Address: 5801 Smith Avenue
Postal code: 21209
State / Province: Maryland
Locality: Baltimore
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 72:28:3e:c9:cb:74:e5:3b:fe:cf:8a:c4:9a:55:00:ef
Serial Number (int): 151740956891044669304325235972876075247
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 2a:5e:8b:e6:9d:3e:cc:c4:5a:ac:a8:76:0e:b4:4d:be:11:be:be:57
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): b5:58:cf:75:f0:bf:1f:39:8b:33:5a:2e:9a:29:c1:49:2a:4c:f4:da
Fingerprint (sha256): 0e:b7:69:9d:16:1d:20:2f:a1:68:8e:b0:7e:10:80:80:e6:7d:f7:59:85:c9:f7:19:67:8e:d9:05:0d:59:1b:f2

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate mobiletest.johnshopkins.edu

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mobiletest.johnshopkins.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mobiletest.johnshopkins.edu
2010test1.wintest.adtest.jhu.edu
2010test11.wintest.adtest.jhu.edu
2010test3.wintest.adtest.jhu.edu
2013test1.wintest.adtest.jhu.edu
2013test2.wintest.adtest.jhu.edu
autodiscover.wintest.adtest.jhmi.edu
autodiscover.wintest.adtest.jhu.edu
mobile.jh.edu
mobile15.johnshopkins.edu
mobiletestcba.johnshopkins.edu
wintest.adtest.jhmi.edu
wintest.adtest.jhu.edu

Other certificates including the domain name johnshopkins.edu

(limited to 100 certificates)
e210.johnshopkins.edu
devreotes.johnshopkins.edu
kasslab.johnshopkins.edu
connectdev.johnshopkins.edu
kasslab.johnshopkins.edu
kasslab.johnshopkins.edu
devrpad.jhu.edu
devrpad.jhu.edu
operations.onecampus.com
ssltest.johnshopkins.edu
esmepiciconnnp.esm.johnshopkins.edu
idp.jh.edu
esmepicmonnp1.esm.johnshopkins.edu
it.johnshopkins.edu
connectweb4.johnshopkins.edu
esgndestest2.johnshopkins.edu
it.johnshopkins.edu
kasslab.johnshopkins.edu
cloudapps.johnshopkins.edu
epicmobile.johnshopkins.edu
ndestest2.johnshopkins.edu
jhbcaweb.johnshopkins.edu
myit.jh.edu
search.johnshopkins.edu
esmepicmmcnp.esm.johnshopkins.edu
esgbloxtest.johnshopkins.edu
mobiletest.johnshopkins.edu
mobile.johnshopkins.edu
esgbloxtest.johnshopkins.edu
jhcred.esm.johnshopkins.edu
jhcred.esm.johnshopkins.edu
hdaidev.esm.johnshopkins.edu
mobile.johnshopkins.edu
e210.johnshopkins.edu
kasslab.johnshopkins.edu
esmepicepseinp.esm.johnshopkins.edu
offwebapps.johnshopkins.edu
jhcredtst.esm.johnshopkins.edu
operations.onecampus.com
idp.jh.edu
mdmtst.johnshopkins.edu
gssbcaweb.johnshopkins.edu
webct.jhu.edu
onmyway.johnshopkins.edu
smtptest.johnshopkins.edu
connectweb3.johnshopkins.edu
mobiletestmail.johnshopkins.edu
freefood.johnshopkins.edu
mobile.johnshopkins.edu
epicshib.johnshopkins.edu
esmepiciconnnp.esm.johnshopkins.edu
idp.jh.edu
devvirtualvisit.jhmi.edu
logindev.johnshopkins.edu
adfs.johnshopkins.edu
digital.pathology.johnshopkins.edu
stage.johnshopkins.edu
srvmgr.johnshopkins.edu
devrpad.jhu.edu
adfstest.johnshopkins.edu
esmepicmmcnp.esm.johnshopkins.edu
freefood.johnshopkins.edu
connect.johnshopkins.edu
mobile.johnshopkins.edu
*.johnshopkins.edu
ebaccess.jhu.edu
mysite.johnshopkins.edu
kasslab.johnshopkins.edu
hpo.johnshopkins.edu
kasslab.johnshopkins.edu
trcoeus.johnshopkins.edu
hdaiqa.esm.johnshopkins.edu
e210.johnshopkins.edu
mobile.johnshopkins.edu
testidp.jh.edu
jhcred.esm.johnshopkins.edu
mobiletestmail.johnshopkins.edu
mobiletestmail.johnshopkins.edu
jhbomgarprod1.hosts.jhmi.edu
enterpriseauth.johnshopkins.edu
operations.onecampus.com
kasslab.johnshopkins.edu
logintest.johnshopkins.edu
operations.onecampus.com
prcoeus.johnshopkins.edu
devreotes.johnshopkins.edu
testidp.jh.edu
*.erp.johnshopkins.edu
esmepicmmcpnp.esm.johnshopkins.edu
jhepicsoaptst.esm.johnshopkins.edu
kasslab.johnshopkins.edu
wmsscale.esm.johnshopkins.edu
ipmtwspamq.johnshopkins.edu
kasslab.johnshopkins.edu
idp.jh.edu
e210.johnshopkins.edu
ictr.johnshopkins.edu
jhepicsoaphtst.esm.johnshopkins.edu
mobile.johnshopkins.edu
mysupportbeta.jh.edu

Certificate

The complete raw certificate details for mobiletest.johnshopkins.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aTYKDEYIARzV+jvqEiQ
TvfTeRR1A2ab+DCVrk7uH17Hdy/Doyro/Y5cVpE3a2roSTZItg6IXArDiaxPUpfL
w9KYuj70Lm7sJQJ2HSwA5X+lTgrKMiLj7RhLPpvca1s7Q5RMu/LqJZ9rud7qTbh2
zYpPTLoTHwlaitllKZoFLt5GygbLiMKtcBBH1Fqyso2FpVEj3LMY9C/HQwiPWHdv
irOWGKl/6+gtFRnXEDGHnTcoBS+oZSC8eoEvaWdMGaDfnymLAEyfXtOKAAhHhGpn
9SzzEgv9c0xyPeZ4xghXseriEl3IBE+Ek2wJ4PKfu0/57tlbVS/b9XXU2o08waU7
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 151740956891044669304325235972876075247
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '21209'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baltimore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5801 Smith Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johns Hopkins University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mobiletest.johnshopkins.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27474999962804250617466493292115108729833877863930055780147924459906152214488360816367285592420618045689423763391075799081566625165095506289649523435267375598633087065107666556921113034266825169251077412335785850404685456011769835570263185181458290868868990586707797550609886799735905934818047433386324553550327218550611782836840292890864175313836891823483833551580667325552636654243142945435402171871457425351716491024761623811420843031369134838710340925213661782597419972170384948256853242425277508938323462627080618998425709416215094530615478008338818353712119315040867813358511054171524533668560182326506421566453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a5e8be69d3eccc45aaca8760eb44dbe11bebe57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (402 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobiletest.johnshopkins.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2010test1.wintest.adtest.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2010test11.wintest.adtest.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2010test3.wintest.adtest.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2013test1.wintest.adtest.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2013test2.wintest.adtest.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.wintest.adtest.jhmi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.wintest.adtest.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.jh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile15.johnshopkins.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobiletestcba.johnshopkins.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wintest.adtest.jhmi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wintest.adtest.jhu.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00687e205a5d257a6b37d9b0949f2b6b7ef236df909c025666f2b5bf04ee04d355e2755f428a7584923a6dab63b27557459a87da8e872091abb8fd3eb95e7149feebd6f40170fa240bdd7317ee000264cf92abf7821e52f8ba9b386b5fefe4d25b7a8a31baf93a7bf34c1e2086c91031565376015e83c258e16cc30f849a506da699eb1920125326ed948e1d70b5e5f60812a635dcfb56b3d2a33bc0671856e9bccf83725c77929c821b273684a652cf1b61fe48213a11989f473545b5e2513b3a93c694f9b0fd50993d19b942b5a8a50a56f826a61ec0e362e788a16b7d1d15a30924431a79e2c6a5a13f72758216ed969828a8c1ec407e4ecb5b207208f329b5